Lucene search

K
rockyRockylinux Product ErrataRLSA-2020:1931
HistoryApr 28, 2020 - 4:07 p.m.

container-tools:2.0 security update

2020-04-2816:07:22
Rockylinux Product Errata
errata.rockylinux.org
7

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

74.6%

An update is available for udica, toolbox, python-podman-api, slirp4netns, containernetworking-plugins, criu, cockpit-podman.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • buildah: Crafted input tar file may lead to local file overwrite during image build process (CVE-2020-10696)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
rocky8noarchcockpit-podman< 11-1.module+el8.5.0+770+e2f49861cockpit-podman-0:11-1.module+el8.5.0+770+e2f49861.noarch.rpm
rocky8noarchcockpit-podman< 11-1.module+el8.4.0+559+c02fa3b2cockpit-podman-0:11-1.module+el8.4.0+559+c02fa3b2.noarch.rpm
rocky8noarchcockpit-podman< 11-1.module+el8.5.0+708+6758137dcockpit-podman-0:11-1.module+el8.5.0+708+6758137d.noarch.rpm
rocky8aarch64containernetworking-plugins< 0.8.3-4.module+el8.5.0+770+e2f49861containernetworking-plugins-0:0.8.3-4.module+el8.5.0+770+e2f49861.aarch64.rpm
rocky8aarch64containernetworking-plugins< 0.8.3-4.module+el8.4.0+559+c02fa3b2containernetworking-plugins-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.aarch64.rpm
rocky8aarch64containernetworking-plugins< 0.8.3-4.module+el8.5.0+708+6758137dcontainernetworking-plugins-0:0.8.3-4.module+el8.5.0+708+6758137d.aarch64.rpm
rocky8x86_64containernetworking-plugins< 0.8.3-4.module+el8.5.0+770+e2f49861containernetworking-plugins-0:0.8.3-4.module+el8.5.0+770+e2f49861.x86_64.rpm
rocky8x86_64containernetworking-plugins< 0.8.3-4.module+el8.4.0+559+c02fa3b2containernetworking-plugins-0:0.8.3-4.module+el8.4.0+559+c02fa3b2.x86_64.rpm
rocky8x86_64containernetworking-plugins< 0.8.3-4.module+el8.5.0+708+6758137dcontainernetworking-plugins-0:0.8.3-4.module+el8.5.0+708+6758137d.x86_64.rpm
rocky8aarch64containernetworking-plugins-debuginfo< 0.8.3-4.module+el8.5.0+770+e2f49861containernetworking-plugins-debuginfo-0:0.8.3-4.module+el8.5.0+770+e2f49861.aarch64.rpm
Rows per page:
1-10 of 691

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

74.6%