p PatchFirst

PatchFirst · Latest vulnerabilities

container-selinux vulnerabilities · Page 3

Vulnerability published for container-selinux in the last 30 days: 1. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 59

  1. ALSA-2022:1793

    Not ratedFix available

    Moderate: container-tools:3.0 security and bug fix update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * crun: Default inheritable capabilities for linux container should be empty (CVE-2022-27650) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

    • Update to 2:2.178.0-2.module_el8.6.0+2876+9ed4eae2
    Published Updated
  2. ALSA-2022:1762

    Not ratedFix available

    Important: container-tools:rhel8 security, bug fix, and enhancement update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * psgo: Privilege escalation in 'podman top' (CVE-2022-1227) * prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698) * podman: Default inheritable capabilities for linux container should be empty (CVE-2022-27649) * crun: Default inheritable capabilities for linux container should be empty (CVE-2022-27650) * buildah: Default inheritable capabilities for linux container should be empty (CVE-2022-27651) For more details about the security issue(s), including the impact, a

    • Update to 2:2.179.1-1.module_el8.6.0+2878+e681bc44
    Published Updated
  3. ALSA-2022:1566

    Not ratedFix available

    Moderate: container-tools:2.0 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: Default inheritable capabilities for linux container should be empty (CVE-2022-27649) * buildah: Default inheritable capabilities for linux container should be empty (CVE-2022-27651) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    • Update to 2:2.130.0-1.module_el8.5.0+108+00865455
    • Update to 2:2.130.0-1.module_el8.5.0+2635+e4386a39
    Published Updated
  4. ALSA-2022:1565

    Not ratedFix available

    Moderate: container-tools:3.0 security and bug fix update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: Default inheritable capabilities for linux container should be empty (CVE-2022-27649) * buildah: Default inheritable capabilities for linux container should be empty (CVE-2022-27651) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * 3.0 stable stream: podman run --pid=host command causes OCI permission error (BZ#2070961)

    • Update to 2:2.167.0-1.module_el8.5.0+2636+8c48f0fc
    Published Updated
  5. ALEA-2022:0352

    Not ratedFix available

    container-tools:rhel8 security, bug fix, and enhancement update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

    • Update to 2:2.173.0-1.module_el8.5.0+2613+1b78b731
    Published Updated
  6. ALBA-2022:0348

    Not ratedFix available

    container-tools:3.0 security, bug fix, and enhancement update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.

    • Update to 2:2.167.0-1.module_el8.5.0+2614+87221ce8
    Published Updated
  7. ALSA-2021:4222

    Not ratedFix available

    Moderate: container-tools:3.0 security and bug fix update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * buildah: Host environment variables leaked in build container when using chroot isolation (CVE-2021-3602) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

    • Update to 2:2.167.0-1.module_el8.5.0+2614+87221ce8
    Published Updated
  8. ALSA-2021:4221

    Not ratedFix available

    Moderate: container-tools:2.0 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * buildah: Host environment variables leaked in build container when using chroot isolation (CVE-2021-3602) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

    • Update to 2:2.130.0-1.module_el8.5.0+108+00865455
    • Update to 2:2.130.0-1.module_el8.5.0+2635+e4386a39
    Published Updated
  9. ALSA-2021:2291

    Not ratedFix available

    Important: container-tools:2.0 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * runc: vulnerable to symlink exchange attack (CVE-2021-30465) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    • Update to 2:2.130.0-1.module_el8.5.0+108+00865455
    • Update to 2:2.130.0-1.module_el8.5.0+2635+e4386a39
    Published Updated
  10. ALSA-2021:0706

    Not ratedFix available

    Important: container-tools:2.0 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: container users permissions are not respected in privileged containers (CVE-2021-20188) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    • Update to 2:2.130.0-1.module_el8.5.0+108+00865455
    • Update to 2:2.130.0-1.module_el8.5.0+2635+e4386a39
    Published Updated
  11. ALSA-2021:0705

    Not ratedFix available

    Important: container-tools:1.0 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: container users permissions are not respected in privileged containers (CVE-2021-20188) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    • Update to 2:2.124.0-1.gitf958d0c.module_el8.3.0+2044+12421f43
    Published Updated
  12. ALBA-2021:0546

    Not ratedFix available

    container-tools:2.0 bug fix update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Bug Fix(es): * podman exec is fragile in the presence of signals (BZ#1913294)

    • Update to 2:2.130.0-1.module_el8.5.0+108+00865455
    • Update to 2:2.130.0-1.module_el8.5.0+2635+e4386a39
    Published Updated
  13. ALBA-2020:5498

    Not ratedFix available

    container-tools:1.0 bug fix and enhancement update

    For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

    • Update to 2:2.124.0-1.gitf958d0c.module_el8.3.0+2044+12421f43
    • Update to 2:2.124.0-1.gitf958d0c.module_el8.4.0+2496+12421f43
    • Update to 2:2.124.0-1.gitf958d0c.module_el8.5.0+119+9a9ec082
    Published Updated
  14. ALBA-2020:5497

    Not ratedFix available

    container-tools:2.0 bug fix update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Bug Fix(es): * update description and summary for container-tools module for 8.3.0 (BZ#1898251)

    • Update to 2:2.130.0-1.module_el8.5.0+108+00865455
    • Update to 2:2.130.0-1.module_el8.5.0+2635+e4386a39
    Published Updated
  15. ALBA-2020:4859

    Not ratedFix available

    container-tools:2.0 bug fix update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Bug Fix(es): * container-tools:2.0/skopeo: docker.io needs to be listed in search registries in registries.conf (BZ#1886443)

    • Update to 2:2.130.0-1.module_el8.5.0+108+00865455
    • Update to 2:2.130.0-1.module_el8.5.0+2635+e4386a39
    Published Updated
  16. ALBA-2020:4771

    Not ratedFix available

    container-tools:1.0 bug fix and enhancement update

    For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

    • Update to 2:2.124.0-1.gitf958d0c.module_el8.3.0+2044+12421f43
    • Update to 2:2.124.0-1.gitf958d0c.module_el8.4.0+2496+12421f43
    • Update to 2:2.124.0-1.gitf958d0c.module_el8.5.0+119+9a9ec082
    Published Updated
  17. ALSA-2020:1926

    Not ratedFix available

    Important: container-tools:1.0 security and bug fix update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * buildah: Crafted input tar file may lead to local file overwrite during image build process (CVE-2020-10696) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * conflicting requests: failed to install container-tools:1.0 (BZ#1813776) * podman run container error with avc denied (BZ#1816541)

    • Update to 2:2.124.0-1.gitf958d0c.module_el8.3.0+2044+12421f43
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →