(RHSA-2021:1796) Moderate: container-tools:rhel8 security, bug fix, and enhancement update

2021-05-1806:06:39

access.redhat.com

0.005 Low

EPSS

Percentile

77.5%

JSON

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference (CVE-2020-29652)
podman: Remote traffic to rootless containers is seen as orginating from localhost (CVE-2021-20199)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64leskopeo-tests< 1.2.2-8.module+el8.4.0+10607+f4da7515skopeo-tests-1.2.2-8.module+el8.4.0+10607+f4da7515.ppc64le.rpm
RedHatanyppc64lefuse-overlayfs-debuginfo< 1.4.0-2.module+el8.4.0+10607+f4da7515fuse-overlayfs-debuginfo-1.4.0-2.module+el8.4.0+10607+f4da7515.ppc64le.rpm
RedHatanyx86_64slirp4netns-debuginfo< 1.1.8-1.module+el8.4.0+10607+f4da7515slirp4netns-debuginfo-1.1.8-1.module+el8.4.0+10607+f4da7515.x86_64.rpm
RedHatanyaarch64libslirp-debugsource< 4.3.1-1.module+el8.4.0+10607+f4da7515libslirp-debugsource-4.3.1-1.module+el8.4.0+10607+f4da7515.aarch64.rpm
RedHatanyx86_64crun< 0.18-1.module+el8.4.0+10607+f4da7515crun-0.18-1.module+el8.4.0+10607+f4da7515.x86_64.rpm
RedHatanyx86_64podman-debugsource< 3.0.1-6.module+el8.4.0+10607+f4da7515podman-debugsource-3.0.1-6.module+el8.4.0+10607+f4da7515.x86_64.rpm
RedHatanyx86_64buildah< 1.19.7-1.module+el8.4.0+10607+f4da7515buildah-1.19.7-1.module+el8.4.0+10607+f4da7515.x86_64.rpm
RedHatanynoarchtoolbox< 0.0.8-1.module+el8.4.0+10607+f4da7515toolbox-0.0.8-1.module+el8.4.0+10607+f4da7515.noarch.rpm
RedHatanyppc64leskopeo< 1.2.2-8.module+el8.4.0+10607+f4da7515skopeo-1.2.2-8.module+el8.4.0+10607+f4da7515.ppc64le.rpm
RedHatanyppc64leskopeo-debugsource< 1.2.2-8.module+el8.4.0+10607+f4da7515skopeo-debugsource-1.2.2-8.module+el8.4.0+10607+f4da7515.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64le	skopeo-tests	< 1.2.2-8.module+el8.4.0+10607+f4da7515	skopeo-tests-1.2.2-8.module+el8.4.0+10607+f4da7515.ppc64le.rpm
RedHat	any	ppc64le	fuse-overlayfs-debuginfo	< 1.4.0-2.module+el8.4.0+10607+f4da7515	fuse-overlayfs-debuginfo-1.4.0-2.module+el8.4.0+10607+f4da7515.ppc64le.rpm
RedHat	any	x86_64	slirp4netns-debuginfo	< 1.1.8-1.module+el8.4.0+10607+f4da7515	slirp4netns-debuginfo-1.1.8-1.module+el8.4.0+10607+f4da7515.x86_64.rpm
RedHat	any	aarch64	libslirp-debugsource	< 4.3.1-1.module+el8.4.0+10607+f4da7515	libslirp-debugsource-4.3.1-1.module+el8.4.0+10607+f4da7515.aarch64.rpm
RedHat	any	x86_64	crun	< 0.18-1.module+el8.4.0+10607+f4da7515	crun-0.18-1.module+el8.4.0+10607+f4da7515.x86_64.rpm
RedHat	any	x86_64	podman-debugsource	< 3.0.1-6.module+el8.4.0+10607+f4da7515	podman-debugsource-3.0.1-6.module+el8.4.0+10607+f4da7515.x86_64.rpm
RedHat	any	x86_64	buildah	< 1.19.7-1.module+el8.4.0+10607+f4da7515	buildah-1.19.7-1.module+el8.4.0+10607+f4da7515.x86_64.rpm
RedHat	any	noarch	toolbox	< 0.0.8-1.module+el8.4.0+10607+f4da7515	toolbox-0.0.8-1.module+el8.4.0+10607+f4da7515.noarch.rpm
RedHat	any	ppc64le	skopeo	< 1.2.2-8.module+el8.4.0+10607+f4da7515	skopeo-1.2.2-8.module+el8.4.0+10607+f4da7515.ppc64le.rpm
RedHat	any	ppc64le	skopeo-debugsource	< 1.2.2-8.module+el8.4.0+10607+f4da7515	skopeo-debugsource-1.2.2-8.module+el8.4.0+10607+f4da7515.ppc64le.rpm