Product Errata

RLSA-2024:2084

Important: container-tools:4.0 security update

Topic

An update is available for libslirp, module.buildah, module.crun, buildah, fuse-overlayfs, udica, module.oci-seccomp-bpf-hook, module.runc, conmon, module.containers-common, python-podman, module.libslirp, module.fuse-overlayfs, runc, criu, module.toolbox, module.container-selinux, container-selinux, containers-common, module.conmon, containernetworking-plugins, crun, module.podman, module.skopeo, podman, module.containernetworking-plugins, slirp4netns, oci-seccomp-bpf-hook, module.slirp4netns, module.python-podman, cockpit-podman, module.cockpit-podman, skopeo, module.udica, module.criu, toolbox.

This update affects Rocky Linux 8.

A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

Description

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* buildah: full container escape at build time (CVE-2024-1753)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Issued: 5/6/2024

Type: Security

Severity: Important

Affected Product

  • Rocky Linux 8

Fixes

CVEs

References

  • No references