(RHSA-2020:1931) Important: container-tools:2.0 security update

2020-04-2816:07:22

access.redhat.com

0.004 Low

EPSS

Percentile

75.1%

JSON

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

buildah: Crafted input tar file may lead to local file overwrite during image build process (CVE-2020-10696)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64leslirp4netns-debugsource< 0.4.2-3.git21fdece.module+el8.2.0+6369+1f4293b4slirp4netns-debugsource-0.4.2-3.git21fdece.module+el8.2.0+6369+1f4293b4.ppc64le.rpm
RedHatanys390xcontainers-common< 0.1.40-9.module+el8.2.0+6373+4950d421containers-common-0.1.40-9.module+el8.2.0+6373+4950d421.s390x.rpm
RedHatanys390xrunc< 1.0.0-64.rc10.module+el8.2.0+6369+1f4293b4runc-1.0.0-64.rc10.module+el8.2.0+6369+1f4293b4.s390x.rpm
RedHatanyppc64leskopeo-tests< 0.1.40-9.module+el8.2.0+6373+4950d421skopeo-tests-0.1.40-9.module+el8.2.0+6373+4950d421.ppc64le.rpm
RedHatanyppc64lecriu-debugsource< 3.12-9.module+el8.2.0+6369+1f4293b4criu-debugsource-3.12-9.module+el8.2.0+6369+1f4293b4.ppc64le.rpm
RedHatanyppc64lepodman< 1.6.4-11.module+el8.2.0+6369+1f4293b4podman-1.6.4-11.module+el8.2.0+6369+1f4293b4.ppc64le.rpm
RedHatanyaarch64buildah-debuginfo< 1.11.6-7.module+el8.2.0+6369+1f4293b4buildah-debuginfo-1.11.6-7.module+el8.2.0+6369+1f4293b4.aarch64.rpm
RedHatanys390xbuildah< 1.11.6-7.module+el8.2.0+6369+1f4293b4buildah-1.11.6-7.module+el8.2.0+6369+1f4293b4.s390x.rpm
RedHatanyppc64lefuse-overlayfs< 0.7.2-5.module+el8.2.0+6369+1f4293b4fuse-overlayfs-0.7.2-5.module+el8.2.0+6369+1f4293b4.ppc64le.rpm
RedHatanyaarch64skopeo-debuginfo< 0.1.40-9.module+el8.2.0+6373+4950d421skopeo-debuginfo-0.1.40-9.module+el8.2.0+6373+4950d421.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64le	slirp4netns-debugsource	< 0.4.2-3.git21fdece.module+el8.2.0+6369+1f4293b4	slirp4netns-debugsource-0.4.2-3.git21fdece.module+el8.2.0+6369+1f4293b4.ppc64le.rpm
RedHat	any	s390x	containers-common	< 0.1.40-9.module+el8.2.0+6373+4950d421	containers-common-0.1.40-9.module+el8.2.0+6373+4950d421.s390x.rpm
RedHat	any	s390x	runc	< 1.0.0-64.rc10.module+el8.2.0+6369+1f4293b4	runc-1.0.0-64.rc10.module+el8.2.0+6369+1f4293b4.s390x.rpm
RedHat	any	ppc64le	skopeo-tests	< 0.1.40-9.module+el8.2.0+6373+4950d421	skopeo-tests-0.1.40-9.module+el8.2.0+6373+4950d421.ppc64le.rpm
RedHat	any	ppc64le	criu-debugsource	< 3.12-9.module+el8.2.0+6369+1f4293b4	criu-debugsource-3.12-9.module+el8.2.0+6369+1f4293b4.ppc64le.rpm
RedHat	any	ppc64le	podman	< 1.6.4-11.module+el8.2.0+6369+1f4293b4	podman-1.6.4-11.module+el8.2.0+6369+1f4293b4.ppc64le.rpm
RedHat	any	aarch64	buildah-debuginfo	< 1.11.6-7.module+el8.2.0+6369+1f4293b4	buildah-debuginfo-1.11.6-7.module+el8.2.0+6369+1f4293b4.aarch64.rpm
RedHat	any	s390x	buildah	< 1.11.6-7.module+el8.2.0+6369+1f4293b4	buildah-1.11.6-7.module+el8.2.0+6369+1f4293b4.s390x.rpm
RedHat	any	ppc64le	fuse-overlayfs	< 0.7.2-5.module+el8.2.0+6369+1f4293b4	fuse-overlayfs-0.7.2-5.module+el8.2.0+6369+1f4293b4.ppc64le.rpm
RedHat	any	aarch64	skopeo-debuginfo	< 0.1.40-9.module+el8.2.0+6373+4950d421	skopeo-debuginfo-0.1.40-9.module+el8.2.0+6373+4950d421.aarch64.rpm