(RHSA-2023:7202) Moderate: container-tools:4.0 security and bug fix update

2023-11-1416:23:40

access.redhat.com

rhsa-2023-7202

moderate

container-tools

security

bug fix

golang

net/http

insufficient sanitization

host header

cve-2023-29406

cvss score

acknowledgments

bz#2242871

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.9%

JSON

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

could not find symbol criu_set_lsm_mount_context in libcriu.so (BZ#2242871)

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64lecriu-libs< 3.15-3.module+el8.9.0+20325+b2853e6ecriu-libs-3.15-3.module+el8.9.0+20325+b2853e6e.ppc64le.rpm
RedHatanys390xskopeo-debuginfo< 1.6.2-9.module+el8.9.0+20325+b2853e6eskopeo-debuginfo-1.6.2-9.module+el8.9.0+20325+b2853e6e.s390x.rpm
RedHatanys390xcontainers-common< 1-38.module+el8.9.0+20325+b2853e6econtainers-common-1-38.module+el8.9.0+20325+b2853e6e.s390x.rpm
RedHatanys390xslirp4netns-debuginfo< 1.1.8-3.module+el8.9.0+20325+b2853e6eslirp4netns-debuginfo-1.1.8-3.module+el8.9.0+20325+b2853e6e.s390x.rpm
RedHatanyx86_64criu-libs< 3.15-3.module+el8.9.0+20325+b2853e6ecriu-libs-3.15-3.module+el8.9.0+20325+b2853e6e.x86_64.rpm
RedHatanys390xskopeo-tests< 1.6.2-9.module+el8.9.0+20325+b2853e6eskopeo-tests-1.6.2-9.module+el8.9.0+20325+b2853e6e.s390x.rpm
RedHatanys390xpodman-catatonit< 4.0.2-24.module+el8.9.0+20325+b2853e6epodman-catatonit-4.0.2-24.module+el8.9.0+20325+b2853e6e.s390x.rpm
RedHatanyaarch64buildah< 1.24.6-7.module+el8.9.0+20325+b2853e6ebuildah-1.24.6-7.module+el8.9.0+20325+b2853e6e.aarch64.rpm
RedHatanyaarch64oci-seccomp-bpf-hook-debugsource< 1.2.5-2.module+el8.9.0+20325+b2853e6eoci-seccomp-bpf-hook-debugsource-1.2.5-2.module+el8.9.0+20325+b2853e6e.aarch64.rpm
RedHatanys390xbuildah-debugsource< 1.24.6-7.module+el8.9.0+20325+b2853e6ebuildah-debugsource-1.24.6-7.module+el8.9.0+20325+b2853e6e.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64le	criu-libs	< 3.15-3.module+el8.9.0+20325+b2853e6e	criu-libs-3.15-3.module+el8.9.0+20325+b2853e6e.ppc64le.rpm
RedHat	any	s390x	skopeo-debuginfo	< 1.6.2-9.module+el8.9.0+20325+b2853e6e	skopeo-debuginfo-1.6.2-9.module+el8.9.0+20325+b2853e6e.s390x.rpm
RedHat	any	s390x	containers-common	< 1-38.module+el8.9.0+20325+b2853e6e	containers-common-1-38.module+el8.9.0+20325+b2853e6e.s390x.rpm
RedHat	any	s390x	slirp4netns-debuginfo	< 1.1.8-3.module+el8.9.0+20325+b2853e6e	slirp4netns-debuginfo-1.1.8-3.module+el8.9.0+20325+b2853e6e.s390x.rpm
RedHat	any	x86_64	criu-libs	< 3.15-3.module+el8.9.0+20325+b2853e6e	criu-libs-3.15-3.module+el8.9.0+20325+b2853e6e.x86_64.rpm
RedHat	any	s390x	skopeo-tests	< 1.6.2-9.module+el8.9.0+20325+b2853e6e	skopeo-tests-1.6.2-9.module+el8.9.0+20325+b2853e6e.s390x.rpm
RedHat	any	s390x	podman-catatonit	< 4.0.2-24.module+el8.9.0+20325+b2853e6e	podman-catatonit-4.0.2-24.module+el8.9.0+20325+b2853e6e.s390x.rpm
RedHat	any	aarch64	buildah	< 1.24.6-7.module+el8.9.0+20325+b2853e6e	buildah-1.24.6-7.module+el8.9.0+20325+b2853e6e.aarch64.rpm
RedHat	any	aarch64	oci-seccomp-bpf-hook-debugsource	< 1.2.5-2.module+el8.9.0+20325+b2853e6e	oci-seccomp-bpf-hook-debugsource-1.2.5-2.module+el8.9.0+20325+b2853e6e.aarch64.rpm
RedHat	any	s390x	buildah-debugsource	< 1.24.6-7.module+el8.9.0+20325+b2853e6e	buildah-debugsource-1.24.6-7.module+el8.9.0+20325+b2853e6e.s390x.rpm