Moderate: container-tools:4.0 security and bug fix update

2023-11-1400:00:00

errata.almalinux.org

container-tools module podman buildah skopeo runc security bug fix golang net/http cvss bz#2242871 unix

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.1%

JSON

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

could not find symbol criu_set_lsm_mount_context in libcriu.so (BZ#2242871)

OSVersionArchitecturePackageVersionFilename
almalinux8noarchpodman-docker< 4.0.2-24.module_el8.9.0+3627+db8ec155podman-docker-4.0.2-24.module_el8.9.0+3627+db8ec155.noarch.rpm
almalinux8noarchcockpit-podman< 46-1.module_el8.7.0+3344+5bcd850fcockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.noarch.rpm
almalinux8noarchudica< 0.2.6-4.module_el8.9.0+3627+db8ec155udica-0.2.6-4.module_el8.9.0+3627+db8ec155.noarch.rpm
almalinux8noarchcontainer-selinux< 2.205.0-3.module_el8.9.0+3687+dcd7ef8fcontainer-selinux-2.205.0-3.module_el8.9.0+3687+dcd7ef8f.noarch.rpm
almalinux8aarch64conmon< 2.1.4-2.module_el8.9.0+3627+db8ec155conmon-2.1.4-2.module_el8.9.0+3627+db8ec155.aarch64.rpm
almalinux8aarch64oci-seccomp-bpf-hook< 1.2.5-2.module_el8.8.0+3468+16b86c82oci-seccomp-bpf-hook-1.2.5-2.module_el8.8.0+3468+16b86c82.aarch64.rpm
almalinux8aarch64buildah< 1.24.6-7.module_el8.9.0+3627+db8ec155buildah-1.24.6-7.module_el8.9.0+3627+db8ec155.aarch64.rpm
almalinux8aarch64podman< 4.0.2-24.module_el8.9.0+3627+db8ec155podman-4.0.2-24.module_el8.9.0+3627+db8ec155.aarch64.rpm
almalinux8aarch64fuse-overlayfs< 1.9-2.module_el8.9.0+3627+db8ec155fuse-overlayfs-1.9-2.module_el8.9.0+3627+db8ec155.aarch64.rpm
almalinux8aarch64podman-remote< 4.0.2-24.module_el8.9.0+3627+db8ec155podman-remote-4.0.2-24.module_el8.9.0+3627+db8ec155.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	noarch	podman-docker	< 4.0.2-24.module_el8.9.0+3627+db8ec155	podman-docker-4.0.2-24.module_el8.9.0+3627+db8ec155.noarch.rpm
almalinux	8	noarch	cockpit-podman	< 46-1.module_el8.7.0+3344+5bcd850f	cockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.noarch.rpm
almalinux	8	noarch	udica	< 0.2.6-4.module_el8.9.0+3627+db8ec155	udica-0.2.6-4.module_el8.9.0+3627+db8ec155.noarch.rpm
almalinux	8	noarch	container-selinux	< 2.205.0-3.module_el8.9.0+3687+dcd7ef8f	container-selinux-2.205.0-3.module_el8.9.0+3687+dcd7ef8f.noarch.rpm
almalinux	8	aarch64	conmon	< 2.1.4-2.module_el8.9.0+3627+db8ec155	conmon-2.1.4-2.module_el8.9.0+3627+db8ec155.aarch64.rpm
almalinux	8	aarch64	oci-seccomp-bpf-hook	< 1.2.5-2.module_el8.8.0+3468+16b86c82	oci-seccomp-bpf-hook-1.2.5-2.module_el8.8.0+3468+16b86c82.aarch64.rpm
almalinux	8	aarch64	buildah	< 1.24.6-7.module_el8.9.0+3627+db8ec155	buildah-1.24.6-7.module_el8.9.0+3627+db8ec155.aarch64.rpm
almalinux	8	aarch64	podman	< 4.0.2-24.module_el8.9.0+3627+db8ec155	podman-4.0.2-24.module_el8.9.0+3627+db8ec155.aarch64.rpm
almalinux	8	aarch64	fuse-overlayfs	< 1.9-2.module_el8.9.0+3627+db8ec155	fuse-overlayfs-1.9-2.module_el8.9.0+3627+db8ec155.aarch64.rpm
almalinux	8	aarch64	podman-remote	< 4.0.2-24.module_el8.9.0+3627+db8ec155	podman-remote-4.0.2-24.module_el8.9.0+3627+db8ec155.aarch64.rpm