[ALSA-2024:2084] container-tools:4.0 security update

Severity Important

Affected Packages 34

CVEs 1

container-tools:4.0 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

buildah: full container escape at build time (CVE-2024-1753)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Package	Affected Version
pkg:rpm/almalinux/udica?arch=noarch&distro=almalinux-8.9	< 0.2.6-4.module_el8.9.0+3821+d7d58347
pkg:rpm/almalinux/toolbox?arch=x86_64&distro=almalinux-8.9	< 0.0.99.4-5.module_el8.9.0+3627+db8ec155
pkg:rpm/almalinux/toolbox-tests?arch=x86_64&distro=almalinux-8.9	< 0.0.99.4-5.module_el8.9.0+3627+db8ec155
pkg:rpm/almalinux/slirp4netns?arch=x86_64&distro=almalinux-8.9	< 1.1.8-3.module_el8.9.0+3821+d7d58347
pkg:rpm/almalinux/skopeo?arch=x86_64&distro=almalinux-8.9	< 1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1
pkg:rpm/almalinux/skopeo-tests?arch=x86_64&distro=almalinux-8.9	< 1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1
pkg:rpm/almalinux/runc?arch=x86_64&distro=almalinux-8.9	< 1.1.12-1.module_el8.9.0+3722+7fd8ab2b
pkg:rpm/almalinux/python3-podman?arch=noarch&distro=almalinux-8.9	< 4.0.0-2.module_el8.9.0+3821+d7d58347
pkg:rpm/almalinux/python3-criu?arch=x86_64&distro=almalinux-8.9	< 3.15-3.module_el8.9.0+3821+d7d58347
pkg:rpm/almalinux/podman?arch=x86_64&distro=almalinux-8.9	< 4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1
pkg:rpm/almalinux/podman-tests?arch=x86_64&distro=almalinux-8.9	< 4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1
pkg:rpm/almalinux/podman-remote?arch=x86_64&distro=almalinux-8.9	< 4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1
pkg:rpm/almalinux/podman-plugins?arch=x86_64&distro=almalinux-8.9	< 4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1
pkg:rpm/almalinux/podman-gvproxy?arch=x86_64&distro=almalinux-8.9	< 4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1
pkg:rpm/almalinux/podman-docker?arch=noarch&distro=almalinux-8.9	< 4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1
pkg:rpm/almalinux/podman-catatonit?arch=x86_64&distro=almalinux-8.9	< 4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1
pkg:rpm/almalinux/oci-seccomp-bpf-hook?arch=x86_64&distro=almalinux-8.9	< 1.2.5-2.module_el8.9.0+3821+d7d58347
pkg:rpm/almalinux/netavark?arch=x86_64&distro=almalinux-8.9	< 1.0.1-38.module_el8.9.0+3627+db8ec155
pkg:rpm/almalinux/libslirp?arch=x86_64&distro=almalinux-8.9	< 4.4.0-1.module_el8.9.0+3821+d7d58347
pkg:rpm/almalinux/libslirp-devel?arch=x86_64&distro=almalinux-8.9	< 4.4.0-1.module_el8.9.0+3821+d7d58347
pkg:rpm/almalinux/fuse-overlayfs?arch=x86_64&distro=almalinux-8.9	< 1.9-2.module_el8.9.0+3821+d7d58347
pkg:rpm/almalinux/crun?arch=x86_64&distro=almalinux-8.9	< 1.8.7-1.module_el8.9.0+3683+33eb0feb
pkg:rpm/almalinux/criu?arch=x86_64&distro=almalinux-8.9	< 3.15-3.module_el8.9.0+3817+215c128b
pkg:rpm/almalinux/criu-libs?arch=x86_64&distro=almalinux-8.9	< 3.15-3.module_el8.9.0+3817+215c128b
pkg:rpm/almalinux/criu-devel?arch=x86_64&distro=almalinux-8.6	< 3.15-3.module_el8.6.0+2877+8e437bf5
pkg:rpm/almalinux/crit?arch=x86_64&distro=almalinux-8.6	< 3.15-3.module_el8.6.0+2877+8e437bf5
pkg:rpm/almalinux/containers-common?arch=x86_64&distro=almalinux-8.9	< 1-38.module_el8.9.0+3821+d7d58347
pkg:rpm/almalinux/containernetworking-plugins?arch=x86_64&distro=almalinux-8.9	< 1.1.1-6.module_el8.9.0+3821+d7d58347
pkg:rpm/almalinux/container-selinux?arch=noarch&distro=almalinux-8.9	< 2.205.0-3.module_el8.9.0+3687+dcd7ef8f
pkg:rpm/almalinux/conmon?arch=x86_64&distro=almalinux-8.9	< 2.1.4-2.module_el8.9.0+3627+db8ec155
pkg:rpm/almalinux/cockpit-podman?arch=noarch&distro=almalinux-8.7	< 46-1.module_el8.7.0+3344+5bcd850f
pkg:rpm/almalinux/buildah?arch=x86_64&distro=almalinux-8.9	< 1.24.7-1.module_el8.9.0+3821+d7d58347.alma.1
pkg:rpm/almalinux/buildah-tests?arch=x86_64&distro=almalinux-8.9	< 1.24.7-1.module_el8.9.0+3821+d7d58347.alma.1
pkg:rpm/almalinux/aardvark-dns?arch=x86_64&distro=almalinux-8.9	< 1.0.1-38.module_el8.9.0+3627+db8ec155

ID

ALSA-2024:2084

Severity

important

URL

https://errata.almalinux.org/ALSA-2024:2084.html

Published

2024-04-29T00:00:00
(4 months ago)

Modified

2024-05-07T15:06:55
(4 months ago)

Rights

Other Advisories

Source	# ID	URL
RHSA	RHSA-2024:2084	https://access.redhat.com/errata/RHSA-2024:2084
CVE	CVE-2024-1753	https://access.redhat.com/security/cve/CVE-2024-1753
Bugzilla	2265513	https://bugzilla.redhat.com/2265513
Self	ALSA-2024:2084	https://errata.almalinux.org/8/ALSA-2024-2084.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch
Affected	pkg:rpm/almalinux/udica?arch=noarch&distro=almalinux-8.9	almalinux	udica	< 0.2.6-4.module_el8.9.0+3821+d7d58347	almalinux-8.9	noarch
Affected	pkg:rpm/almalinux/toolbox?arch=x86_64&distro=almalinux-8.9	almalinux	toolbox	< 0.0.99.4-5.module_el8.9.0+3627+db8ec155	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/toolbox-tests?arch=x86_64&distro=almalinux-8.9	almalinux	toolbox-tests	< 0.0.99.4-5.module_el8.9.0+3627+db8ec155	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/slirp4netns?arch=x86_64&distro=almalinux-8.9	almalinux	slirp4netns	< 1.1.8-3.module_el8.9.0+3821+d7d58347	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/skopeo?arch=x86_64&distro=almalinux-8.9	almalinux	skopeo	< 1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/skopeo-tests?arch=x86_64&distro=almalinux-8.9	almalinux	skopeo-tests	< 1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/runc?arch=x86_64&distro=almalinux-8.9	almalinux	runc	< 1.1.12-1.module_el8.9.0+3722+7fd8ab2b	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/python3-podman?arch=noarch&distro=almalinux-8.9	almalinux	python3-podman	< 4.0.0-2.module_el8.9.0+3821+d7d58347	almalinux-8.9	noarch
Affected	pkg:rpm/almalinux/python3-criu?arch=x86_64&distro=almalinux-8.9	almalinux	python3-criu	< 3.15-3.module_el8.9.0+3821+d7d58347	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/podman?arch=x86_64&distro=almalinux-8.9	almalinux	podman	< 4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/podman-tests?arch=x86_64&distro=almalinux-8.9	almalinux	podman-tests	< 4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/podman-remote?arch=x86_64&distro=almalinux-8.9	almalinux	podman-remote	< 4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/podman-plugins?arch=x86_64&distro=almalinux-8.9	almalinux	podman-plugins	< 4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/podman-gvproxy?arch=x86_64&distro=almalinux-8.9	almalinux	podman-gvproxy	< 4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/podman-docker?arch=noarch&distro=almalinux-8.9	almalinux	podman-docker	< 4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1	almalinux-8.9	noarch
Affected	pkg:rpm/almalinux/podman-catatonit?arch=x86_64&distro=almalinux-8.9	almalinux	podman-catatonit	< 4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/oci-seccomp-bpf-hook?arch=x86_64&distro=almalinux-8.9	almalinux	oci-seccomp-bpf-hook	< 1.2.5-2.module_el8.9.0+3821+d7d58347	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/netavark?arch=x86_64&distro=almalinux-8.9	almalinux	netavark	< 1.0.1-38.module_el8.9.0+3627+db8ec155	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/libslirp?arch=x86_64&distro=almalinux-8.9	almalinux	libslirp	< 4.4.0-1.module_el8.9.0+3821+d7d58347	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/libslirp-devel?arch=x86_64&distro=almalinux-8.9	almalinux	libslirp-devel	< 4.4.0-1.module_el8.9.0+3821+d7d58347	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/fuse-overlayfs?arch=x86_64&distro=almalinux-8.9	almalinux	fuse-overlayfs	< 1.9-2.module_el8.9.0+3821+d7d58347	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/crun?arch=x86_64&distro=almalinux-8.9	almalinux	crun	< 1.8.7-1.module_el8.9.0+3683+33eb0feb	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/criu?arch=x86_64&distro=almalinux-8.9	almalinux	criu	< 3.15-3.module_el8.9.0+3817+215c128b	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/criu-libs?arch=x86_64&distro=almalinux-8.9	almalinux	criu-libs	< 3.15-3.module_el8.9.0+3817+215c128b	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/criu-devel?arch=x86_64&distro=almalinux-8.6	almalinux	criu-devel	< 3.15-3.module_el8.6.0+2877+8e437bf5	almalinux-8.6	x86_64
Affected	pkg:rpm/almalinux/crit?arch=x86_64&distro=almalinux-8.6	almalinux	crit	< 3.15-3.module_el8.6.0+2877+8e437bf5	almalinux-8.6	x86_64
Affected	pkg:rpm/almalinux/containers-common?arch=x86_64&distro=almalinux-8.9	almalinux	containers-common	< 1-38.module_el8.9.0+3821+d7d58347	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/containernetworking-plugins?arch=x86_64&distro=almalinux-8.9	almalinux	containernetworking-plugins	< 1.1.1-6.module_el8.9.0+3821+d7d58347	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/container-selinux?arch=noarch&distro=almalinux-8.9	almalinux	container-selinux	< 2.205.0-3.module_el8.9.0+3687+dcd7ef8f	almalinux-8.9	noarch
Affected	pkg:rpm/almalinux/conmon?arch=x86_64&distro=almalinux-8.9	almalinux	conmon	< 2.1.4-2.module_el8.9.0+3627+db8ec155	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/cockpit-podman?arch=noarch&distro=almalinux-8.7	almalinux	cockpit-podman	< 46-1.module_el8.7.0+3344+5bcd850f	almalinux-8.7	noarch
Affected	pkg:rpm/almalinux/buildah?arch=x86_64&distro=almalinux-8.9	almalinux	buildah	< 1.24.7-1.module_el8.9.0+3821+d7d58347.alma.1	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/buildah-tests?arch=x86_64&distro=almalinux-8.9	almalinux	buildah-tests	< 1.24.7-1.module_el8.9.0+3821+d7d58347.alma.1	almalinux-8.9	x86_64
Affected	pkg:rpm/almalinux/aardvark-dns?arch=x86_64&distro=almalinux-8.9	almalinux	aardvark-dns	< 1.0.1-38.module_el8.9.0+3627+db8ec155	almalinux-8.9	x86_64

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date