1. Home
  2. Security Advisories
  3. Rocky Linux
  4. RLSA-2019:4273

[RLSA-2019:4273] container-tools:1.0 security update

Severity Important
Affected Packages 14
CVEs 2
Info Packages References Vulnerabilities

An update is available for fuse-overlayfs, oci-umount, runc, skopeo, oci-systemd-hook, containernetworking-plugins. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)

  • HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Package Affected Version
pkg:rpm/rockylinux/skopeo?arch=x86_64&distro=rockylinux-8.5 < 0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f
pkg:rpm/rockylinux/skopeo?arch=aarch64&distro=rockylinux-8.5 < 0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f
pkg:rpm/rockylinux/runc?arch=x86_64&distro=rockylinux-8.5 < 1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f
pkg:rpm/rockylinux/runc?arch=aarch64&distro=rockylinux-8.5 < 1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f
pkg:rpm/rockylinux/oci-umount?arch=x86_64&distro=rockylinux-8.4 < 2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f
pkg:rpm/rockylinux/oci-umount?arch=aarch64&distro=rockylinux-8.4 < 2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f
pkg:rpm/rockylinux/oci-systemd-hook?arch=x86_64&distro=rockylinux-8.4 < 0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f
pkg:rpm/rockylinux/oci-systemd-hook?arch=aarch64&distro=rockylinux-8.4 < 0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f
pkg:rpm/rockylinux/fuse-overlayfs?arch=x86_64&distro=rockylinux-8.5 < 0.3-5.module+el8.5.0+681+c9a1951f
pkg:rpm/rockylinux/fuse-overlayfs?arch=aarch64&distro=rockylinux-8.5 < 0.3-5.module+el8.5.0+681+c9a1951f
pkg:rpm/rockylinux/containers-common?arch=x86_64&distro=rockylinux-8.5 < 0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f
pkg:rpm/rockylinux/containers-common?arch=aarch64&distro=rockylinux-8.5 < 0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f
pkg:rpm/rockylinux/containernetworking-plugins?arch=x86_64&distro=rockylinux-8.5 < 0.7.4-4.git9ebe139.module+el8.5.0+681+c9a1951f
pkg:rpm/rockylinux/containernetworking-plugins?arch=aarch64&distro=rockylinux-8.5 < 0.7.4-4.git9ebe139.module+el8.5.0+681+c9a1951f
ID
RLSA-2019:4273
Severity
important
URL
https://errata.rockylinux.org/RLSA-2019:4273
Published
2019-12-17T09:20:02
(4 years ago)
Modified
2023-02-02T13:00:30
(19 months ago)
Rights
Copyright 2024 Rocky Enterprise Software Foundation
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/rockylinux/skopeo?arch=x86_64&distro=rockylinux-8.5 rockylinux skopeo < 0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f rockylinux-8.5 x86_64
Affected pkg:rpm/rockylinux/skopeo?arch=aarch64&distro=rockylinux-8.5 rockylinux skopeo < 0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f rockylinux-8.5 aarch64
Affected pkg:rpm/rockylinux/runc?arch=x86_64&distro=rockylinux-8.5 rockylinux runc < 1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f rockylinux-8.5 x86_64
Affected pkg:rpm/rockylinux/runc?arch=aarch64&distro=rockylinux-8.5 rockylinux runc < 1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f rockylinux-8.5 aarch64
Affected pkg:rpm/rockylinux/oci-umount?arch=x86_64&distro=rockylinux-8.4 rockylinux oci-umount < 2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f rockylinux-8.4 x86_64
Affected pkg:rpm/rockylinux/oci-umount?arch=aarch64&distro=rockylinux-8.4 rockylinux oci-umount < 2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f rockylinux-8.4 aarch64
Affected pkg:rpm/rockylinux/oci-systemd-hook?arch=x86_64&distro=rockylinux-8.4 rockylinux oci-systemd-hook < 0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f rockylinux-8.4 x86_64
Affected pkg:rpm/rockylinux/oci-systemd-hook?arch=aarch64&distro=rockylinux-8.4 rockylinux oci-systemd-hook < 0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f rockylinux-8.4 aarch64
Affected pkg:rpm/rockylinux/fuse-overlayfs?arch=x86_64&distro=rockylinux-8.5 rockylinux fuse-overlayfs < 0.3-5.module+el8.5.0+681+c9a1951f rockylinux-8.5 x86_64
Affected pkg:rpm/rockylinux/fuse-overlayfs?arch=aarch64&distro=rockylinux-8.5 rockylinux fuse-overlayfs < 0.3-5.module+el8.5.0+681+c9a1951f rockylinux-8.5 aarch64
Affected pkg:rpm/rockylinux/containers-common?arch=x86_64&distro=rockylinux-8.5 rockylinux containers-common < 0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f rockylinux-8.5 x86_64
Affected pkg:rpm/rockylinux/containers-common?arch=aarch64&distro=rockylinux-8.5 rockylinux containers-common < 0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f rockylinux-8.5 aarch64
Affected pkg:rpm/rockylinux/containernetworking-plugins?arch=x86_64&distro=rockylinux-8.5 rockylinux containernetworking-plugins < 0.7.4-4.git9ebe139.module+el8.5.0+681+c9a1951f rockylinux-8.5 x86_64
Affected pkg:rpm/rockylinux/containernetworking-plugins?arch=aarch64&distro=rockylinux-8.5 rockylinux containernetworking-plugins < 0.7.4-4.git9ebe139.module+el8.5.0+681+c9a1951f rockylinux-8.5 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date