Lucene search

RedHatRHSA-2024:3254

HistoryMay 22, 2024 - 10:41 a.m.

(RHSA-2024:3254) Important: container-tools:rhel8 security update

2024-05-2210:41:20

access.redhat.com

container-tools

rhel8

security update

podman

buildah

skopeo

runc

cve-2024-1753

cve-2022-2880

cve-2022-41715

cve-2024-24786

cve-2024-28180

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.2%

JSON

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

buildah: full container escape at build time (CVE-2024-1753)
golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)
golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)
golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786)
jose-go: improper handling of highly compressed data (CVE-2024-28180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanys390xrunc-debuginfo< 1.1.12-1.module+el8.10.0+21251+62b7388crunc-debuginfo-1.1.12-1.module+el8.10.0+21251+62b7388c.s390x.rpm
RedHatanyaarch64oci-seccomp-bpf-hook-debugsource< 1.2.10-1.module+el8.10.0+20565+a40ba0e5oci-seccomp-bpf-hook-debugsource-1.2.10-1.module+el8.10.0+20565+a40ba0e5.aarch64.rpm
RedHatanyx86_64criu< 3.18-5.module+el8.10.0+21672+01ba06aecriu-3.18-5.module+el8.10.0+21672+01ba06ae.x86_64.rpm
RedHatanynoarchudica< 0.2.6-21.module+el8.10.0+21672+01ba06aeudica-0.2.6-21.module+el8.10.0+21672+01ba06ae.noarch.rpm
RedHatanyx86_64crun< 1.14.3-2.module+el8.10.0+21340+c6c7475acrun-1.14.3-2.module+el8.10.0+21340+c6c7475a.x86_64.rpm
RedHatanyx86_64netavark< 1.10.3-1.module+el8.10.0+21306+6be40ce7netavark-1.10.3-1.module+el8.10.0+21306+6be40ce7.x86_64.rpm
RedHatanyaarch64skopeo< 1.14.3-2.module+el8.10.0+21728+a1d9b0abskopeo-1.14.3-2.module+el8.10.0+21728+a1d9b0ab.aarch64.rpm
RedHatanyppc64lenetavark< 1.10.3-1.module+el8.10.0+21306+6be40ce7netavark-1.10.3-1.module+el8.10.0+21306+6be40ce7.ppc64le.rpm
RedHatanys390xpodman-debuginfo< 4.9.4-1.module+el8.10.0+21632+761e0d34podman-debuginfo-4.9.4-1.module+el8.10.0+21632+761e0d34.s390x.rpm
RedHatanyaarch64conmon< 2.1.10-1.module+el8.10.0+21077+98b84d8aconmon-2.1.10-1.module+el8.10.0+21077+98b84d8a.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	s390x	runc-debuginfo	< 1.1.12-1.module+el8.10.0+21251+62b7388c	runc-debuginfo-1.1.12-1.module+el8.10.0+21251+62b7388c.s390x.rpm
RedHat	any	aarch64	oci-seccomp-bpf-hook-debugsource	< 1.2.10-1.module+el8.10.0+20565+a40ba0e5	oci-seccomp-bpf-hook-debugsource-1.2.10-1.module+el8.10.0+20565+a40ba0e5.aarch64.rpm
RedHat	any	x86_64	criu	< 3.18-5.module+el8.10.0+21672+01ba06ae	criu-3.18-5.module+el8.10.0+21672+01ba06ae.x86_64.rpm
RedHat	any	noarch	udica	< 0.2.6-21.module+el8.10.0+21672+01ba06ae	udica-0.2.6-21.module+el8.10.0+21672+01ba06ae.noarch.rpm
RedHat	any	x86_64	crun	< 1.14.3-2.module+el8.10.0+21340+c6c7475a	crun-1.14.3-2.module+el8.10.0+21340+c6c7475a.x86_64.rpm
RedHat	any	x86_64	netavark	< 1.10.3-1.module+el8.10.0+21306+6be40ce7	netavark-1.10.3-1.module+el8.10.0+21306+6be40ce7.x86_64.rpm
RedHat	any	aarch64	skopeo	< 1.14.3-2.module+el8.10.0+21728+a1d9b0ab	skopeo-1.14.3-2.module+el8.10.0+21728+a1d9b0ab.aarch64.rpm
RedHat	any	ppc64le	netavark	< 1.10.3-1.module+el8.10.0+21306+6be40ce7	netavark-1.10.3-1.module+el8.10.0+21306+6be40ce7.ppc64le.rpm
RedHat	any	s390x	podman-debuginfo	< 4.9.4-1.module+el8.10.0+21632+761e0d34	podman-debuginfo-4.9.4-1.module+el8.10.0+21632+761e0d34.s390x.rpm
RedHat	any	aarch64	conmon	< 2.1.10-1.module+el8.10.0+21077+98b84d8a	conmon-2.1.10-1.module+el8.10.0+21077+98b84d8a.aarch64.rpm

Rows per page:

1-10 of 2411