Headline

RHSA-2022:5622: Red Hat Security Advisory: container-tools:rhel8 security and bug fix update

An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-1227: psgo: Privilege escalation in ‘podman top’

2 years ago

Red Hat Security Data

Open in Source

#vulnerability #linux #red_hat #ibm #docker #sap

Synopsis

Important: container-tools:rhel8 security and bug fix update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

psgo: Privilege escalation in ‘podman top’ (CVE-2022-1227)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

ubi9-beta/ubi-minimal has a broken microdnf (g_system_thread_new fatal error) (BZ#2095808)

Affected Products

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64
Red Hat Enterprise Linux Server - AUS 8.4 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le
Red Hat Enterprise Linux Server - TUS 8.4 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.4 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.4 x86_64

Fixes

BZ - 2070368 - CVE-2022-1227 psgo: Privilege escalation in ‘podman top’
BZ - 2095808 - ubi9-beta/ubi-minimal has a broken microdnf (g_system_thread_new fatal error) [rhel-8.4.0.z]

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4

SRPM

buildah-1.21.4-3.module+el8.4.0+15741+47bb6bfe.src.rpm

SHA-256: 77a8221a0f7c312bd2611e05b4aee944f2f592b05d8a5be4655e1df5957e8289

cockpit-podman-32-2.module+el8.4.0+14908+81312c48.src.rpm

SHA-256: 22a6ce5b91775f02dc86ebc64f775ecf481f2ddb43bbedc2a4303c9cd6a886da

conmon-2.0.29-1.module+el8.4.0+14908+81312c48.src.rpm

SHA-256: 54f189799c6479916125a2833a09344bbbc5570f967eb941035aa53e6c499474

container-selinux-2.167.0-1.module+el8.4.0+14908+81312c48.src.rpm

SHA-256: dc7bd3c3b744e361973c29c1a34b0072074e0693396d92b3af5683fd1e930221

containernetworking-plugins-0.9.1-1.module+el8.4.0+14908+81312c48.src.rpm

SHA-256: 04c6978cd7efb7b890c2e9668947bff7ff5aeaeeb08d0d413729d740ce1353b7

criu-3.15-1.module+el8.4.0+14908+81312c48.src.rpm

SHA-256: 1c7d607367aa1268de41fed0e15d7590fee4a89bf555beddd24d82f9fac2587f

crun-0.20.1-1.module+el8.4.0+14908+81312c48.src.rpm

SHA-256: 701b3049b9135a514ed9e9a84d33d279a56028b59d579d9425888d0d59ac617f

fuse-overlayfs-1.6-1.module+el8.4.0+14908+81312c48.src.rpm

SHA-256: 3e859b03b581f9f75b8af034aeab9818bd97e584eb17d842dd40980a27816383

libslirp-4.3.1-1.module+el8.4.0+14908+81312c48.src.rpm

SHA-256: 54f2985ab27f3b5a2e6c438f9efde52210b7ca36cb1a6dfa5a2f73a8eddb03ba

oci-seccomp-bpf-hook-1.2.3-2.module+el8.4.0+14908+81312c48.src.rpm

SHA-256: 423f945290e53b3ca68c754734eaed31958e293c2a08ba211bebcccdc5d6f6eb

podman-3.2.3-0.12.module+el8.4.0+14908+81312c48.src.rpm

SHA-256: 14a877361f639b893f09f0f186e475f3ddcc018b5a2d67ff1b4e757710b6b734

runc-1.0.0-74.rc95.module+el8.4.0+14908+81312c48.src.rpm

SHA-256: 32aba5c0ce1fb68759011e2383a404aedfaf891595e91f50232a8ae8a5729ec9

skopeo-1.3.1-7.module+el8.4.0+15741+47bb6bfe.src.rpm

SHA-256: 114e4d1d728b746f7488801afaab107f8a83f05eee5724576867e2c4b66f8aff

slirp4netns-1.1.8-1.module+el8.4.0+14908+81312c48.src.rpm

SHA-256: 750ecaa7cf241f404dac677c6dbb51fe9d07c244fa78ffa36ac5712e334c804c

toolbox-0.0.8-1.module+el8.4.0+14908+81312c48.src.rpm

SHA-256: c640b6e740beb24a91fafd9473befd55970f2ce7a28f5effd4a53c52c700daa5

udica-0.2.4-2.module+el8.4.0+14908+81312c48.src.rpm

SHA-256: bc5fc758cd248610644308b5fe3c1c68a473bd4ae0e55af3d513811960ec887f

x86_64

buildah-1.21.4-3.module+el8.4.0+15741+47bb6bfe.x86_64.rpm

SHA-256: f635b355cacdd1ef5a0697724d68f6a90eb52dc9dbac0ab6315f020acb8c006e

buildah-debuginfo-1.21.4-3.module+el8.4.0+15741+47bb6bfe.x86_64.rpm

SHA-256: 430f5aaf3ad732b58a33c87c2f45fe26047a138e195dfed389c48da33e8d5a21

buildah-debugsource-1.21.4-3.module+el8.4.0+15741+47bb6bfe.x86_64.rpm

SHA-256: ac22bb1863571e8426c88739fba528c8261751608e642b468e84bb4270f69037

buildah-tests-1.21.4-3.module+el8.4.0+15741+47bb6bfe.x86_64.rpm

SHA-256: 6dbf90d82ba24cd8fb81110faa3b12da1c64d9f654cf63d0607e5f1c7a1e8b6f

buildah-tests-debuginfo-1.21.4-3.module+el8.4.0+15741+47bb6bfe.x86_64.rpm

SHA-256: 194a4985d3475f47ec44a96cc25188971f12cd77ff64124ae72197ccb1c1fa1e

cockpit-podman-32-2.module+el8.4.0+14908+81312c48.noarch.rpm

SHA-256: 1024db1cc0900c4f973d5fc96e2797eb4963ce21685f175c36bbaffcfb483bc8

conmon-2.0.29-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 93dd9d14a942def87e9a8d6d97d9fdf989a1b1365dbade7ee81318fbfa8ca893

conmon-debuginfo-2.0.29-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 1dacbd402797f841da4303ff6290464e94c6638cb14f6a22f7d84b8a49c60d1d

conmon-debugsource-2.0.29-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 988287fb4ddf9689bb4601dd1a5bf1a2cf8d20f92ff1d94d3a8b1f84f8b7517f

container-selinux-2.167.0-1.module+el8.4.0+14908+81312c48.noarch.rpm

SHA-256: d1c908785d3c32bcc9b0f8b95cfa709e64c2749ed7c073c36fec33879fe5ed40

containernetworking-plugins-0.9.1-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: bbb1ee83469b29714a4b03c239d0d4711f82cd52ad0fa21dfa88e85839399c62

containernetworking-plugins-debuginfo-0.9.1-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 08cdbdc2fa5b83fa10b5a25786984abf0a6011b32518d86e8af5270a2dc32e1b

containernetworking-plugins-debugsource-0.9.1-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 356cf8895e76606664f0ad041bc8e1581b43325bc3f1293413797b76959b7de3

containers-common-1.3.1-7.module+el8.4.0+15741+47bb6bfe.x86_64.rpm

SHA-256: f337df05736ed8f2ae49e06538f277bf32790d992429deb01c7346d2c7e60ec2

crit-3.15-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 321d26c5111270d6421b611d9fc5b8fe9a90fdffe5d950451d6aad2657205117

criu-3.15-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 65f2bfee241c03ed453cf82f0179df9b8f404d24dd9139e33f7237e6ee85375e

criu-debuginfo-3.15-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 4f47b7bbf22952721399b62f20f9589b8cd2c38a0f45f0cbedced953e83c80c6

criu-debugsource-3.15-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 0be7a0dee58412b79a052f34d4ea9d86a43b766cae47a75afa8a18700e4abdb5

crun-0.20.1-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: e2308cf1fa060ce67f5ecf5cc6755adb889ebd19367daf016641d5acce518bdd

crun-debuginfo-0.20.1-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: e5611a25ed6d11d44ab9bcba52a1af4da58249e9c749c720b46f17de767639f7

crun-debugsource-0.20.1-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 3410f45c91fb699b75ee67e806168c55334f69b2957b95086f794bd62e25cdec

fuse-overlayfs-1.6-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 43203bdf95665b03d43eeca3e4600682213ef7d6802872d921e456f9f7983c19

fuse-overlayfs-debuginfo-1.6-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 19f1f5f14d24519626e30334025d69bb8ef3202fe86d9914fa0744c4d3101fb9

fuse-overlayfs-debugsource-1.6-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 82ce63f495c7225880717f79d4d56a437ef7022a2a041865b57ff43275e3f404

libslirp-4.3.1-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 7ef1c7aa511180de269596b081f8cb34361ef2cb0a5bbf0801b9341e48ae9a49

libslirp-debuginfo-4.3.1-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: a65858335d0ecf167e4587ca6929fd37c2f6b8d4d9af78f501c959dc4ecd570e

libslirp-debugsource-4.3.1-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: e8bf90b859bf09b63b9ab4984652866838040e2bbfab8c30aca2e74f8da28658

libslirp-devel-4.3.1-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: d4e445f6d07726239659ea925a9445b89376a98075c76c111e4b44aa13020c28

oci-seccomp-bpf-hook-1.2.3-2.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 05ebe1b7a078fae2532e299027657cc029ce2b7c384d59b67923901042977f80

oci-seccomp-bpf-hook-debuginfo-1.2.3-2.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 3d6d037ef13361b47653c52e85d98b4dee26c894d3335e98497b7bce968b0a0a

oci-seccomp-bpf-hook-debugsource-1.2.3-2.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 1ad02e0eaa0ad6dd736a0293563b48ee9c7cd1efeced1b88282724d4e2e7f62d

podman-3.2.3-0.12.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: f168101f0e4522e135e2c779b8f6ce32de82606539830d1b71468667e53edd17

podman-catatonit-3.2.3-0.12.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: d67fcbc1af4bf45dc94aed1f6f5d78d3017d9b4448e66bc0bcb4d071639c0217

podman-catatonit-debuginfo-3.2.3-0.12.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 87f991810364288822b1e4116617bcbc1784e1a3a2373d7bec26390abbc14e45

podman-debuginfo-3.2.3-0.12.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 1e73cf1e53312309f1263bdf9c29ae17407388bf1417b96f249bf65bdaa01be7

podman-debugsource-3.2.3-0.12.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: c2dc0e23c598851190607a840b0a589b8384b5fdbcc4a83f7408dfc403f00512

podman-docker-3.2.3-0.12.module+el8.4.0+14908+81312c48.noarch.rpm

SHA-256: 28d33daa25ba1e88f92ba4db9204fce968e82b98f4891890aec3c96095b274f2

podman-plugins-3.2.3-0.12.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 28594ad9f16b5fcb12a31c3eb2ed0a8dca90d23a6ce0120c16c08ce75a98dcfa

podman-plugins-debuginfo-3.2.3-0.12.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 8fc94c3f2a0c2e09ffa9c868cc0d179a577d0430800d9bba636d5b49e4eadfa7

podman-remote-3.2.3-0.12.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: a9a282cb645b78868413984cf1aaf9604c360055142768b532a6eec10dc5ce7e

podman-remote-debuginfo-3.2.3-0.12.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 3dd9838d04b4edc6127e58b11d3a53bae2ee548bd132615e7ac0737c6d6b0ce3

podman-tests-3.2.3-0.12.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 4cca66d5737a3ca6a1081e5b8eabfd7ab076ecfb075bf721d4499aa2776804d5

python3-criu-3.15-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 0fea95eb71c559973fcee7d6fc8e7e9f6bb0e41a61ead2d2f91ffa59b5848aa5

runc-1.0.0-74.rc95.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 4400dbda9c76e26d5aa3dce55d00416f44533b1a98cc60df251b54e52bde81ab

runc-debuginfo-1.0.0-74.rc95.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: e27eff242f3dc4083f534c00ee24277789ecef7a49e1d88ce4a3649e9a0bc736

runc-debugsource-1.0.0-74.rc95.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: f04636974c04edf23ad926f21af684db6753fdb3fe6607c03b9ada9b373a486b

skopeo-1.3.1-7.module+el8.4.0+15741+47bb6bfe.x86_64.rpm

SHA-256: 6b61562ab22613594be126544970efaafd0991c5b8e8ca967ebc26e529f5af19

skopeo-debuginfo-1.3.1-7.module+el8.4.0+15741+47bb6bfe.x86_64.rpm

SHA-256: aaf2600c0360d871a8a2170da1759b04d63d74e9ccc0b97c479f30d408b50205

skopeo-debugsource-1.3.1-7.module+el8.4.0+15741+47bb6bfe.x86_64.rpm

SHA-256: 3f5c70a5b44a51f4a57704d6988e18fd371d42f8bdb19605965c236194d92e36

skopeo-tests-1.3.1-7.module+el8.4.0+15741+47bb6bfe.x86_64.rpm

SHA-256: 280f85cdbb3eb196b10d07c3ab9de5c985fb5dcfdafcf037adbef843aa4818cc

slirp4netns-1.1.8-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 4f73d455c3b0b5936a229464e496ce6d17333e903efd3dfb51b829dadde747e9

slirp4netns-debuginfo-1.1.8-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: 8fbec7ace383078cba000feadbcb041d6c312c3e8da71fb676ef403179d6dfb2

slirp4netns-debugsource-1.1.8-1.module+el8.4.0+14908+81312c48.x86_64.rpm

SHA-256: fce64aea39dac46fad75606b93ed267fb9bb4239715bdf3cdbca3dcf4ab6691e

toolbox-0.0.8-1.module+el8.4.0+14908+81312c48.noarch.rpm

SHA-256: 85736ce43a2167a504f5eaef9749e0251a31fce83ea0e45ff8a71e2afac04292

udica-0.2.4-2.module+el8.4.0+14908+81312c48.noarch.rpm

SHA-256: ad5a2306ef356d8de3ddfffcbe204741cf470056a552b98857d790dc5425bf48

Red Hat Enterprise Linux Server - AUS 8.4