(RHSA-2024:2097) Important: container-tools:4.0 security update

2024-04-2910:59:28

access.redhat.com

container-tools

security update

full container escape

cve-2024-1753

cvss score

7.2 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.7%

JSON

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

buildah: full container escape at build time (CVE-2024-1753)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64lecriu-devel< 3.15-3.module+el8.6.0+21719+09b58c97criu-devel-3.15-3.module+el8.6.0+21719+09b58c97.ppc64le.rpm
RedHatanyaarch64toolbox-debuginfo< 0.0.99.3-0.4.module+el8.6.0+21719+09b58c97toolbox-debuginfo-0.0.99.3-0.4.module+el8.6.0+21719+09b58c97.aarch64.rpm
RedHatanyaarch64crun-debugsource< 1.4.4-1.module+el8.6.0+21719+09b58c97crun-debugsource-1.4.4-1.module+el8.6.0+21719+09b58c97.aarch64.rpm
RedHatanyppc64lefuse-overlayfs< 1.8.2-1.module+el8.6.0+21719+09b58c97fuse-overlayfs-1.8.2-1.module+el8.6.0+21719+09b58c97.ppc64le.rpm
RedHatanyaarch64containernetworking-plugins< 1.0.1-1.module+el8.6.0+21719+09b58c97containernetworking-plugins-1.0.1-1.module+el8.6.0+21719+09b58c97.aarch64.rpm
RedHatanynoarchpython3-podman< 4.0.0-1.module+el8.6.0+21719+09b58c97python3-podman-4.0.0-1.module+el8.6.0+21719+09b58c97.noarch.rpm
RedHatanyaarch64fuse-overlayfs< 1.8.2-1.module+el8.6.0+21719+09b58c97fuse-overlayfs-1.8.2-1.module+el8.6.0+21719+09b58c97.aarch64.rpm
RedHatanyx86_64containernetworking-plugins-debugsource< 1.0.1-1.module+el8.6.0+21719+09b58c97containernetworking-plugins-debugsource-1.0.1-1.module+el8.6.0+21719+09b58c97.x86_64.rpm
RedHatanyppc64lecrun-debugsource< 1.4.4-1.module+el8.6.0+21719+09b58c97crun-debugsource-1.4.4-1.module+el8.6.0+21719+09b58c97.ppc64le.rpm
RedHatanyx86_64python3-criu< 3.15-3.module+el8.6.0+21719+09b58c97python3-criu-3.15-3.module+el8.6.0+21719+09b58c97.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64le	criu-devel	< 3.15-3.module+el8.6.0+21719+09b58c97	criu-devel-3.15-3.module+el8.6.0+21719+09b58c97.ppc64le.rpm
RedHat	any	aarch64	toolbox-debuginfo	< 0.0.99.3-0.4.module+el8.6.0+21719+09b58c97	toolbox-debuginfo-0.0.99.3-0.4.module+el8.6.0+21719+09b58c97.aarch64.rpm
RedHat	any	aarch64	crun-debugsource	< 1.4.4-1.module+el8.6.0+21719+09b58c97	crun-debugsource-1.4.4-1.module+el8.6.0+21719+09b58c97.aarch64.rpm
RedHat	any	ppc64le	fuse-overlayfs	< 1.8.2-1.module+el8.6.0+21719+09b58c97	fuse-overlayfs-1.8.2-1.module+el8.6.0+21719+09b58c97.ppc64le.rpm
RedHat	any	aarch64	containernetworking-plugins	< 1.0.1-1.module+el8.6.0+21719+09b58c97	containernetworking-plugins-1.0.1-1.module+el8.6.0+21719+09b58c97.aarch64.rpm
RedHat	any	noarch	python3-podman	< 4.0.0-1.module+el8.6.0+21719+09b58c97	python3-podman-4.0.0-1.module+el8.6.0+21719+09b58c97.noarch.rpm
RedHat	any	aarch64	fuse-overlayfs	< 1.8.2-1.module+el8.6.0+21719+09b58c97	fuse-overlayfs-1.8.2-1.module+el8.6.0+21719+09b58c97.aarch64.rpm
RedHat	any	x86_64	containernetworking-plugins-debugsource	< 1.0.1-1.module+el8.6.0+21719+09b58c97	containernetworking-plugins-debugsource-1.0.1-1.module+el8.6.0+21719+09b58c97.x86_64.rpm
RedHat	any	ppc64le	crun-debugsource	< 1.4.4-1.module+el8.6.0+21719+09b58c97	crun-debugsource-1.4.4-1.module+el8.6.0+21719+09b58c97.ppc64le.rpm
RedHat	any	x86_64	python3-criu	< 3.15-3.module+el8.6.0+21719+09b58c97	python3-criu-3.15-3.module+el8.6.0+21719+09b58c97.x86_64.rpm