Headline

RHSA-2022:2143: Red Hat Security Advisory: container-tools:3.0 security update

An update for the container-tools:3.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-1227: psgo: Privilege escalation in ‘podman top’

2 years ago

Red Hat Security Data

Open in Source

#vulnerability #linux #red_hat #ibm #docker #sap

Synopsis

Important: container-tools:3.0 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the container-tools:3.0 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

psgo: Privilege escalation in ‘podman top’ (CVE-2022-1227)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

BZ - 2070368 - CVE-2022-1227 psgo: Privilege escalation in ‘podman top’

Red Hat Enterprise Linux for x86_64 8

SRPM

buildah-1.19.9-3.module+el8.6.0+14874+64436299.src.rpm

SHA-256: 99e6e430a13ff4fd6b469592f7522f86459ec5c97342c621a061f803dacc472a

cockpit-podman-29-2.module+el8.6.0+14874+64436299.src.rpm

SHA-256: 9cd77e04412667ee78cd63122d1c02264d8d4cb8cebfba3e1461d26d8e55e13a

conmon-2.0.26-1.module+el8.6.0+14874+64436299.src.rpm

SHA-256: fc62941748ef5d3e1604448557be2e46c7f1ee1c91c860d65dd4dca57f2442a6

container-selinux-2.178.0-2.module+el8.6.0+14874+64436299.src.rpm

SHA-256: 9b8157f42da3d8dcbba33364f5f07ccbff8e51c6ce61cdfd867e59e9f27c24fb

containernetworking-plugins-0.9.1-1.module+el8.6.0+14874+64436299.src.rpm

SHA-256: 269352bad8396a060d5fd2da3efc4db00329b1713efdcb001b8b4917c2c05c48

criu-3.15-1.module+el8.6.0+14874+64436299.src.rpm

SHA-256: bbcd98ac611e68782d6b4711cacdaf6df5775a17aa181986237fadb76761d208

crun-0.18-3.module+el8.6.0+14874+64436299.src.rpm

SHA-256: 08e32bb9d034b9d0171b6242b27e2b23a684d982460700b2427c73739feb8a44

fuse-overlayfs-1.4.0-2.module+el8.6.0+14874+64436299.src.rpm

SHA-256: d70473c9d3febda5c8f62dfc14dc9a7d4919ecceb48a27084ebcf2523394a416

libslirp-4.3.1-1.module+el8.6.0+14874+64436299.src.rpm

SHA-256: 9f639c9155146fb6a98d1c888d537a6696fdbaf1a38b41b7ce412262f3965781

oci-seccomp-bpf-hook-1.2.0-3.module+el8.6.0+14874+64436299.src.rpm

SHA-256: 1573f6f0ff7e3bf9dcb32572553927c1a0c08d98f10b68467aeed90687811bc4

podman-3.0.1-9.module+el8.6.0+14874+64436299.src.rpm

SHA-256: e35bcd244579cda57e347d563f7cc457c747a9e81f59a17bc069649bf2cb8cd2

runc-1.0.0-73.rc95.module+el8.6.0+14874+64436299.src.rpm

SHA-256: c852bb0157407ec6bb8cce5b71722edcfb3e7c11f26ad36ef584069c415d75e3

skopeo-1.2.4-1.module+el8.6.0+14874+64436299.src.rpm

SHA-256: fa92169cb1dce5ecaee2ba843bb999806ec7ee3e1f309e23044f5f8a66634d48

slirp4netns-1.1.8-1.module+el8.6.0+14874+64436299.src.rpm

SHA-256: 72cf9e3af45ffe32833c3647d67324f3c3574d2e196fa8006087a9bdce710cd0

toolbox-0.0.99.3-1.module+el8.6.0+14874+64436299.src.rpm

SHA-256: 8ef912b4e60d08f5d24a17d8c84c587a5dff6757999a2a4ba5922eb3025ccfbb

udica-0.2.4-1.module+el8.6.0+14874+64436299.src.rpm

SHA-256: c7b23db5c05b16b14702127ce1815aa08e6e5184abf02290b2bdf3e4020c2fc0

x86_64

buildah-1.19.9-3.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 485af3ac20a81bc5ff2b11dd4b9da7a5bc41d3b46f4465f9689988650b741245

buildah-debuginfo-1.19.9-3.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: eb567b30862514f41f3a57cc503d6f5af746e41c6fc374dfab4544010ca07ddf

buildah-debugsource-1.19.9-3.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 1cf92880049f399cbbde52ed4ec14395c5710fd7800450f1e2c5fcd38e48dae6

buildah-tests-1.19.9-3.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 1c3f2f06dbf9e4e138930cb3427aeee58b666a713ac2a320895eef2101b69625

buildah-tests-debuginfo-1.19.9-3.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 9c75619ada1c1ad2a1c8d5b6303c13523002edc41170c02f55b01fbaf0a650b7

cockpit-podman-29-2.module+el8.6.0+14874+64436299.noarch.rpm

SHA-256: 710126b6437c62211a74876dc681da781878b969d6079e5e503f646fb6bba60c

conmon-2.0.26-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: bea4bf3c323c8e61498a8c34fa439b9df127051305e66583a55941a9991a63ed

conmon-debuginfo-2.0.26-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 42e4105c467352597a3236dde42c132c84b26e7f087f7e71c13706bd755c1dd7

conmon-debugsource-2.0.26-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 99dd607047081cf7bd24eeadb461c471497fae6459f945aea2694f3fb0454ad8

container-selinux-2.178.0-2.module+el8.6.0+14874+64436299.noarch.rpm

SHA-256: ff624b2818347304bcde33287104aa799e8995f1f04b976fe4f35b9037b4d25e

containernetworking-plugins-0.9.1-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: bfda2d286af1939358a79783db3fc274febf01de0eec72e2d9c36dce0fc0426f

containernetworking-plugins-debuginfo-0.9.1-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: d78b5da22606c5a641cd1326b7e7466f42dfa5512c0dee93e429ff11f357b581

containernetworking-plugins-debugsource-0.9.1-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: c4da2e3e66d5b26a3300435621500f7d075e3e2ee514b69aad7e14b3f1ec4637

containers-common-1.2.4-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: b45337f064ce282d543b3016bb04323f586b0260c6b89fd4fdbff985e85e33ce

crit-3.15-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: bdd5b2e765d8b5193a30302a6317d6e770aa3caf1a2df1f8f1b61d1aa2b9743e

criu-3.15-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 22d54ad1c5ee4f3385a6b4366f9678930229681fd91d7930c1c084724a2fea9b

criu-debuginfo-3.15-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 5bfeffb21ac1124edd756ff506739fab1945deaba6b0b140822b7055900ee79e

criu-debugsource-3.15-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 02b4bc984dd67d5931424da1feb80bb0c4d7ad088954aeac0d74bc09f9231fda

crun-0.18-3.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: bc1c459f20c9451c9b14e1c7c96852f5a964ae60d830f7441d39fc06799c1bf1

crun-debuginfo-0.18-3.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 7c76b55bd1ad90da85dc554ba9d01bc1847ed0734d9aa8a19a819f5ebd2db913

crun-debugsource-0.18-3.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 07ac8c25d067594f6ef65fd463c1e521b73e52a65b8356c87636d85e4ddfd8d2

fuse-overlayfs-1.4.0-2.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: c94a76191ec3fe827861bd152e5cf1fd8a43b33ff87f150758ad3a7eb6e6fc11

fuse-overlayfs-debuginfo-1.4.0-2.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 4c76ea54c53b095db4bc6aa2d35a7fed3fe4395206326fd36f3bc8d37ae03d1b

fuse-overlayfs-debugsource-1.4.0-2.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: a66884f479ef7384be63c8efc3e78ddfbca4f16e7a42b26746b4c7f385d9f975

libslirp-4.3.1-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 39c209b17a0bc86f2cabda60d4c4582e26984f81b929a4adb947957b2510acd7

libslirp-debuginfo-4.3.1-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 3c2e0a3cbf6272ea8020e38e3d4d4155981aae73cbdc1f60d82e19b218247308

libslirp-debugsource-4.3.1-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: f5136574cf670e84e18a32d16e456ecdb8b02d0c78f0a48f874a770caf2acf28

libslirp-devel-4.3.1-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: ee4418a0a9d90d7e7d6cd8bc782cf831892fe8d23c638a9b41cb12785f2c1288

oci-seccomp-bpf-hook-1.2.0-3.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 70bafec80afa2040f4577946395734fa7345ce4781f995e55ffb82a31bd52875

oci-seccomp-bpf-hook-debuginfo-1.2.0-3.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: dfee56b91035a0d2d400dbb005432f23805560bf4b2ee9cd730c9ca3b292ace8

oci-seccomp-bpf-hook-debugsource-1.2.0-3.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: d28abf00eace93e89ade1c6736fe77cf0fb877451d25cabaa45ffd0220a84589

podman-3.0.1-9.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: adae6186f5f46ce1c0bd60241254e882c2f30edaf3ff6b11110da7022172f521

podman-catatonit-3.0.1-9.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: f4a282b31c320fcbf2b91c92589f5ee78cf4cdb7664bdf37b14aff999aa254a9

podman-catatonit-debuginfo-3.0.1-9.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 2017c20d433b987a292cc974a4dc0e8091b9639513a4b261e390af4aa24b2041

podman-debuginfo-3.0.1-9.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 69a7280a096bd84267ee1d6c625fbb9180ff94cfa79700d7a39d4b21b5657dd3

podman-debugsource-3.0.1-9.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 4e967070c04e49386c64218aa7e2ceaff62e7cc2d3e081d7b913673bf64f3331

podman-docker-3.0.1-9.module+el8.6.0+14874+64436299.noarch.rpm

SHA-256: 5f7e78827372b92e20cce24426c4e0b6bf2b1ea81335c7bcfa6c0a2fdfa3f04e

podman-plugins-3.0.1-9.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 043d4b89da1c15d86e76633be16a4900b98eb50c3f52e2ab384c640f31c090fb

podman-plugins-debuginfo-3.0.1-9.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 45a0f8eef94e60b7693017725a5e65f99072085f479098a19231ec72845cf66b

podman-remote-3.0.1-9.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 438b2b610bbc2cb802b6bc5e588381d6ce8a07d9d92d6e135420be7e17ca053a

podman-remote-debuginfo-3.0.1-9.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: ea76bce117042770859e85a73d334293fd38962962398e8bd3550578d30c6af7

podman-tests-3.0.1-9.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 70e86d39096160965a0ee4c1e0e30f191f114674c76708738325f184b5effd64

python3-criu-3.15-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: f83785553432b450812709a8cfaf9445562bcc46f667ac5400c7ece8b32fa729

runc-1.0.0-73.rc95.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: fc77beffd8cf78e38eba4211f9a47ed44424a5702ea080f06f8e65f2eaf6e487

runc-debuginfo-1.0.0-73.rc95.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 02a9f238e7b3cdb2d62852c8a0c958220921126e01a721b5660174aca35cd792

runc-debugsource-1.0.0-73.rc95.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 83fab4da2c3b2594c39c984a7139f71565e831d1ff8dab3e42d5fa6f4fceb552

skopeo-1.2.4-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: af32e207b6a240976b42c980abd930b7a17849f09187cb14aea9036dc5808d83

skopeo-debuginfo-1.2.4-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 187c47f3f66b8029796b167a95a862441414e3d5904c1c1136a258e4ca6db4dd

skopeo-debugsource-1.2.4-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: be0c0aa8ccc3c35d1fadc580b0791920b33af2e660071d619e09a917d8d94975

skopeo-tests-1.2.4-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: cf1a26c4c668829415972d0cf79eeed716249d375af4f9c5c424d68c7c766ce5

slirp4netns-1.1.8-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: a2d3dff0282b768994df75da31b4b72d91a8b52a1b85a8edd97590c5cb73dd7c

slirp4netns-debuginfo-1.1.8-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: d5fa8975d4b20c17476f232814f2bc4067912cf19826ec5eafe23a095dd8b059

slirp4netns-debugsource-1.1.8-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 16bfc931d647ac3643e1ad60698837cea3879a2c7c8bfc54219af0785294eafd

toolbox-0.0.99.3-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 0c1d3226c596b9cb01931bc1efbad11c5fb313a1f5b3c6920d8d168d1e3a6a2a

toolbox-debuginfo-0.0.99.3-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 152f1fbefe055ca3d13f464f53add1b2a33112bbb30a6d7998c58c928fa3e1d8

toolbox-debugsource-0.0.99.3-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: 04bea2769c9f9e8a6b5772c095cb91f2a0920c67e73ef22a745bfc466b8ab5ee

toolbox-tests-0.0.99.3-1.module+el8.6.0+14874+64436299.x86_64.rpm

SHA-256: e9608792cb389ac1006919dc4d5671048d28c4f54d8ff84d6830e0ad6271ceac

udica-0.2.4-1.module+el8.6.0+14874+64436299.noarch.rpm

SHA-256: fc21e7c77d77b2a4655049baca0aa318f831472049d363ff5663a5c89ab90d00

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6