Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
98
security advisorysecurity issuefile overwriteRedHat: RHSA-2020-1932-01 Important: Container-Tools Image Build Threat
An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: container-tools:rhel8 security update Advisory ID: RHSA-2020:1932-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:1932 Issue date: 2020-04-28 CVE Names: CVE-2020-10696 ==================================================================== 1. Summary: An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * buildah: Crafted input tar file may lead to local file overwrite during image build process (CVE-2020-10696) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1817651 - CVE-2020-10696 buildah: Crafted input tar file may lead to local file overwrite during image build process 6.Package List: Red Hat Enterprise Linux AppStream (v.8): Source: buildah-1.11.6-8.module+el8.2.0+6368+cf16aa14.src.rpm cockpit-podman-12-1.module+el8.2.0+6368+cf16aa14.src.rpm conmon-2.0.6-1.module+el8.2.0+6368+cf16aa14.src.rpm container-selinux-2.124.0-1.module+el8.2.0+6368+cf16aa14.src.rpm containernetworking-plugins-0.8.3-5.module+el8.2.0+6368+cf16aa14.src.rpm criu-3.12-9.module+el8.2.0+6368+cf16aa14.src.rpm fuse-overlayfs-0.7.2-5.module+el8.2.0+6368+cf16aa14.src.rpm podman-1.6.4-11.module+el8.2.0+6368+cf16aa14.src.rpm python-podman-api-1.2.0-0.2.gitd0a45fe.module+el8.2.0+6368+cf16aa14.src.rpm runc-1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14.src.rpm skopeo-0.1.40-11.module+el8.2.0+6374+67f43e89.src.rpm slirp4netns-0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14.src.rpm toolbox-0.0.7-1.module+el8.2.0+6368+cf16aa14.src.rpm udica-0.2.1-2.module+el8.2.0+6368+cf16aa14.src.rpm aarch64: buildah-1.11.6-8.module+el8.2.0+6368+cf16aa14.aarch64.rpm buildah-debuginfo-1.11.6-8.module+el8.2.0+6368+cf16aa14.aarch64.rpm buildah-debugsource-1.11.6-8.module+el8.2.0+6368+cf16aa14.aarch64.rpm buildah-tests-1.11.6-8.module+el8.2.0+6368+cf16aa14.aarch64.rpm buildah-tests-debuginfo-1.11.6-8.module+el8.2.0+6368+cf16aa14.aarch64.rpm conmon-2.0.6-1.module+el8.2.0+6368+cf16aa14.aarch64.rpm containernetworking-plugins-0.8.3-5.module+el8.2.0+6368+cf16aa14.aarch64.rpm containernetworking-plugins-debuginfo-0.8.3-5.module+el8.2.0+6368+cf16aa14.aarch64.rpm containernetworking-plugins-debugsource-0.8.3-5.module+el8.2.0+6368+cf16aa14.aarch64.rpm containers-common-0.1.40-11.module+el8.2.0+6374+67f43e89.aarch64.rpm crit-3.12-9.module+el8.2.0+6368+cf16aa14.aarch64.rpm criu-3.12-9.module+el8.2.0+6368+cf16aa14.aarch64.rpm criu-debuginfo-3.12-9.module+el8.2.0+6368+cf16aa14.aarch64.rpm criu-debugsource-3.12-9.module+el8.2.0+6368+cf16aa14.aarch64.rpm fuse-overlayfs-0.7.2-5.module+el8.2.0+6368+cf16aa14.aarch64.rpm fuse-overlayfs-debuginfo-0.7.2-5.module+el8.2.0+6368+cf16aa14.aarch64.rpm fuse-overlayfs-debugsource-0.7.2-5.module+el8.2.0+6368+cf16aa14.aarch64.rpm podman-1.6.4-11.module+el8.2.0+6368+cf16aa14.aarch64.rpm podman-debuginfo-1.6.4-11.module+el8.2.0+6368+cf16aa14.aarch64.rpm podman-debugsource-1.6.4-11.module+el8.2.0+6368+cf16aa14.aarch64.rpm podman-remote-1.6.4-11.module+el8.2.0+6368+cf16aa14.aarch64.rpm podman-remote-debuginfo-1.6.4-11.module+el8.2.0+6368+cf16aa14.aarch64.rpm podman-tests-1.6.4-11.module+el8.2.0+6368+cf16aa14.aarch64.rpm python3-criu-3.12-9.module+el8.2.0+6368+cf16aa14.aarch64.rpm runc-1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14.aarch64.rpm runc-debuginfo-1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14.aarch64.rpm runc-debugsource-1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14.aarch64.rpm skopeo-0.1.40-11.module+el8.2.0+6374+67f43e89.aarch64.rpm skopeo-debuginfo-0.1.40-11.module+el8.2.0+6374+67f43e89.aarch64.rpm skopeo-debugsource-0.1.40-11.module+el8.2.0+6374+67f43e89.aarch64.rpm skopeo-tests-0.1.40-11.module+el8.2.0+6374+67f43e89.aarch64.rpm slirp4netns-0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14.aarch64.rpm slirp4netns-debuginfo-0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14.aarch64.rpm slirp4netns-debugsource-0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14.aarch64.rpm noarch: cockpit-podman-12-1.module+el8.2.0+6368+cf16aa14.noarch.rpm container-selinux-2.124.0-1.module+el8.2.0+6368+cf16aa14.noarch.rpm podman-docker-1.6.4-11.module+el8.2.0+6368+cf16aa14.noarch.rpm python-podman-api-1.2.0-0.2.gitd0a45fe.module+el8.2.0+6368+cf16aa14.noarch.rpm toolbox-0.0.7-1.module+el8.2.0+6368+cf16aa14.noarch.rpm udica-0.2.1-2.module+el8.2.0+6368+cf16aa14.noarch.rpm ppc64le: buildah-1.11.6-8.module+el8.2.0+6368+cf16aa14.ppc64le.rpm buildah-debuginfo-1.11.6-8.module+el8.2.0+6368+cf16aa14.ppc64le.rpm buildah-debugsource-1.11.6-8.module+el8.2.0+6368+cf16aa14.ppc64le.rpm buildah-tests-1.11.6-8.module+el8.2.0+6368+cf16aa14.ppc64le.rpm buildah-tests-debuginfo-1.11.6-8.module+el8.2.0+6368+cf16aa14.ppc64le.rpm conmon-2.0.6-1.module+el8.2.0+6368+cf16aa14.ppc64le.rpm containernetworking-plugins-0.8.3-5.module+el8.2.0+6368+cf16aa14.ppc64le.rpm containernetworking-plugins-debuginfo-0.8.3-5.module+el8.2.0+6368+cf16aa14.ppc64le.rpm containernetworking-plugins-debugsource-0.8.3-5.module+el8.2.0+6368+cf16aa14.ppc64le.rpm containers-common-0.1.40-11.module+el8.2.0+6374+67f43e89.ppc64le.rpm crit-3.12-9.module+el8.2.0+6368+cf16aa14.ppc64le.rpm criu-3.12-9.module+el8.2.0+6368+cf16aa14.ppc64le.rpm criu-debuginfo-3.12-9.module+el8.2.0+6368+cf16aa14.ppc64le.rpm criu-debugsource-3.12-9.module+el8.2.0+6368+cf16aa14.ppc64le.rpm fuse-overlayfs-0.7.2-5.module+el8.2.0+6368+cf16aa14.ppc64le.rpm fuse-overlayfs-debuginfo-0.7.2-5.module+el8.2.0+6368+cf16aa14.ppc64le.rpm fuse-overlayfs-debugsource-0.7.2-5.module+el8.2.0+6368+cf16aa14.ppc64le.rpm podman-1.6.4-11.module+el8.2.0+6368+cf16aa14.ppc64le.rpm podman-debuginfo-1.6.4-11.module+el8.2.0+6368+cf16aa14.ppc64le.rpm podman-debugsource-1.6.4-11.module+el8.2.0+6368+cf16aa14.ppc64le.rpm podman-remote-1.6.4-11.module+el8.2.0+6368+cf16aa14.ppc64le.rpm podman-remote-debuginfo-1.6.4-11.module+el8.2.0+6368+cf16aa14.ppc64le.rpm podman-tests-1.6.4-11.module+el8.2.0+6368+cf16aa14.ppc64le.rpm python3-criu-3.12-9.module+el8.2.0+6368+cf16aa14.ppc64le.rpm runc-1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14.ppc64le.rpm runc-debuginfo-1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14.ppc64le.rpm runc-debugsource-1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14.ppc64le.rpm skopeo-0.1.40-11.module+el8.2.0+6374+67f43e89.ppc64le.rpm skopeo-debuginfo-0.1.40-11.module+el8.2.0+6374+67f43e89.ppc64le.rpm skopeo-debugsource-0.1.40-11.module+el8.2.0+6374+67f43e89.ppc64le.rpm skopeo-tests-0.1.40-11.module+el8.2.0+6374+67f43e89.ppc64le.rpm slirp4netns-0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14.ppc64le.rpm slirp4netns-debuginfo-0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14.ppc64le.rpm slirp4netns-debugsource-0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14.ppc64le.rpm s390x: buildah-1.11.6-8.module+el8.2.0+6368+cf16aa14.s390x.rpm buildah-debuginfo-1.11.6-8.module+el8.2.0+6368+cf16aa14.s390x.rpm buildah-debugsource-1.11.6-8.module+el8.2.0+6368+cf16aa14.s390x.rpm buildah-tests-1.11.6-8.module+el8.2.0+6368+cf16aa14.s390x.rpm buildah-tests-debuginfo-1.11.6-8.module+el8.2.0+6368+cf16aa14.s390x.rpm conmon-2.0.6-1.module+el8.2.0+6368+cf16aa14.s390x.rpm containernetworking-plugins-0.8.3-5.module+el8.2.0+6368+cf16aa14.s390x.rpm containernetworking-plugins-debuginfo-0.8.3-5.module+el8.2.0+6368+cf16aa14.s390x.rpm containernetworking-plugins-debugsource-0.8.3-5.module+el8.2.0+6368+cf16aa14.s390x.rpm containers-common-0.1.40-11.module+el8.2.0+6374+67f43e89.s390x.rpm crit-3.12-9.module+el8.2.0+6368+cf16aa14.s390x.rpm criu-3.12-9.module+el8.2.0+6368+cf16aa14.s390x.rpm criu-debuginfo-3.12-9.module+el8.2.0+6368+cf16aa14.s390x.rpm criu-debugsource-3.12-9.module+el8.2.0+6368+cf16aa14.s390x.rpm fuse-overlayfs-0.7.2-5.module+el8.2.0+6368+cf16aa14.s390x.rpm fuse-overlayfs-debuginfo-0.7.2-5.module+el8.2.0+6368+cf16aa14.s390x.rpm fuse-overlayfs-debugsource-0.7.2-5.module+el8.2.0+6368+cf16aa14.s390x.rpm podman-1.6.4-11.module+el8.2.0+6368+cf16aa14.s390x.rpm podman-debuginfo-1.6.4-11.module+el8.2.0+6368+cf16aa14.s390x.rpm podman-debugsource-1.6.4-11.module+el8.2.0+6368+cf16aa14.s390x.rpm podman-remote-1.6.4-11.module+el8.2.0+6368+cf16aa14.s390x.rpm podman-remote-debuginfo-1.6.4-11.module+el8.2.0+6368+cf16aa14.s390x.rpm podman-tests-1.6.4-11.module+el8.2.0+6368+cf16aa14.s390x.rpm python3-criu-3.12-9.module+el8.2.0+6368+cf16aa14.s390x.rpm runc-1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14.s390x.rpm runc-debuginfo-1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14.s390x.rpm runc-debugsource-1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14.s390x.rpm skopeo-0.1.40-11.module+el8.2.0+6374+67f43e89.s390x.rpm skopeo-debuginfo-0.1.40-11.module+el8.2.0+6374+67f43e89.s390x.rpm skopeo-debugsource-0.1.40-11.module+el8.2.0+6374+67f43e89.s390x.rpm skopeo-tests-0.1.40-11.module+el8.2.0+6374+67f43e89.s390x.rpm slirp4netns-0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14.s390x.rpm slirp4netns-debuginfo-0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14.s390x.rpm slirp4netns-debugsource-0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14.s390x.rpm x86_64: buildah-1.11.6-8.module+el8.2.0+6368+cf16aa14.x86_64.rpm buildah-debuginfo-1.11.6-8.module+el8.2.0+6368+cf16aa14.x86_64.rpm buildah-debugsource-1.11.6-8.module+el8.2.0+6368+cf16aa14.x86_64.rpm buildah-tests-1.11.6-8.module+el8.2.0+6368+cf16aa14.x86_64.rpm buildah-tests-debuginfo-1.11.6-8.module+el8.2.0+6368+cf16aa14.x86_64.rpm conmon-2.0.6-1.module+el8.2.0+6368+cf16aa14.x86_64.rpm containernetworking-plugins-0.8.3-5.module+el8.2.0+6368+cf16aa14.x86_64.rpm containernetworking-plugins-debuginfo-0.8.3-5.module+el8.2.0+6368+cf16aa14.x86_64.rpm containernetworking-plugins-debugsource-0.8.3-5.module+el8.2.0+6368+cf16aa14.x86_64.rpm containers-common-0.1.40-11.module+el8.2.0+6374+67f43e89.x86_64.rpm crit-3.12-9.module+el8.2.0+6368+cf16aa14.x86_64.rpm criu-3.12-9.module+el8.2.0+6368+cf16aa14.x86_64.rpm criu-debuginfo-3.12-9.module+el8.2.0+6368+cf16aa14.x86_64.rpm criu-debugsource-3.12-9.module+el8.2.0+6368+cf16aa14.x86_64.rpm fuse-overlayfs-0.7.2-5.module+el8.2.0+6368+cf16aa14.x86_64.rpm fuse-overlayfs-debuginfo-0.7.2-5.module+el8.2.0+6368+cf16aa14.x86_64.rpm fuse-overlayfs-debugsource-0.7.2-5.module+el8.2.0+6368+cf16aa14.x86_64.rpm podman-1.6.4-11.module+el8.2.0+6368+cf16aa14.x86_64.rpm podman-debuginfo-1.6.4-11.module+el8.2.0+6368+cf16aa14.x86_64.rpm podman-debugsource-1.6.4-11.module+el8.2.0+6368+cf16aa14.x86_64.rpm podman-remote-1.6.4-11.module+el8.2.0+6368+cf16aa14.x86_64.rpm podman-remote-debuginfo-1.6.4-11.module+el8.2.0+6368+cf16aa14.x86_64.rpm podman-tests-1.6.4-11.module+el8.2.0+6368+cf16aa14.x86_64.rpm python3-criu-3.12-9.module+el8.2.0+6368+cf16aa14.x86_64.rpm runc-1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14.x86_64.rpm runc-debuginfo-1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14.x86_64.rpm runc-debugsource-1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14.x86_64.rpm skopeo-0.1.40-11.module+el8.2.0+6374+67f43e89.x86_64.rpm skopeo-debuginfo-0.1.40-11.module+el8.2.0+6374+67f43e89.x86_64.rpm skopeo-debugsource-0.1.40-11.module+el8.2.0+6374+67f43e89.x86_64.rpm skopeo-tests-0.1.40-11.module+el8.2.0+6374+67f43e89.x86_64.rpm slirp4netns-0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14.x86_64.rpm slirp4netns-debuginfo-0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14.x86_64.rpm slirp4netns-debugsource-0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2020-10696 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXqiYcdzjgjWX9erEAQhMXA//czmrZ3bGflohTp2vMVxWD9bZEcbo8/7M fAaFSvbFsfUx+pzhJg6u88cQrfIeyfVFdlQH4Q+Gn16SiPvijLKiEEKgx/86NtLQ fdRkeBtxGf7P50g5g4zjKPVgsOhQXA6JI0REY9R+qz++PtYqh4pFb90hUxEb3o7L Pqvv0MpHkNJWewBocHTZ29Xw2OzMb3THAbveiH8cTpbe6uZuqW6wHc6UatmbbzuF eE3W6QJARXmIWM4EoUQdidclWO92/JJCJPVWirtj+IlSQ4yCxH3/NuUxRLfnpra7 6KofGCvO/OT9yv+UMSn8JPzs7ovcinl2ymtyGaSMOKIa+97GvGzdlru0X7QLRAmW 0ntlnQGcRwnnIEgvW8juxXow4i4ZWGTFlIauYyNV0xBPprZFdeG/+gm21HYYyJxB aI/qc2rAqWNsPzlZALLvMyiMHv9LOf9aeSOIxsRZJaALNOc78YQj79UTJllt/gym lCDMkxcltiAWtEOw3rFyo6InFPzga+xqiaG3MP9HjwqFtqu1xrfM690Lt2LOTbJz QbFejCwP7AWTuDWHMeJpD1L6SirLhur0/9Y/p5Bs7hI9Fvpm2JQYwfxckPlFu8Cn H9GZVZMzDjkk8EX5XvJPPfQOBm+7lkef22Egn4VuqezN0DD+DW5FDb24chM+47uF UdNXYywdzJE=P76v -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Apr 28, 2020
•Important
Red Hat
98
security advisoryred hatbug fixRedHat: RHSA-2020-1926-01 Critical: container-tools Local File Overwrite
An update for the container-tools:1.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: container-tools:1.0 security and bug fix update Advisory ID: RHSA-2020:1926-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:1926 Issue date: 2020-04-28 CVE Names: CVE-2020-10696 ==================================================================== 1. Summary: An update for the container-tools:1.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * buildah: Crafted input tar file may lead to local file overwrite during image build process (CVE-2020-10696) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * conflicting requests: failed to install container-tools:1.0 (BZ#1813776) * podman run container error with avc denied (BZ#1816541) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed(https://bugzilla.redhat.com/): 1776313 - create advisory for container-tools-1.0-8.2.0 1813776 - conflicting requests: failed to install container-tools:1.0 1816541 - podman run container error with avc denied 1817651 - CVE-2020-10696 buildah: Crafted input tar file may lead to local file overwrite during image build process 6. Package List: Red Hat Enterprise Linux AppStream (v.8): Source: buildah-1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.src.rpm container-selinux-2.124.0-1.gitf958d0c.module+el8.2.0+6370+6fb6c8ca.src.rpm containernetworking-plugins-0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.src.rpm criu-3.12-9.module+el8.2.0+6370+6fb6c8ca.src.rpm fuse-overlayfs-0.3-5.module+el8.2.0+6370+6fb6c8ca.src.rpm oci-systemd-hook-0.1.15-2.git2d0b8a3.module+el8.2.0+6370+6fb6c8ca.src.rpm oci-umount-2.3.4-2.git87f9237.module+el8.2.0+6370+6fb6c8ca.src.rpm podman-1.0.0-4.git921f98f.module+el8.2.0+6370+6fb6c8ca.src.rpm runc-1.0.0-56.rc5.dev.git2abd837.module+el8.2.0+6370+6fb6c8ca.src.rpm skopeo-0.1.32-4.git1715c90.module+el8.2.0+6370+6fb6c8ca.src.rpm slirp4netns-0.1-5.dev.gitc4e1bc5.module+el8.2.0+6370+6fb6c8ca.src.rpm aarch64: buildah-1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm buildah-debuginfo-1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm buildah-debugsource-1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm containernetworking-plugins-0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm containernetworking-plugins-debuginfo-0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm containernetworking-plugins-debugsource-0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm containers-common-0.1.32-4.git1715c90.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm crit-3.12-9.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm criu-3.12-9.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm criu-debuginfo-3.12-9.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm criu-debugsource-3.12-9.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm fuse-overlayfs-0.3-5.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm fuse-overlayfs-debuginfo-0.3-5.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm fuse-overlayfs-debugsource-0.3-5.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm oci-systemd-hook-0.1.15-2.git2d0b8a3.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm oci-systemd-hook-debuginfo-0.1.15-2.git2d0b8a3.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm oci-systemd-hook-debugsource-0.1.15-2.git2d0b8a3.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm oci-umount-2.3.4-2.git87f9237.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm oci-umount-debuginfo-2.3.4-2.git87f9237.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm oci-umount-debugsource-2.3.4-2.git87f9237.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm podman-1.0.0-4.git921f98f.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm podman-debuginfo-1.0.0-4.git921f98f.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm podman-debugsource-1.0.0-4.git921f98f.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm python3-criu-3.12-9.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm runc-1.0.0-56.rc5.dev.git2abd837.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm runc-debuginfo-1.0.0-56.rc5.dev.git2abd837.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm runc-debugsource-1.0.0-56.rc5.dev.git2abd837.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm skopeo-0.1.32-4.git1715c90.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm skopeo-debuginfo-0.1.32-4.git1715c90.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm skopeo-debugsource-0.1.32-4.git1715c90.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm slirp4netns-0.1-5.dev.gitc4e1bc5.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm slirp4netns-debuginfo-0.1-5.dev.gitc4e1bc5.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm slirp4netns-debugsource-0.1-5.dev.gitc4e1bc5.module+el8.2.0+6370+6fb6c8ca.aarch64.rpm noarch: container-selinux-2.124.0-1.gitf958d0c.module+el8.2.0+6370+6fb6c8ca.noarch.rpm podman-docker-1.0.0-4.git921f98f.module+el8.2.0+6370+6fb6c8ca.noarch.rpm ppc64le: buildah-1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm buildah-debuginfo-1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm buildah-debugsource-1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm containernetworking-plugins-0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm containernetworking-plugins-debuginfo-0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm containernetworking-plugins-debugsource-0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm containers-common-0.1.32-4.git1715c90.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm crit-3.12-9.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm criu-3.12-9.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm criu-debuginfo-3.12-9.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm criu-debugsource-3.12-9.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm fuse-overlayfs-0.3-5.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm fuse-overlayfs-debuginfo-0.3-5.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm fuse-overlayfs-debugsource-0.3-5.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm oci-systemd-hook-0.1.15-2.git2d0b8a3.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm oci-systemd-hook-debuginfo-0.1.15-2.git2d0b8a3.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm oci-systemd-hook-debugsource-0.1.15-2.git2d0b8a3.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm oci-umount-2.3.4-2.git87f9237.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm oci-umount-debuginfo-2.3.4-2.git87f9237.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm oci-umount-debugsource-2.3.4-2.git87f9237.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm podman-1.0.0-4.git921f98f.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm podman-debuginfo-1.0.0-4.git921f98f.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm podman-debugsource-1.0.0-4.git921f98f.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm python3-criu-3.12-9.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm runc-1.0.0-56.rc5.dev.git2abd837.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm runc-debuginfo-1.0.0-56.rc5.dev.git2abd837.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm runc-debugsource-1.0.0-56.rc5.dev.git2abd837.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm skopeo-0.1.32-4.git1715c90.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm skopeo-debuginfo-0.1.32-4.git1715c90.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm skopeo-debugsource-0.1.32-4.git1715c90.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm slirp4netns-0.1-5.dev.gitc4e1bc5.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm slirp4netns-debuginfo-0.1-5.dev.gitc4e1bc5.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm slirp4netns-debugsource-0.1-5.dev.gitc4e1bc5.module+el8.2.0+6370+6fb6c8ca.ppc64le.rpm s390x: buildah-1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.s390x.rpm buildah-debuginfo-1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.s390x.rpm buildah-debugsource-1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.s390x.rpm containernetworking-plugins-0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.s390x.rpm containernetworking-plugins-debuginfo-0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.s390x.rpm containernetworking-plugins-debugsource-0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.s390x.rpm containers-common-0.1.32-4.git1715c90.module+el8.2.0+6370+6fb6c8ca.s390x.rpm crit-3.12-9.module+el8.2.0+6370+6fb6c8ca.s390x.rpm criu-3.12-9.module+el8.2.0+6370+6fb6c8ca.s390x.rpm criu-debuginfo-3.12-9.module+el8.2.0+6370+6fb6c8ca.s390x.rpm criu-debugsource-3.12-9.module+el8.2.0+6370+6fb6c8ca.s390x.rpm fuse-overlayfs-0.3-5.module+el8.2.0+6370+6fb6c8ca.s390x.rpm fuse-overlayfs-debuginfo-0.3-5.module+el8.2.0+6370+6fb6c8ca.s390x.rpm fuse-overlayfs-debugsource-0.3-5.module+el8.2.0+6370+6fb6c8ca.s390x.rpm oci-systemd-hook-0.1.15-2.git2d0b8a3.module+el8.2.0+6370+6fb6c8ca.s390x.rpm oci-systemd-hook-debuginfo-0.1.15-2.git2d0b8a3.module+el8.2.0+6370+6fb6c8ca.s390x.rpm oci-systemd-hook-debugsource-0.1.15-2.git2d0b8a3.module+el8.2.0+6370+6fb6c8ca.s390x.rpm oci-umount-2.3.4-2.git87f9237.module+el8.2.0+6370+6fb6c8ca.s390x.rpm oci-umount-debuginfo-2.3.4-2.git87f9237.module+el8.2.0+6370+6fb6c8ca.s390x.rpm oci-umount-debugsource-2.3.4-2.git87f9237.module+el8.2.0+6370+6fb6c8ca.s390x.rpm podman-1.0.0-4.git921f98f.module+el8.2.0+6370+6fb6c8ca.s390x.rpm podman-debuginfo-1.0.0-4.git921f98f.module+el8.2.0+6370+6fb6c8ca.s390x.rpm podman-debugsource-1.0.0-4.git921f98f.module+el8.2.0+6370+6fb6c8ca.s390x.rpm python3-criu-3.12-9.module+el8.2.0+6370+6fb6c8ca.s390x.rpm runc-1.0.0-56.rc5.dev.git2abd837.module+el8.2.0+6370+6fb6c8ca.s390x.rpm runc-debuginfo-1.0.0-56.rc5.dev.git2abd837.module+el8.2.0+6370+6fb6c8ca.s390x.rpm runc-debugsource-1.0.0-56.rc5.dev.git2abd837.module+el8.2.0+6370+6fb6c8ca.s390x.rpm skopeo-0.1.32-4.git1715c90.module+el8.2.0+6370+6fb6c8ca.s390x.rpm skopeo-debuginfo-0.1.32-4.git1715c90.module+el8.2.0+6370+6fb6c8ca.s390x.rpm skopeo-debugsource-0.1.32-4.git1715c90.module+el8.2.0+6370+6fb6c8ca.s390x.rpm slirp4netns-0.1-5.dev.gitc4e1bc5.module+el8.2.0+6370+6fb6c8ca.s390x.rpm slirp4netns-debuginfo-0.1-5.dev.gitc4e1bc5.module+el8.2.0+6370+6fb6c8ca.s390x.rpm slirp4netns-debugsource-0.1-5.dev.gitc4e1bc5.module+el8.2.0+6370+6fb6c8ca.s390x.rpm x86_64: buildah-1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm buildah-debuginfo-1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm buildah-debugsource-1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm containernetworking-plugins-0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm containernetworking-plugins-debuginfo-0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm containernetworking-plugins-debugsource-0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm containers-common-0.1.32-4.git1715c90.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm crit-3.12-9.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm criu-3.12-9.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm criu-debuginfo-3.12-9.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm criu-debugsource-3.12-9.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm fuse-overlayfs-0.3-5.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm fuse-overlayfs-debuginfo-0.3-5.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm fuse-overlayfs-debugsource-0.3-5.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm oci-systemd-hook-0.1.15-2.git2d0b8a3.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm oci-systemd-hook-debuginfo-0.1.15-2.git2d0b8a3.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm oci-systemd-hook-debugsource-0.1.15-2.git2d0b8a3.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm oci-umount-2.3.4-2.git87f9237.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm oci-umount-debuginfo-2.3.4-2.git87f9237.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm oci-umount-debugsource-2.3.4-2.git87f9237.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm podman-1.0.0-4.git921f98f.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm podman-debuginfo-1.0.0-4.git921f98f.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm podman-debugsource-1.0.0-4.git921f98f.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm python3-criu-3.12-9.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm runc-1.0.0-56.rc5.dev.git2abd837.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm runc-debuginfo-1.0.0-56.rc5.dev.git2abd837.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm runc-debugsource-1.0.0-56.rc5.dev.git2abd837.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm skopeo-0.1.32-4.git1715c90.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm skopeo-debuginfo-0.1.32-4.git1715c90.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm skopeo-debugsource-0.1.32-4.git1715c90.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm slirp4netns-0.1-5.dev.gitc4e1bc5.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm slirp4netns-debuginfo-0.1-5.dev.gitc4e1bc5.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm slirp4netns-debugsource-0.1-5.dev.gitc4e1bc5.module+el8.2.0+6370+6fb6c8ca.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2020-10696 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXqiYbdzjgjWX9erEAQiX6Q//XAcN8Mxb59x6oBAW++pZssgKGyp2Vq1r /D5af9bhf5fDqqIoy2Y7fcJGurb66EeuZuwcwv3bB9bjsKd1vc48Ds+lJ+G8tNrZ 2B8WyApxox0xWCFAianKZD0EfGUTMUzK/d3WJ4RJyzuS45HoUZU9btlkiBOSMzFH rz1tusbQE5HQR/lgnwxyfBxJnokdNvK8QHN44H7Du2EQ+1j8VELvS6OKnfsMSbk5 yO0BpzBmt1wzdXmjtEynKMZQERbJNIlJUkI2c/IrePUvE303enNUrEl1c6WH1J8z h46ZxoNN7/AIywsz4cxAgxEe4pcd7SYJP6bT9epwqd4DO2zF0pSHvcbfwFCwQoPD BkWhmuPXmkFzO6au/PmflQp5yW6fcLsR8+ZmBCaNGOdfkmxMlueCFgDGGxGjA171 x1XLHMkpd3lLQHHycNb+7lDKPYlQq0PA64KHvkagaG+Y4yPbxDiGRI3iNeMHALnI w0A90AJLmL+rIQG9ypTSVPxnOxnF5x0v0irtTjucGdkxLQ2WJDCj4UiWbJO/Ig3V ghX9at4i94cEvJQPRnw9A0qiVqut+ynLucw3o4Lfz1/nLr+xn0psKHAC1rjIzq3Y FSiaHh7X7WoetPrO+ajs/1D2dewqvkzkET9vDFOZpj6m7K901GbLXs8xQigbwiok QXdz5UabWLM=mme8 -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Apr 28, 2020
•Important
Red Hat
98
security advisoryred hatimportantRed Hat: RHSA-2020-1931-01 Important: Container-Tools Local File Risk
An update for the container-tools:2.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: container-tools:2.0 security update Advisory ID: RHSA-2020:1931-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:1931 Issue date: 2020-04-28 CVE Names: CVE-2020-10696 ==================================================================== 1. Summary: An update for the container-tools:2.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * buildah: Crafted input tar file may lead to local file overwrite during image build process (CVE-2020-10696) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1817651 - CVE-2020-10696 buildah: Crafted input tar file may lead to local file overwrite during image build process 6. PackageList: Red Hat Enterprise Linux AppStream (v.8): Source: buildah-1.11.6-7.module+el8.2.0+6369+1f4293b4.src.rpm cockpit-podman-11-1.module+el8.2.0+6369+1f4293b4.src.rpm conmon-2.0.6-1.module+el8.2.0+6369+1f4293b4.src.rpm container-selinux-2.124.0-1.module+el8.2.0+6369+1f4293b4.src.rpm containernetworking-plugins-0.8.3-4.module+el8.2.0+6369+1f4293b4.src.rpm criu-3.12-9.module+el8.2.0+6369+1f4293b4.src.rpm fuse-overlayfs-0.7.2-5.module+el8.2.0+6369+1f4293b4.src.rpm podman-1.6.4-11.module+el8.2.0+6369+1f4293b4.src.rpm python-podman-api-1.2.0-0.2.gitd0a45fe.module+el8.2.0+6369+1f4293b4.src.rpm runc-1.0.0-64.rc10.module+el8.2.0+6369+1f4293b4.src.rpm skopeo-0.1.40-9.module+el8.2.0+6373+4950d421.src.rpm slirp4netns-0.4.2-3.git21fdece.module+el8.2.0+6369+1f4293b4.src.rpm toolbox-0.0.7-1.module+el8.2.0+6369+1f4293b4.src.rpm udica-0.2.1-2.module+el8.2.0+6369+1f4293b4.src.rpm aarch64: buildah-1.11.6-7.module+el8.2.0+6369+1f4293b4.aarch64.rpm buildah-debuginfo-1.11.6-7.module+el8.2.0+6369+1f4293b4.aarch64.rpm buildah-debugsource-1.11.6-7.module+el8.2.0+6369+1f4293b4.aarch64.rpm buildah-tests-1.11.6-7.module+el8.2.0+6369+1f4293b4.aarch64.rpm buildah-tests-debuginfo-1.11.6-7.module+el8.2.0+6369+1f4293b4.aarch64.rpm conmon-2.0.6-1.module+el8.2.0+6369+1f4293b4.aarch64.rpm containernetworking-plugins-0.8.3-4.module+el8.2.0+6369+1f4293b4.aarch64.rpm containernetworking-plugins-debuginfo-0.8.3-4.module+el8.2.0+6369+1f4293b4.aarch64.rpm containernetworking-plugins-debugsource-0.8.3-4.module+el8.2.0+6369+1f4293b4.aarch64.rpm containers-common-0.1.40-9.module+el8.2.0+6373+4950d421.aarch64.rpm crit-3.12-9.module+el8.2.0+6369+1f4293b4.aarch64.rpm criu-3.12-9.module+el8.2.0+6369+1f4293b4.aarch64.rpm criu-debuginfo-3.12-9.module+el8.2.0+6369+1f4293b4.aarch64.rpm criu-debugsource-3.12-9.module+el8.2.0+6369+1f4293b4.aarch64.rpm fuse-overlayfs-0.7.2-5.module+el8.2.0+6369+1f4293b4.aarch64.rpm fuse-overlayfs-debuginfo-0.7.2-5.module+el8.2.0+6369+1f4293b4.aarch64.rpm fuse-overlayfs-debugsource-0.7.2-5.module+el8.2.0+6369+1f4293b4.aarch64.rpm podman-1.6.4-11.module+el8.2.0+6369+1f4293b4.aarch64.rpm podman-debuginfo-1.6.4-11.module+el8.2.0+6369+1f4293b4.aarch64.rpm podman-debugsource-1.6.4-11.module+el8.2.0+6369+1f4293b4.aarch64.rpm podman-remote-1.6.4-11.module+el8.2.0+6369+1f4293b4.aarch64.rpm podman-remote-debuginfo-1.6.4-11.module+el8.2.0+6369+1f4293b4.aarch64.rpm podman-tests-1.6.4-11.module+el8.2.0+6369+1f4293b4.aarch64.rpm python3-criu-3.12-9.module+el8.2.0+6369+1f4293b4.aarch64.rpm runc-1.0.0-64.rc10.module+el8.2.0+6369+1f4293b4.aarch64.rpm runc-debuginfo-1.0.0-64.rc10.module+el8.2.0+6369+1f4293b4.aarch64.rpm runc-debugsource-1.0.0-64.rc10.module+el8.2.0+6369+1f4293b4.aarch64.rpm skopeo-0.1.40-9.module+el8.2.0+6373+4950d421.aarch64.rpm skopeo-debuginfo-0.1.40-9.module+el8.2.0+6373+4950d421.aarch64.rpm skopeo-debugsource-0.1.40-9.module+el8.2.0+6373+4950d421.aarch64.rpm skopeo-tests-0.1.40-9.module+el8.2.0+6373+4950d421.aarch64.rpm slirp4netns-0.4.2-3.git21fdece.module+el8.2.0+6369+1f4293b4.aarch64.rpm slirp4netns-debuginfo-0.4.2-3.git21fdece.module+el8.2.0+6369+1f4293b4.aarch64.rpm slirp4netns-debugsource-0.4.2-3.git21fdece.module+el8.2.0+6369+1f4293b4.aarch64.rpm noarch: cockpit-podman-11-1.module+el8.2.0+6369+1f4293b4.noarch.rpm container-selinux-2.124.0-1.module+el8.2.0+6369+1f4293b4.noarch.rpm podman-docker-1.6.4-11.module+el8.2.0+6369+1f4293b4.noarch.rpm python-podman-api-1.2.0-0.2.gitd0a45fe.module+el8.2.0+6369+1f4293b4.noarch.rpm toolbox-0.0.7-1.module+el8.2.0+6369+1f4293b4.noarch.rpm udica-0.2.1-2.module+el8.2.0+6369+1f4293b4.noarch.rpm ppc64le: buildah-1.11.6-7.module+el8.2.0+6369+1f4293b4.ppc64le.rpm buildah-debuginfo-1.11.6-7.module+el8.2.0+6369+1f4293b4.ppc64le.rpm buildah-debugsource-1.11.6-7.module+el8.2.0+6369+1f4293b4.ppc64le.rpm buildah-tests-1.11.6-7.module+el8.2.0+6369+1f4293b4.ppc64le.rpm buildah-tests-debuginfo-1.11.6-7.module+el8.2.0+6369+1f4293b4.ppc64le.rpm conmon-2.0.6-1.module+el8.2.0+6369+1f4293b4.ppc64le.rpm containernetworking-plugins-0.8.3-4.module+el8.2.0+6369+1f4293b4.ppc64le.rpm containernetworking-plugins-debuginfo-0.8.3-4.module+el8.2.0+6369+1f4293b4.ppc64le.rpm containernetworking-plugins-debugsource-0.8.3-4.module+el8.2.0+6369+1f4293b4.ppc64le.rpm containers-common-0.1.40-9.module+el8.2.0+6373+4950d421.ppc64le.rpm crit-3.12-9.module+el8.2.0+6369+1f4293b4.ppc64le.rpm criu-3.12-9.module+el8.2.0+6369+1f4293b4.ppc64le.rpm criu-debuginfo-3.12-9.module+el8.2.0+6369+1f4293b4.ppc64le.rpm criu-debugsource-3.12-9.module+el8.2.0+6369+1f4293b4.ppc64le.rpm fuse-overlayfs-0.7.2-5.module+el8.2.0+6369+1f4293b4.ppc64le.rpm fuse-overlayfs-debuginfo-0.7.2-5.module+el8.2.0+6369+1f4293b4.ppc64le.rpm fuse-overlayfs-debugsource-0.7.2-5.module+el8.2.0+6369+1f4293b4.ppc64le.rpm podman-1.6.4-11.module+el8.2.0+6369+1f4293b4.ppc64le.rpm podman-debuginfo-1.6.4-11.module+el8.2.0+6369+1f4293b4.ppc64le.rpm podman-debugsource-1.6.4-11.module+el8.2.0+6369+1f4293b4.ppc64le.rpm podman-remote-1.6.4-11.module+el8.2.0+6369+1f4293b4.ppc64le.rpm podman-remote-debuginfo-1.6.4-11.module+el8.2.0+6369+1f4293b4.ppc64le.rpm podman-tests-1.6.4-11.module+el8.2.0+6369+1f4293b4.ppc64le.rpm python3-criu-3.12-9.module+el8.2.0+6369+1f4293b4.ppc64le.rpm runc-1.0.0-64.rc10.module+el8.2.0+6369+1f4293b4.ppc64le.rpm runc-debuginfo-1.0.0-64.rc10.module+el8.2.0+6369+1f4293b4.ppc64le.rpm runc-debugsource-1.0.0-64.rc10.module+el8.2.0+6369+1f4293b4.ppc64le.rpm skopeo-0.1.40-9.module+el8.2.0+6373+4950d421.ppc64le.rpm skopeo-debuginfo-0.1.40-9.module+el8.2.0+6373+4950d421.ppc64le.rpm skopeo-debugsource-0.1.40-9.module+el8.2.0+6373+4950d421.ppc64le.rpm skopeo-tests-0.1.40-9.module+el8.2.0+6373+4950d421.ppc64le.rpm slirp4netns-0.4.2-3.git21fdece.module+el8.2.0+6369+1f4293b4.ppc64le.rpm slirp4netns-debuginfo-0.4.2-3.git21fdece.module+el8.2.0+6369+1f4293b4.ppc64le.rpm slirp4netns-debugsource-0.4.2-3.git21fdece.module+el8.2.0+6369+1f4293b4.ppc64le.rpm s390x: buildah-1.11.6-7.module+el8.2.0+6369+1f4293b4.s390x.rpm buildah-debuginfo-1.11.6-7.module+el8.2.0+6369+1f4293b4.s390x.rpm buildah-debugsource-1.11.6-7.module+el8.2.0+6369+1f4293b4.s390x.rpm buildah-tests-1.11.6-7.module+el8.2.0+6369+1f4293b4.s390x.rpm buildah-tests-debuginfo-1.11.6-7.module+el8.2.0+6369+1f4293b4.s390x.rpm conmon-2.0.6-1.module+el8.2.0+6369+1f4293b4.s390x.rpm containernetworking-plugins-0.8.3-4.module+el8.2.0+6369+1f4293b4.s390x.rpm containernetworking-plugins-debuginfo-0.8.3-4.module+el8.2.0+6369+1f4293b4.s390x.rpm containernetworking-plugins-debugsource-0.8.3-4.module+el8.2.0+6369+1f4293b4.s390x.rpm containers-common-0.1.40-9.module+el8.2.0+6373+4950d421.s390x.rpm crit-3.12-9.module+el8.2.0+6369+1f4293b4.s390x.rpm criu-3.12-9.module+el8.2.0+6369+1f4293b4.s390x.rpm criu-debuginfo-3.12-9.module+el8.2.0+6369+1f4293b4.s390x.rpm criu-debugsource-3.12-9.module+el8.2.0+6369+1f4293b4.s390x.rpm fuse-overlayfs-0.7.2-5.module+el8.2.0+6369+1f4293b4.s390x.rpm fuse-overlayfs-debuginfo-0.7.2-5.module+el8.2.0+6369+1f4293b4.s390x.rpm fuse-overlayfs-debugsource-0.7.2-5.module+el8.2.0+6369+1f4293b4.s390x.rpm podman-1.6.4-11.module+el8.2.0+6369+1f4293b4.s390x.rpm podman-debuginfo-1.6.4-11.module+el8.2.0+6369+1f4293b4.s390x.rpm podman-debugsource-1.6.4-11.module+el8.2.0+6369+1f4293b4.s390x.rpm podman-remote-1.6.4-11.module+el8.2.0+6369+1f4293b4.s390x.rpm podman-remote-debuginfo-1.6.4-11.module+el8.2.0+6369+1f4293b4.s390x.rpm podman-tests-1.6.4-11.module+el8.2.0+6369+1f4293b4.s390x.rpm python3-criu-3.12-9.module+el8.2.0+6369+1f4293b4.s390x.rpm runc-1.0.0-64.rc10.module+el8.2.0+6369+1f4293b4.s390x.rpm runc-debuginfo-1.0.0-64.rc10.module+el8.2.0+6369+1f4293b4.s390x.rpm runc-debugsource-1.0.0-64.rc10.module+el8.2.0+6369+1f4293b4.s390x.rpm skopeo-0.1.40-9.module+el8.2.0+6373+4950d421.s390x.rpm skopeo-debuginfo-0.1.40-9.module+el8.2.0+6373+4950d421.s390x.rpm skopeo-debugsource-0.1.40-9.module+el8.2.0+6373+4950d421.s390x.rpm skopeo-tests-0.1.40-9.module+el8.2.0+6373+4950d421.s390x.rpm slirp4netns-0.4.2-3.git21fdece.module+el8.2.0+6369+1f4293b4.s390x.rpm slirp4netns-debuginfo-0.4.2-3.git21fdece.module+el8.2.0+6369+1f4293b4.s390x.rpm slirp4netns-debugsource-0.4.2-3.git21fdece.module+el8.2.0+6369+1f4293b4.s390x.rpm x86_64: buildah-1.11.6-7.module+el8.2.0+6369+1f4293b4.x86_64.rpm buildah-debuginfo-1.11.6-7.module+el8.2.0+6369+1f4293b4.x86_64.rpm buildah-debugsource-1.11.6-7.module+el8.2.0+6369+1f4293b4.x86_64.rpm buildah-tests-1.11.6-7.module+el8.2.0+6369+1f4293b4.x86_64.rpm buildah-tests-debuginfo-1.11.6-7.module+el8.2.0+6369+1f4293b4.x86_64.rpm conmon-2.0.6-1.module+el8.2.0+6369+1f4293b4.x86_64.rpm containernetworking-plugins-0.8.3-4.module+el8.2.0+6369+1f4293b4.x86_64.rpm containernetworking-plugins-debuginfo-0.8.3-4.module+el8.2.0+6369+1f4293b4.x86_64.rpm containernetworking-plugins-debugsource-0.8.3-4.module+el8.2.0+6369+1f4293b4.x86_64.rpm containers-common-0.1.40-9.module+el8.2.0+6373+4950d421.x86_64.rpm crit-3.12-9.module+el8.2.0+6369+1f4293b4.x86_64.rpm criu-3.12-9.module+el8.2.0+6369+1f4293b4.x86_64.rpm criu-debuginfo-3.12-9.module+el8.2.0+6369+1f4293b4.x86_64.rpm criu-debugsource-3.12-9.module+el8.2.0+6369+1f4293b4.x86_64.rpm fuse-overlayfs-0.7.2-5.module+el8.2.0+6369+1f4293b4.x86_64.rpm fuse-overlayfs-debuginfo-0.7.2-5.module+el8.2.0+6369+1f4293b4.x86_64.rpm fuse-overlayfs-debugsource-0.7.2-5.module+el8.2.0+6369+1f4293b4.x86_64.rpm podman-1.6.4-11.module+el8.2.0+6369+1f4293b4.x86_64.rpm podman-debuginfo-1.6.4-11.module+el8.2.0+6369+1f4293b4.x86_64.rpm podman-debugsource-1.6.4-11.module+el8.2.0+6369+1f4293b4.x86_64.rpm podman-remote-1.6.4-11.module+el8.2.0+6369+1f4293b4.x86_64.rpm podman-remote-debuginfo-1.6.4-11.module+el8.2.0+6369+1f4293b4.x86_64.rpm podman-tests-1.6.4-11.module+el8.2.0+6369+1f4293b4.x86_64.rpm python3-criu-3.12-9.module+el8.2.0+6369+1f4293b4.x86_64.rpm runc-1.0.0-64.rc10.module+el8.2.0+6369+1f4293b4.x86_64.rpm runc-debuginfo-1.0.0-64.rc10.module+el8.2.0+6369+1f4293b4.x86_64.rpm runc-debugsource-1.0.0-64.rc10.module+el8.2.0+6369+1f4293b4.x86_64.rpm skopeo-0.1.40-9.module+el8.2.0+6373+4950d421.x86_64.rpm skopeo-debuginfo-0.1.40-9.module+el8.2.0+6373+4950d421.x86_64.rpm skopeo-debugsource-0.1.40-9.module+el8.2.0+6373+4950d421.x86_64.rpm skopeo-tests-0.1.40-9.module+el8.2.0+6373+4950d421.x86_64.rpm slirp4netns-0.4.2-3.git21fdece.module+el8.2.0+6369+1f4293b4.x86_64.rpm slirp4netns-debuginfo-0.4.2-3.git21fdece.module+el8.2.0+6369+1f4293b4.x86_64.rpm slirp4netns-debugsource-0.4.2-3.git21fdece.module+el8.2.0+6369+1f4293b4.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2020-10696 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXqiYZ9zjgjWX9erEAQgtUQ//Y4HFTEmhcwUIkUpDP5mBZyaD4lRxJK9X MgHewj9fGedJCUi7w0RAnQn9j6uMrwO0Ys9Oc1QD0KFWm8vJYLIp1uNV2KLESmuW Y0qdfRpYwc+0cdZ7+dmH9cvlIE19+3akjhfC58o6qJGWBQ+OIwouWusBXvIToZ0F tD+QMvWH83CxyC9CrjHftCH2LWSYAgnZcq/YXDwnBZRBRc4t/U3rVTRK9o33xMiE Y67pADCZOgSLTduX/gJvnTe7RNzaOdDIeA41td8nW4IC7z3VEu2YQdgvVp+0BgkS I9lHXLdblRekTLH09o+35/2blzCznsUC+f1eAQngFII165AZgSjSr614QKR55eDO m717zjmklzyVqcBTQXlnB5J1kNxMzRVGhG0/hrl4nbOf8NE8M5TzO/E07EuUb/1h UlbtH2z2uMT9o+wooeZvJUCX38w/biAEZ/quSlnWxG6t7jTUshYqdDu9XtI/fagj pWu2lv03kQMYaqn6NmLFiQNghJ7cZNrKOOPBtHMQle78AsWDw8beXhXHbr8DeUE0 6Kls8/DzlhO9IFkIApUEuZL5EWji0uFYgXPmnCSouWAhO55Yf2OGn/DuICEUwI/g dQPkNw0eecyx2NcFo9QmwqTFYQ20VXXg3riei1Z46d2wFCJGTXKHawaSCutP/bHo EvD0SkQWh74=99yK -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Apr 28, 2020
•Important
Red Hat
98
security advisorysecurity updateRed HatRed Hat OpenShift 4.1: RHSA-2020:1449-01 Low Severity Security Update
Red Hat OpenShift Container Platform release 4.1.41 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Low: OpenShift Container Platform 4.1.41 security update Advisory ID: RHSA-2020:1449-01 Product: Red Hat OpenShift Enterprise Advisory URL: https://access.redhat.com/errata/RHSA-2020:1449 Issue date: 2020-04-22 CVE Names: CVE-2020-10696 ==================================================================== 1. Summary: Red Hat OpenShift Container Platform release 4.1.41 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenShift Container Platform 4.1 - noarch, x86_64 3. Description: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. Security Fix(es): * buildah: a crafted input tar file could overwrite local files during the image build process (CVE-2020-10696) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For OpenShift Container Platform 4.1 see the following documentation, which will be updated shortly for release 4.1.41, for important instructions on how to upgrade your cluster and fullyapply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.1/html/release_notes/ocp-4-1-release-notes Details on how to access this content are available at - -cli.html. 5. Bugs fixed (https://bugzilla.redhat.com/): 1817651 - CVE-2020-10696 buildah: Crafted input tar file may lead to local file overwrite during image build process 6. Package List: Red Hat OpenShift Container Platform 4.1: Source: podman-1.0.2-4.dev.git96ccc2e.rhaos4.1.el8.src.rpm noarch: podman-docker-1.0.2-4.dev.git96ccc2e.rhaos4.1.el8.noarch.rpm x86_64: podman-1.0.2-4.dev.git96ccc2e.rhaos4.1.el8.x86_64.rpm podman-debuginfo-1.0.2-4.dev.git96ccc2e.rhaos4.1.el8.x86_64.rpm podman-debugsource-1.0.2-4.dev.git96ccc2e.rhaos4.1.el8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2020-10696 https://access.redhat.com/security/updates/classification#low 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXqBlytzjgjWX9erEAQg2BQ//apu9+t4k6MRVaID1AphUuL7Jott2fs+2 SFg+jOBi9ONmFw8Ftl4r4lL4b/9bIN2d6V6eiP5YOrlrjZWIe71CTCfc0EdZ4NVm ptFbTFjg9cBnKGgigLV4vBZ9aZ60bpkIMDRSefEX78Qboq1mV4veQk4UAjj6zXHQ SgBqf/LH+U5bi78+ww9gIp5rkr1ZOfvMz3Mf/YkHfCsT+wyQhw0HQuGyJpT2R9MZ KTmguMeK3S6trwXTKcBfheTm99D0+a0cqaRvELykczGVgSUGCkpswflUq6gHUyRZ +s5RH+uuVjplSAs4DS5iw/AMm9VHprQgTeR7w+owo17eR60S4X9HO0NtrUjzjifr hBaJ1DLsVGjrHHUW4IxsTVNYN0Nh7ZbF4zEGH6j2ts1HDKRZeH6hZwMFkpWsKvMd r/tny00T6QiyzsdkB+nzNvJhTprNU0ST0nWsRVoQmJ/PMvLSK1eX+hsz3Snwd9wL URImK1zWVATNy1eP4i+bPGPHeceK3jGJguT/JFRHpnyMq7M5tsOpo9uNwm4UxjGJ NuPT7bxtJCNj5DGx8X6h9EnR3TtGiNiUT15/gos+n2W+BbFWjTXwq954P7Pzf5UH 4tJwxl10SRjAf8MDXu/ZZkiQ3NXPyDzaEuA/OhSy6mMJheM9JsHDvEWM92WUuUuU LDCy0rN4zK0=Mf4O -----END PGPSIGNATURE----- -- RHSA-announce mailing list
Apr 22, 2020
•Low
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!