Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat Container Tools for RHEL 8 Security Update

published 2 years ago

Summary

Red Hat has released a security update for its container tools on Red Hat Enterprise Linux 8. This update fixes a security issue that could allow an attacker to execute code on the system. If you're using Red Hat Enterprise Linux 8 and have installed the container tools, it's recommended to apply the update as soon as possible to ensure the security of your system.

What to do

Update redhat buildah to version 0:1.11.6-8.module+el8.2.0+6368+cf16aa14.
Update redhat buildah-debuginfo to version 0:1.11.6-8.module+el8.2.0+6368+cf16aa14.
Update redhat buildah-debugsource to version 0:1.11.6-8.module+el8.2.0+6368+cf16aa14.
Update redhat buildah-tests to version 0:1.11.6-8.module+el8.2.0+6368+cf16aa14.
Update redhat buildah-tests-debuginfo to version 0:1.11.6-8.module+el8.2.0+6368+cf16aa14.
Update redhat cockpit-podman to version 0:12-1.module+el8.2.0+6368+cf16aa14.
Update redhat conmon to version 2:2.0.6-1.module+el8.2.0+6368+cf16aa14.
Update redhat container-selinux to version 2:2.124.0-1.module+el8.2.0+6368+cf16aa14.
Update redhat containernetworking-plugins to version 0:0.8.3-5.module+el8.2.0+6368+cf16aa14.
Update redhat containernetworking-plugins-debuginfo to version 0:0.8.3-5.module+el8.2.0+6368+cf16aa14.
Update redhat containernetworking-plugins-debugsource to version 0:0.8.3-5.module+el8.2.0+6368+cf16aa14.
Update redhat containers-common to version 1:0.1.40-11.module+el8.2.0+6374+67f43e89.
Update redhat crit to version 0:3.12-9.module+el8.2.0+6368+cf16aa14.
Update redhat criu to version 0:3.12-9.module+el8.2.0+6368+cf16aa14.
Update redhat criu-debuginfo to version 0:3.12-9.module+el8.2.0+6368+cf16aa14.
Update redhat criu-debugsource to version 0:3.12-9.module+el8.2.0+6368+cf16aa14.
Update redhat fuse-overlayfs to version 0:0.7.2-5.module+el8.2.0+6368+cf16aa14.
Update redhat fuse-overlayfs-debuginfo to version 0:0.7.2-5.module+el8.2.0+6368+cf16aa14.
Update redhat fuse-overlayfs-debugsource to version 0:0.7.2-5.module+el8.2.0+6368+cf16aa14.
Update redhat podman to version 0:1.6.4-11.module+el8.2.0+6368+cf16aa14.
Update redhat podman-debuginfo to version 0:1.6.4-11.module+el8.2.0+6368+cf16aa14.
Update redhat podman-debugsource to version 0:1.6.4-11.module+el8.2.0+6368+cf16aa14.
Update redhat podman-docker to version 0:1.6.4-11.module+el8.2.0+6368+cf16aa14.
Update redhat podman-remote to version 0:1.6.4-11.module+el8.2.0+6368+cf16aa14.
Update redhat podman-remote-debuginfo to version 0:1.6.4-11.module+el8.2.0+6368+cf16aa14.
Update redhat podman-tests to version 0:1.6.4-11.module+el8.2.0+6368+cf16aa14.
Update redhat python-podman-api to version 0:1.2.0-0.2.gitd0a45fe.module+el8.2.0+6368+cf16aa14.
Update redhat python3-criu to version 0:3.12-9.module+el8.2.0+6368+cf16aa14.
Update redhat runc to version 0:1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14.
Update redhat runc-debuginfo to version 0:1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14.
Update redhat runc-debugsource to version 0:1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14.
Update redhat skopeo to version 1:0.1.40-11.module+el8.2.0+6374+67f43e89.
Update redhat skopeo-debuginfo to version 1:0.1.40-11.module+el8.2.0+6374+67f43e89.
Update redhat skopeo-debugsource to version 1:0.1.40-11.module+el8.2.0+6374+67f43e89.
Update redhat skopeo-tests to version 1:0.1.40-11.module+el8.2.0+6374+67f43e89.
Update redhat slirp4netns to version 0:0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14.
Update redhat slirp4netns-debuginfo to version 0:0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14.
Update redhat slirp4netns-debugsource to version 0:0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14.
Update redhat toolbox to version 0:0.0.7-1.module+el8.2.0+6368+cf16aa14.
Update redhat udica to version 0:0.2.1-2.module+el8.2.0+6368+cf16aa14.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:8::appstream	redhat	buildah	< 0:1.11.6-8.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:1.11.6-8.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	buildah-debuginfo	< 0:1.11.6-8.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:1.11.6-8.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	buildah-debugsource	< 0:1.11.6-8.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:1.11.6-8.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	buildah-tests	< 0:1.11.6-8.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:1.11.6-8.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	buildah-tests-debuginfo	< 0:1.11.6-8.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:1.11.6-8.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	cockpit-podman	< 0:12-1.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:12-1.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	conmon	< 2:2.0.6-1.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 2:2.0.6-1.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	container-selinux	< 2:2.124.0-1.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 2:2.124.0-1.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	containernetworking-plugins	< 0:0.8.3-5.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:0.8.3-5.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	containernetworking-plugins-debuginfo	< 0:0.8.3-5.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:0.8.3-5.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	containernetworking-plugins-debugsource	< 0:0.8.3-5.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:0.8.3-5.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	containers-common	< 1:0.1.40-11.module+el8.2.0+6374+67f43e89 Fix: upgrade to 1:0.1.40-11.module+el8.2.0+6374+67f43e89
Red Hat:enterprise_linux:8::appstream	redhat	crit	< 0:3.12-9.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:3.12-9.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	criu	< 0:3.12-9.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:3.12-9.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	criu-debuginfo	< 0:3.12-9.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:3.12-9.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	criu-debugsource	< 0:3.12-9.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:3.12-9.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	fuse-overlayfs	< 0:0.7.2-5.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:0.7.2-5.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	fuse-overlayfs-debuginfo	< 0:0.7.2-5.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:0.7.2-5.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	fuse-overlayfs-debugsource	< 0:0.7.2-5.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:0.7.2-5.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	podman	< 0:1.6.4-11.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:1.6.4-11.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	podman-debuginfo	< 0:1.6.4-11.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:1.6.4-11.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	podman-debugsource	< 0:1.6.4-11.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:1.6.4-11.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	podman-docker	< 0:1.6.4-11.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:1.6.4-11.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	podman-remote	< 0:1.6.4-11.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:1.6.4-11.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	podman-remote-debuginfo	< 0:1.6.4-11.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:1.6.4-11.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	podman-tests	< 0:1.6.4-11.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:1.6.4-11.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	python-podman-api	< 0:1.2.0-0.2.gitd0a45fe.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:1.2.0-0.2.gitd0a45fe.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	python3-criu	< 0:3.12-9.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:3.12-9.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	runc	< 0:1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	runc-debuginfo	< 0:1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	runc-debugsource	< 0:1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	skopeo	< 1:0.1.40-11.module+el8.2.0+6374+67f43e89 Fix: upgrade to 1:0.1.40-11.module+el8.2.0+6374+67f43e89
Red Hat:enterprise_linux:8::appstream	redhat	skopeo-debuginfo	< 1:0.1.40-11.module+el8.2.0+6374+67f43e89 Fix: upgrade to 1:0.1.40-11.module+el8.2.0+6374+67f43e89
Red Hat:enterprise_linux:8::appstream	redhat	skopeo-debugsource	< 1:0.1.40-11.module+el8.2.0+6374+67f43e89 Fix: upgrade to 1:0.1.40-11.module+el8.2.0+6374+67f43e89
Red Hat:enterprise_linux:8::appstream	redhat	skopeo-tests	< 1:0.1.40-11.module+el8.2.0+6374+67f43e89 Fix: upgrade to 1:0.1.40-11.module+el8.2.0+6374+67f43e89
Red Hat:enterprise_linux:8::appstream	redhat	slirp4netns	< 0:0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	slirp4netns-debuginfo	< 0:0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	slirp4netns-debugsource	< 0:0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	toolbox	< 0:0.0.7-1.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:0.0.7-1.module+el8.2.0+6368+cf16aa14
Red Hat:enterprise_linux:8::appstream	redhat	udica	< 0:0.2.1-2.module+el8.2.0+6368+cf16aa14 Fix: upgrade to 0:0.2.1-2.module+el8.2.0+6368+cf16aa14

Original advisory text

Red Hat Security Advisory: container-tools:rhel8 security update

References

https://access.redhat.com/errata/RHSA-2020:1932 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1817651 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1932.j... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2020-10696 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2020-10696 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-10696 Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Timeline

Published20 Oct 2024

Updated8 Aug 2026

First seen8 Aug 2026

Sources

RHSA-2020:1932 · OSV

Track software like this

Free during beta