(RHSA-2024:2084) Important: container-tools:4.0 security update

2024-04-2901:07:49

access.redhat.com

rhsa-2024-2084 container-tools buildah securityupdate cve-2024-1753 unix module podman skopeo runc cvssreferences fullcontainerescape.

7.2 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.2%

JSON

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

buildah: full container escape at build time (CVE-2024-1753)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64leconmon-debuginfo< 2.1.4-2.module+el8.9.0+21673+408ce8abconmon-debuginfo-2.1.4-2.module+el8.9.0+21673+408ce8ab.ppc64le.rpm
RedHatanys390xcriu-devel< 3.15-3.module+el8.9.0+21673+408ce8abcriu-devel-3.15-3.module+el8.9.0+21673+408ce8ab.s390x.rpm
RedHatanyppc64lepodman-gvproxy< 4.0.2-26.module+el8.9.0+21673+408ce8abpodman-gvproxy-4.0.2-26.module+el8.9.0+21673+408ce8ab.ppc64le.rpm
RedHatanys390xcontainernetworking-plugins< 1.1.1-6.module+el8.9.0+21673+408ce8abcontainernetworking-plugins-1.1.1-6.module+el8.9.0+21673+408ce8ab.s390x.rpm
RedHatanyppc64lecrun-debuginfo< 1.8.7-1.module+el8.9.0+21673+408ce8abcrun-debuginfo-1.8.7-1.module+el8.9.0+21673+408ce8ab.ppc64le.rpm
RedHatanyaarch64podman-plugins< 4.0.2-26.module+el8.9.0+21673+408ce8abpodman-plugins-4.0.2-26.module+el8.9.0+21673+408ce8ab.aarch64.rpm
RedHatanyx86_64containernetworking-plugins-debuginfo< 1.1.1-6.module+el8.9.0+21673+408ce8abcontainernetworking-plugins-debuginfo-1.1.1-6.module+el8.9.0+21673+408ce8ab.x86_64.rpm
RedHatanyppc64lecriu-libs-debuginfo< 3.15-3.module+el8.9.0+21673+408ce8abcriu-libs-debuginfo-3.15-3.module+el8.9.0+21673+408ce8ab.ppc64le.rpm
RedHatanyppc64lefuse-overlayfs-debuginfo< 1.9-2.module+el8.9.0+21673+408ce8abfuse-overlayfs-debuginfo-1.9-2.module+el8.9.0+21673+408ce8ab.ppc64le.rpm
RedHatanys390xpodman-debugsource< 4.0.2-26.module+el8.9.0+21673+408ce8abpodman-debugsource-4.0.2-26.module+el8.9.0+21673+408ce8ab.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64le	conmon-debuginfo	< 2.1.4-2.module+el8.9.0+21673+408ce8ab	conmon-debuginfo-2.1.4-2.module+el8.9.0+21673+408ce8ab.ppc64le.rpm
RedHat	any	s390x	criu-devel	< 3.15-3.module+el8.9.0+21673+408ce8ab	criu-devel-3.15-3.module+el8.9.0+21673+408ce8ab.s390x.rpm
RedHat	any	ppc64le	podman-gvproxy	< 4.0.2-26.module+el8.9.0+21673+408ce8ab	podman-gvproxy-4.0.2-26.module+el8.9.0+21673+408ce8ab.ppc64le.rpm
RedHat	any	s390x	containernetworking-plugins	< 1.1.1-6.module+el8.9.0+21673+408ce8ab	containernetworking-plugins-1.1.1-6.module+el8.9.0+21673+408ce8ab.s390x.rpm
RedHat	any	ppc64le	crun-debuginfo	< 1.8.7-1.module+el8.9.0+21673+408ce8ab	crun-debuginfo-1.8.7-1.module+el8.9.0+21673+408ce8ab.ppc64le.rpm
RedHat	any	aarch64	podman-plugins	< 4.0.2-26.module+el8.9.0+21673+408ce8ab	podman-plugins-4.0.2-26.module+el8.9.0+21673+408ce8ab.aarch64.rpm
RedHat	any	x86_64	containernetworking-plugins-debuginfo	< 1.1.1-6.module+el8.9.0+21673+408ce8ab	containernetworking-plugins-debuginfo-1.1.1-6.module+el8.9.0+21673+408ce8ab.x86_64.rpm
RedHat	any	ppc64le	criu-libs-debuginfo	< 3.15-3.module+el8.9.0+21673+408ce8ab	criu-libs-debuginfo-3.15-3.module+el8.9.0+21673+408ce8ab.ppc64le.rpm
RedHat	any	ppc64le	fuse-overlayfs-debuginfo	< 1.9-2.module+el8.9.0+21673+408ce8ab	fuse-overlayfs-debuginfo-1.9-2.module+el8.9.0+21673+408ce8ab.ppc64le.rpm
RedHat	any	s390x	podman-debugsource	< 4.0.2-26.module+el8.9.0+21673+408ce8ab	podman-debugsource-4.0.2-26.module+el8.9.0+21673+408ce8ab.s390x.rpm