(RHSA-2024:3968) Moderate: container-tools:rhel8 bug fix and enhancement update

2024-06-1800:12:55

access.redhat.com

podman

buildah

skopeo

runc

jose-go

cve-2024-28180

cve-2024-28176

red hat enterprise linux 8

release notes

container tools

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

Low

JSON

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

podman: jose-go: improper handling of highly compressed data (CVE-2024-28180)
buildah: jose-go: improper handling of highly compressed data (CVE-2024-28180)
podman: jose-go: resource exhaustion (CVE-2024-28176)
buildah: jose-go: resource exhaustion (CVE-2024-28176)
skopeo: jose-go: resource exhaustion (CVE-2024-28176)

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyaarch64buildah-debugsource< 1.33.7-2.module+el8.10.0+21962+8143777bbuildah-debugsource-1.33.7-2.module+el8.10.0+21962+8143777b.aarch64.rpm
RedHatanyx86_64slirp4netns-debuginfo< 1.2.3-1.module+el8.10.0+21962+8143777bslirp4netns-debuginfo-1.2.3-1.module+el8.10.0+21962+8143777b.x86_64.rpm
RedHatanyppc64letoolbox< 0.0.99.5-2.module+el8.10.0+21962+8143777btoolbox-0.0.99.5-2.module+el8.10.0+21962+8143777b.ppc64le.rpm
RedHatanyaarch64crun< 1.14.3-2.module+el8.10.0+21962+8143777bcrun-1.14.3-2.module+el8.10.0+21962+8143777b.aarch64.rpm
RedHatanyppc64lerunc-debuginfo< 1.1.12-1.module+el8.10.0+21974+acd2159crunc-debuginfo-1.1.12-1.module+el8.10.0+21974+acd2159c.ppc64le.rpm
RedHatanys390xconmon-debuginfo< 2.1.10-1.module+el8.10.0+21962+8143777bconmon-debuginfo-2.1.10-1.module+el8.10.0+21962+8143777b.s390x.rpm
RedHatanys390xtoolbox-debugsource< 0.0.99.5-2.module+el8.10.0+21962+8143777btoolbox-debugsource-0.0.99.5-2.module+el8.10.0+21962+8143777b.s390x.rpm
RedHatanyaarch64slirp4netns-debuginfo< 1.2.3-1.module+el8.10.0+21962+8143777bslirp4netns-debuginfo-1.2.3-1.module+el8.10.0+21962+8143777b.aarch64.rpm
RedHatanyaarch64runc-debuginfo< 1.1.12-1.module+el8.10.0+21974+acd2159crunc-debuginfo-1.1.12-1.module+el8.10.0+21974+acd2159c.aarch64.rpm
RedHatanys390xconmon-debugsource< 2.1.10-1.module+el8.10.0+21962+8143777bconmon-debugsource-2.1.10-1.module+el8.10.0+21962+8143777b.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	aarch64	buildah-debugsource	< 1.33.7-2.module+el8.10.0+21962+8143777b	buildah-debugsource-1.33.7-2.module+el8.10.0+21962+8143777b.aarch64.rpm
RedHat	any	x86_64	slirp4netns-debuginfo	< 1.2.3-1.module+el8.10.0+21962+8143777b	slirp4netns-debuginfo-1.2.3-1.module+el8.10.0+21962+8143777b.x86_64.rpm
RedHat	any	ppc64le	toolbox	< 0.0.99.5-2.module+el8.10.0+21962+8143777b	toolbox-0.0.99.5-2.module+el8.10.0+21962+8143777b.ppc64le.rpm
RedHat	any	aarch64	crun	< 1.14.3-2.module+el8.10.0+21962+8143777b	crun-1.14.3-2.module+el8.10.0+21962+8143777b.aarch64.rpm
RedHat	any	ppc64le	runc-debuginfo	< 1.1.12-1.module+el8.10.0+21974+acd2159c	runc-debuginfo-1.1.12-1.module+el8.10.0+21974+acd2159c.ppc64le.rpm
RedHat	any	s390x	conmon-debuginfo	< 2.1.10-1.module+el8.10.0+21962+8143777b	conmon-debuginfo-2.1.10-1.module+el8.10.0+21962+8143777b.s390x.rpm
RedHat	any	s390x	toolbox-debugsource	< 0.0.99.5-2.module+el8.10.0+21962+8143777b	toolbox-debugsource-0.0.99.5-2.module+el8.10.0+21962+8143777b.s390x.rpm
RedHat	any	aarch64	slirp4netns-debuginfo	< 1.2.3-1.module+el8.10.0+21962+8143777b	slirp4netns-debuginfo-1.2.3-1.module+el8.10.0+21962+8143777b.aarch64.rpm
RedHat	any	aarch64	runc-debuginfo	< 1.1.12-1.module+el8.10.0+21974+acd2159c	runc-debuginfo-1.1.12-1.module+el8.10.0+21974+acd2159c.aarch64.rpm
RedHat	any	s390x	conmon-debugsource	< 2.1.10-1.module+el8.10.0+21962+8143777b	conmon-debugsource-2.1.10-1.module+el8.10.0+21962+8143777b.s390x.rpm