[ELSA-2019-4269] container-tools:ol8 security and bug fix update
buildah
[1.9.0-5.0.1]
- Fixes troubles with oracle registry login [Orabug: 29937283]
[1.9.0-5]
- Use autosetup macro again.
[1.9.0-4]
- Fix CVE-2019-10214 (#1734653).
[1.9.0-3]
- Resolves: #1721247 - enable fips mode
[1.9.0-2]
- Resolves: #1720654 - tests subpackage depends on golang explicitly
[1.9.0-1]
- Resolves: #1720654 - rebase to v1.9.0
cockpit-podman
[4-1]
- Fix regression in container commit
- Fix AppStream ID rhbz#1734809
[3-1]
- Enable Commit button for running containers
- Fix race condition with container deletion
- Stop fetching all containers/images for each container/image event
[2-2]
- Fix podman dependency
[2-1]
- Update to upstream 2 release
- Support podman API 1.3
- Support running commands with arguments
- Show the default command coming from image
- Implement filtering of images and containers
containernetworking-plugins
[0.8.1-3.0.1]
- Disable debuginfo
[0.8.1-3]
- rebuild to address CVE-2019-9514 and CVE-2019-9512
- Resolves: #1766318, #1766217
container-selinux
[2:2.123.0-1]
- update to 2.123.0
- Related: #1774382
fuse-overlayfs
[0.4.1-1]
- Resolves: #1720654 - rebase to v0.4.1
[0.3-2]
- rebase
- Resolves:#1666510
podman
[1.4.2-6.0.1]
- Ensure patch for Oracle docker registry is applied [Orabug: 30533101]
- delivering fix for [Orabug: 29874238] by Nikita Gerasimov nikita.gerasimov@oracle.com
[1.4.2-6]
- update to 1.4.2-stable3
- Resolves: #1770176
python-podman-api
[1.2.0-0.1.gitd0a45fe]
- Initial package
runc
[1.0.0-61.rc8]
- backport patches for CVE-2019-16884 from upstream
- Resolves: #1764182
skopeo
[1:0.1.37-6.0.1]
- Ensure patch for Oracle docker registry is applied [Orabug: 30533101]
- Add oracle registry into the conf file [Orabug: 29845934]
- Fix oracle registry login issues [Orabug: 29937192]
[1:0.1.37-6]
- rebuild because of CVE-2019-9512 and CVE-2019-9514
- Resolves: #1772136, #1772131
slirp4netns
[0.3.0-4]
- Fix CVE-2019-14378 (#1755595).
[0.3.0-3]
- Resolves: #1683217 - BR: glib2-devel
[0.3.0-2]
- Resolves: #1683217 - bump slirp4netns to v0.3.0
[0.3.0-1.alpha.2.git30883b5]
- bump to v0.3.0-alpha.2
- ID
- ELSA-2019-4269
- Severity
- important
- URL
- https://linux.oracle.com/errata/ELSA-2019-4269.html
- Published
-
2020-01-03T00:00:00
(4 years ago) - Modified
-
2020-01-03T00:00:00
(4 years ago) - Rights
- Copyright 2020 Oracle, Inc.
- Other Advisories
-
-
ALAS-2019-1270
-
ALAS-2021-1556
-
ALAS2-2019-1272
-
ALPINE:CVE-2019-16884
-
ALPINE:CVE-2019-9512
-
ALPINE:CVE-2019-9514
-
ALSA-2019:2925
-
ALSA-2019:4269
-
ALSA-2019:4273
-
ASA-201908-15
-
DSA-4503-1
-
DSA-4508-1
-
DSA-4520-1
-
DSA-4669-1
-
ELSA-2019-2726
-
ELSA-2019-2925
-
ELSA-2019-4273
-
ELSA-2019-4816
-
FEDORA-2019-34e097c66c
-
FEDORA-2019-3fc86a518b
-
FEDORA-2019-416d20f960
-
FEDORA-2019-55d101a740
-
FEDORA-2019-5a6a7bc12c
-
FEDORA-2019-65db7ad6c7
-
FEDORA-2019-6a2980de56
-
FEDORA-2019-96946c39dd
-
FEDORA-2019-bd4843561c
-
FEDORA-2019-e99c1603c3
-
FEDORA-2020-830d8a1a92
-
FEDORA-2020-b2c1f6cc75
-
FREEBSD:41F4BAAC-BF77-11E9-8D2F-5404A68AD561
-
FREEBSD:72A5579E-C765-11E9-8052-0028F8D09152
-
FREEBSD:73B1E734-C74E-11E9-8052-0028F8D09152
-
FREEBSD:9FBAEFB3-837E-11EA-B5B4-641C67A117D8
-
FREEBSD:C97A940B-C392-11E9-BB38-000D3AB229D6
-
GLSA-202003-21
-
GO-2021-0085
-
GO-2022-0536
-
MS:CVE-2019-16884
-
MS:CVE-2019-9512
-
MS:CVE-2019-9514
-
openSUSE-SU-2019:2000-1
-
openSUSE-SU-2019:2056-1
-
openSUSE-SU-2019:2072-1
-
openSUSE-SU-2019:2085-1
-
openSUSE-SU-2019:2114-1
-
openSUSE-SU-2019:2115-1
-
openSUSE-SU-2019:2130-1
-
openSUSE-SU-2019:2418-1
-
openSUSE-SU-2019:2434-1
-
openSUSE-SU-2020:0045-1
-
RHSA-2019:2726
-
RHSA-2019:2925
-
RHSA-2019:4269
-
RHSA-2019:4273
-
RLSA-2019:2925
-
RLSA-2019:4269
-
RLSA-2019:4273
-
SUSE-SU-2019:2213-1
-
SUSE-SU-2019:2214-1
-
SUSE-SU-2019:2254-1
-
SUSE-SU-2019:2259-1
-
SUSE-SU-2019:2260-1
-
SUSE-SU-2019:2786-1
-
SUSE-SU-2019:2787-1
-
SUSE-SU-2019:2810-1
-
SUSE-SU-2020:0035-1
-
SUSE-SU-2020:0059-1
-
SUSE-SU-2020:0065-1
-
SUSE-SU-2021:1458-1
-
USN-4297-1
-
USN-4308-1
-
USN-4866-1
-
USN-4867-1
-
VU:605641
-
| Source | # ID | Name | URL |
|---|---|---|---|
| elsa | ELSA-2019-4269 |
|
|
| CVE | CVE-2019-9512 |
|
|
| CVE | CVE-2019-9514 |
|
|
| CVE | CVE-2019-16884 |
|
| Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
|---|---|---|---|---|---|---|---|
| Affected | pkg:rpm/oraclelinux/slirp4netns?distro=oraclelinux-8.1 | oraclelinux |
 slirp4netns
|
< 0.3.0-4.module+el8.1.0+5440+994fc847 | oraclelinux-8.1 | ||
| Affected | pkg:rpm/oraclelinux/skopeo?distro=oraclelinux-8.1 | oraclelinux |
skopeo
|
< 0.1.37-6.0.1.module+el8.1.0+5460+5d763c32 | oraclelinux-8.1 | ||
| Affected | pkg:rpm/oraclelinux/skopeo-tests?distro=oraclelinux-8.1 | oraclelinux |
skopeo-tests
|
< 0.1.37-6.0.1.module+el8.1.0+5460+5d763c32 | oraclelinux-8.1 | ||
| Affected | pkg:rpm/oraclelinux/runc?distro=oraclelinux-8.1 | oraclelinux |
runc
|
< 1.0.0-61.rc8.module+el8.1.0+5460+5d763c32 | oraclelinux-8.1 | ||
| Affected | pkg:rpm/oraclelinux/python-podman-api?distro=oraclelinux-8.1 | oraclelinux |
python-podman-api
|
< 1.2.0-0.1.gitd0a45fe.module+el8.1.0+5440+994fc847 | oraclelinux-8.1 | ||
| Affected | pkg:rpm/oraclelinux/podman?distro=oraclelinux-8.1 | oraclelinux |
podman
|
< 1.4.2-6.0.1.module+el8.1.0+5460+5d763c32 | oraclelinux-8.1 | ||
| Affected | pkg:rpm/oraclelinux/podman-tests?distro=oraclelinux-8.1 | oraclelinux |
podman-tests
|
< 1.4.2-6.0.1.module+el8.1.0+5460+5d763c32 | oraclelinux-8.1 | ||
| Affected | pkg:rpm/oraclelinux/podman-remote?distro=oraclelinux-8.1 | oraclelinux |
podman-remote
|
< 1.4.2-6.0.1.module+el8.1.0+5460+5d763c32 | oraclelinux-8.1 | ||
| Affected | pkg:rpm/oraclelinux/podman-manpages?distro=oraclelinux-8.1 | oraclelinux |
podman-manpages
|
< 1.4.2-6.0.1.module+el8.1.0+5460+5d763c32 | oraclelinux-8.1 | ||
| Affected | pkg:rpm/oraclelinux/podman-docker?distro=oraclelinux-8.1 | oraclelinux |
podman-docker
|
< 1.4.2-6.0.1.module+el8.1.0+5460+5d763c32 | oraclelinux-8.1 | ||
| Affected | pkg:rpm/oraclelinux/oci-umount?distro=oraclelinux-8.1 | oraclelinux |
oci-umount
|
< 2.3.4-2.git87f9237.module+el8.1.0+5440+994fc847 | oraclelinux-8.1 | ||
| Affected | pkg:rpm/oraclelinux/oci-systemd-hook?distro=oraclelinux-8.1 | oraclelinux |
oci-systemd-hook
|
< 0.1.15-2.git2d0b8a3.module+el8.1.0+5440+994fc847 | oraclelinux-8.1 | ||
| Affected | pkg:rpm/oraclelinux/fuse-overlayfs?distro=oraclelinux-8.1 | oraclelinux |
fuse-overlayfs
|
< 0.4.1-1.module+el8.1.0+5440+994fc847 | oraclelinux-8.1 | ||
| Affected | pkg:rpm/oraclelinux/containers-common?distro=oraclelinux-8.1 | oraclelinux |
containers-common
|
< 0.1.37-6.0.1.module+el8.1.0+5460+5d763c32 | oraclelinux-8.1 | ||
| Affected | pkg:rpm/oraclelinux/containernetworking-plugins?distro=oraclelinux-8.1 | oraclelinux |
containernetworking-plugins
|
< 0.8.1-3.0.1.module+el8.1.0+5460+5d763c32 | oraclelinux-8.1 | ||
| Affected | pkg:rpm/oraclelinux/container-selinux?distro=oraclelinux-8.1 | oraclelinux |
container-selinux
|
< 2.123.0-2.module+el8.1.0+5460+5d763c32 | oraclelinux-8.1 | ||
| Affected | pkg:rpm/oraclelinux/cockpit-podman?distro=oraclelinux-8.1 | oraclelinux |
cockpit-podman
|
< 4-1.module+el8.1.0+5440+994fc847 | oraclelinux-8.1 | ||
| Affected | pkg:rpm/oraclelinux/buildah?distro=oraclelinux-8.1 | oraclelinux |
buildah
|
< 1.9.0-5.0.1.module+el8.1.0+5440+994fc847 | oraclelinux-8.1 | ||
| Affected | pkg:rpm/oraclelinux/buildah-tests?distro=oraclelinux-8.1 | oraclelinux |
buildah-tests
|
< 1.9.0-5.0.1.module+el8.1.0+5440+994fc847 | oraclelinux-8.1 |
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
|---|---|---|---|---|---|---|---|---|---|---|---|
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |