containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure

The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launc...

containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure

The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launc...

openSUSE Security Update : buildah (openSUSE-2019-2137)

This update for buildah fixes the following issues : Security issue fixed : - CVE-2019-10214: Fixed missing enforcement of TLS connections. bsc1144065 This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks ...

OPENSUSE-SU-2019:2137-1 Security update for buildah

This update for buildah fixes the following issues: Security issue fixed: - CVE-2019-10214: Fixed missing enforcement of TLS connections. bsc1144065 This update was imported from the SUSE:SLE-15-SP1:Update update project...

Security update for buildah (important)

openSUSE Security Update: Security update for buildah Announcement ID: openSUSE-SU-2019:2137-1 Rating: important References: 1144065 Cross-References: CVE-2019-10214 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for buildah...

SUSE SLES15 Security Update : buildah (SUSE-SU-2019:2341-1)

This update for buildah fixes the following issues : Security issue fixed : CVE-2019-10214: Fixed missing enforcement of TLS connections. bsc1144065 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE-SU-2019:2341-1 Security update for buildah

This update for buildah fixes the following issues: Security issue fixed: - CVE-2019-10214: Fixed missing enforcement of TLS connections. bsc1144065...

openSUSE Security Update : podman / slirp4netns and libcontainers-common (openSUSE-2019-2044)

This is a version update for podman to version 1.4.4 bsc1143386. Additional changes by SUSE on top : - Remove fuse-overlayfs because it's currently an unsatisfied dependency on SLE bsc1143386 - Update libpod.conf to use correct infracommand - Update libpod.conf to use better versioned pause...

SUSE SLES15 Security Update : podman, slirp4netns / libcontainers-common (SUSE-SU-2019:2223-1)

This is a version update for podman to version 1.4.4 bsc1143386. Additional changes by SUSE on top : Remove fuse-overlayfs because it's currently an unsatisfied dependency on SLE bsc1143386 Update libpod.conf to use correct infracommand Update libpod.conf to use better versioned pause container...

Oracle Linux 8 : container-tools:rhel8 (ELSA-2019-0975)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0975 advisory. container-selinux 2:2.94-1.git1e99f1d - Resolves: 1690286 - bump to v2.94 - Resolves: 1693806, 1689255 2:2.89-1.git2521d0d - bump to v2.89 runc...

container-tools:rhel8 bug fix update

An update is available for oci-umount, oci-systemd-hook. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The container-tools module contains tools for working wi...

ALBA-2019:1956 container-tools:rhel8 bug fix update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Bug Fixes: podman exec rc-code needs to distinguish between stopped containers and non existing ones BZ1723470 Performance Problems with Podman on systems with IO load BZ1724522 podma...

container-tools:rhel8 bug fix update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Bug Fixes: podman exec rc-code needs to distinguish between stopped containers and non existing ones BZ1723470 Performance Problems with Podman on systems with IO load BZ1724522 podma...

Important: Red Hat Security Advisory: container-tools:rhel8 security and bug fix update

An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

ALSA-2019:0975 Important: container-tools:rhel8 security and bug fix update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: A flaw was found in the way runc handled system file descriptors when running containers. A malicious container could use this flaw to overwrite contents of the runc...

RLSA-2019:0975 Important: container-tools:rhel8 security and bug fix update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: A flaw was found in the way runc handled system file descriptors when running containers. A malicious container could use this flaw to overwrite contents of the runc...

Important: container-tools:rhel8 security and bug fix update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: A flaw was found in the way runc handled system file descriptors when running containers. A malicious container could use this flaw to overwrite contents of the runc...

ALBA-2019:0973 container-tools bug fix update

The container-tools package contains tools for working with containers, notably podman, buildah, skopeo, and runc. Users of container-tools are advised to upgrade to this updated package, which fixes several bugs...

container-tools bug fix update

The container-tools package contains tools for working with containers, notably podman, buildah, skopeo, and runc. Users of container-tools are advised to upgrade to this updated package, which fixes several bugs...

RHEL 8 : container-tools:rhel8 (RHSA-2019:0975)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0975 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: A flaw was found in...