Moderate: container-tools:rhel8 bug fix and enhancement update

2024-06-1800:00:00

errata.almalinux.org

container-tools

rhel8

podman

buildah

skopeo

runc

security fix

jose-go

resource exhaustion

highly compressed data

cve-2024-28180

cve-2024-28176

almalinuxrelease notes

unix

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

6.9 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.2%

JSON

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

podman: jose-go: improper handling of highly compressed data (CVE-2024-28180)
buildah: jose-go: improper handling of highly compressed data (CVE-2024-28180)
podman: jose-go: resource exhaustion (CVE-2024-28176)
buildah: jose-go: resource exhaustion (CVE-2024-28176)
skopeo: jose-go: resource exhaustion (CVE-2024-28176)

Additional Changes:

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8noarchcockpit-podman< 84.1-1.module_el8.10.0+3858+6ad51f9fcockpit-podman-84.1-1.module_el8.10.0+3858+6ad51f9f.noarch.rpm
almalinux8noarchpython3-podman< 4.9.0-1.module_el8.10.0+3792+03eaed9cpython3-podman-4.9.0-1.module_el8.10.0+3792+03eaed9c.noarch.rpm
almalinux8noarchudica< 0.2.6-21.module_el8.10.0+3858+6ad51f9fudica-0.2.6-21.module_el8.10.0+3858+6ad51f9f.noarch.rpm
almalinux8noarchcontainer-selinux< 2.229.0-2.module_el8.10.0+3858+6ad51f9fcontainer-selinux-2.229.0-2.module_el8.10.0+3858+6ad51f9f.noarch.rpm
almalinux8noarchpodman-docker< 4.9.4-3.module_el8.10.0+3858+6ad51f9fpodman-docker-4.9.4-3.module_el8.10.0+3858+6ad51f9f.noarch.rpm
almalinux8x86_64containernetworking-plugins< 1.4.0-2.module_el8.10.0+3858+6ad51f9fcontainernetworking-plugins-1.4.0-2.module_el8.10.0+3858+6ad51f9f.x86_64.rpm
almalinux8x86_64slirp4netns< 1.2.3-1.module_el8.10.0+3845+87b84552slirp4netns-1.2.3-1.module_el8.10.0+3845+87b84552.x86_64.rpm
almalinux8x86_64criu-devel< 3.18-5.module_el8.10.0+3858+6ad51f9fcriu-devel-3.18-5.module_el8.10.0+3858+6ad51f9f.x86_64.rpm
almalinux8x86_64criu-libs< 3.18-5.module_el8.10.0+3845+87b84552criu-libs-3.18-5.module_el8.10.0+3845+87b84552.x86_64.rpm
almalinux8x86_64crun< 1.14.3-2.module_el8.10.0+3858+6ad51f9fcrun-1.14.3-2.module_el8.10.0+3858+6ad51f9f.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	noarch	cockpit-podman	< 84.1-1.module_el8.10.0+3858+6ad51f9f	cockpit-podman-84.1-1.module_el8.10.0+3858+6ad51f9f.noarch.rpm
almalinux	8	noarch	python3-podman	< 4.9.0-1.module_el8.10.0+3792+03eaed9c	python3-podman-4.9.0-1.module_el8.10.0+3792+03eaed9c.noarch.rpm
almalinux	8	noarch	udica	< 0.2.6-21.module_el8.10.0+3858+6ad51f9f	udica-0.2.6-21.module_el8.10.0+3858+6ad51f9f.noarch.rpm
almalinux	8	noarch	container-selinux	< 2.229.0-2.module_el8.10.0+3858+6ad51f9f	container-selinux-2.229.0-2.module_el8.10.0+3858+6ad51f9f.noarch.rpm
almalinux	8	noarch	podman-docker	< 4.9.4-3.module_el8.10.0+3858+6ad51f9f	podman-docker-4.9.4-3.module_el8.10.0+3858+6ad51f9f.noarch.rpm
almalinux	8	x86_64	containernetworking-plugins	< 1.4.0-2.module_el8.10.0+3858+6ad51f9f	containernetworking-plugins-1.4.0-2.module_el8.10.0+3858+6ad51f9f.x86_64.rpm
almalinux	8	x86_64	slirp4netns	< 1.2.3-1.module_el8.10.0+3845+87b84552	slirp4netns-1.2.3-1.module_el8.10.0+3845+87b84552.x86_64.rpm
almalinux	8	x86_64	criu-devel	< 3.18-5.module_el8.10.0+3858+6ad51f9f	criu-devel-3.18-5.module_el8.10.0+3858+6ad51f9f.x86_64.rpm
almalinux	8	x86_64	criu-libs	< 3.18-5.module_el8.10.0+3845+87b84552	criu-libs-3.18-5.module_el8.10.0+3845+87b84552.x86_64.rpm
almalinux	8	x86_64	crun	< 1.14.3-2.module_el8.10.0+3858+6ad51f9f	crun-1.14.3-2.module_el8.10.0+3858+6ad51f9f.x86_64.rpm