Headline

RHSA-2022:1793: Red Hat Security Advisory: container-tools:3.0 security and bug fix update

An update for the container-tools:3.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-27650: crun: Default inheritable capabilities for linux container should be empty

2 years ago

Red Hat Security Data

Open in Source

#vulnerability #linux #red_hat #ibm #docker #sap

概要

Moderate: container-tools:3.0 security and bug fix update

タイプ/重大度

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

トピック

An update for the container-tools:3.0 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

説明

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

crun: Default inheritable capabilities for linux container should be empty (CVE-2022-27650)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.6 Release Notes linked from the References section.

影響を受ける製品

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions 8.6 x86_64

修正

BZ - 2034066 - The toolbox in the 3.0 stream does not provide /etc/containers/toolbox.conf
BZ - 2035227 - 3.0 stable stream: podman run --pid=host command causes OCI permission error
BZ - 2066845 - CVE-2022-27650 crun: Default inheritable capabilities for linux container should be empty

参考資料

https://access.redhat.com/security/updates/classification/#moderate
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/

Red Hat Enterprise Linux for x86_64 8

SRPM

buildah-1.19.9-3.module+el8.6.0+14694+4f5132e0.src.rpm

SHA-256: 0d9ebecfdce1d070439141623dabbddd9cedbb30442d18db844e31b60509b869

cockpit-podman-29-2.module+el8.6.0+14694+4f5132e0.src.rpm

SHA-256: 6b82f394f060101f17cdecf18594af7030487c5899858d0629bcf0d0808b4a6c

conmon-2.0.26-1.module+el8.6.0+14694+4f5132e0.src.rpm

SHA-256: 9b12cd3359d12eaf37d270d708b75554df1588b75dcdbc6a92c11ef8996d10f9

container-selinux-2.178.0-2.module+el8.6.0+14694+4f5132e0.src.rpm

SHA-256: dd19c8892226e64652fbc7e1df49ed98bb11b3540f5586a8c901051fe3006f6f

containernetworking-plugins-0.9.1-1.module+el8.6.0+14694+4f5132e0.src.rpm

SHA-256: caac272f277531edb4f01d3d0e330380c0e2f63497b86ad9dfbf48655932d549

criu-3.15-1.module+el8.6.0+14694+4f5132e0.src.rpm

SHA-256: 78357fe4d2b205b64921508fc978a4ed1f4f0f4a6fdca3b0cdc6af0dd031325d

crun-0.18-3.module+el8.6.0+14694+4f5132e0.src.rpm

SHA-256: 018b3f7a809a5576ebbb187a317121e5c2db624d498530be30cf0fb6bf280efb

fuse-overlayfs-1.4.0-2.module+el8.6.0+14694+4f5132e0.src.rpm

SHA-256: ae65ebedd2bf281df4c2c1851e555d3c67bd5ae84fd3ad04a8aa1b54c6f7dd60

libslirp-4.3.1-1.module+el8.6.0+14694+4f5132e0.src.rpm

SHA-256: c4b4c52feccf50a06a4badf8823bea4623b47e70e1c06005216dbf983899add9

oci-seccomp-bpf-hook-1.2.0-3.module+el8.6.0+14694+4f5132e0.src.rpm

SHA-256: ebbca8cf5ead4349011412fe5feb3705c0c83e8a89a630a78d8edc1e6bd0f6c8

podman-3.0.1-8.module+el8.6.0+14694+4f5132e0.src.rpm

SHA-256: e64764d876fc78f5d6feee44190dc5cc080551ccfef48f6426944b657d2a88fd

runc-1.0.0-73.rc95.module+el8.6.0+14694+4f5132e0.src.rpm

SHA-256: 7ee33d464a8f446773c986b877c94f955f55a04cf2c1fdaf0a60aea1c4d079c6

skopeo-1.2.4-1.module+el8.6.0+14694+4f5132e0.src.rpm

SHA-256: 9f643c6e3cdcaf0085e2cd657e093274588414d310308833180ac5c4710fc52d

slirp4netns-1.1.8-1.module+el8.6.0+14694+4f5132e0.src.rpm

SHA-256: e11b7c318dc75dea8607d64deb34a53f6f174a3e6538d7c57b8c035230d8b7e2

toolbox-0.0.99.3-1.module+el8.6.0+14694+4f5132e0.src.rpm

SHA-256: 24074340716ae47e654a1a54212dd53f45cd002c72896b1363b116bc1d305dd3

udica-0.2.4-1.module+el8.6.0+14694+4f5132e0.src.rpm

SHA-256: ff3d23b07498dde6fb0e7b4256c16dd1acfe53b613711236eed2622f7c95c9b6

x86_64

cockpit-podman-29-2.module+el8.6.0+14694+4f5132e0.noarch.rpm

SHA-256: d90590186d28ac7e73a1e7ac06147e50e3fe50ff8c3a1d852a418b07d22adbf7

container-selinux-2.178.0-2.module+el8.6.0+14694+4f5132e0.noarch.rpm

SHA-256: 8c83bdce44e5c7cb58436ae690d3a5ae7492f2836730b5125406dd97736fbc85

podman-docker-3.0.1-8.module+el8.6.0+14694+4f5132e0.noarch.rpm

SHA-256: a6e93087093ab95d3410f660c094e6200a6a133b23c61e53d3bd5117b5b37b8a

udica-0.2.4-1.module+el8.6.0+14694+4f5132e0.noarch.rpm

SHA-256: de110ea304046e640c947fb22119667afd80cc71e72b6e689d58dfa10f9c71e3

buildah-1.19.9-3.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: cbf3e3a252882617402e95550ee0fee3af4c93e434e156ca631eae3b0a8de807

buildah-debuginfo-1.19.9-3.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 4916efd19fa73f56059cc8cccd3658457d7d70633aafadcd3a52dab6efc96341

buildah-debugsource-1.19.9-3.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 37ff3297b7d121ea7a50e5201699438a3f4bf1b843a3a110972080aef436cbb8

buildah-tests-1.19.9-3.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 86d407012d16a1868893a037cc3b43811c92832a39c1778b85b854656bf69403

buildah-tests-debuginfo-1.19.9-3.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 58c927a31fd1dac6334e0fd3f98d61e12c60af2ff982e25647e7d46d2e59b8d7

conmon-2.0.26-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: a21ef6a23ec946b60c4ee8d03d23cd3bbce00220fc131b1b33d2c17c719286ce

conmon-debuginfo-2.0.26-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 6ac419187056be9004402cfa936b9e6466d0ba8af137769fdfd9c8229425ee87

conmon-debugsource-2.0.26-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 29907422b018da47f612435d3895482c213aaf2b5efc942e4312779c715e5e27

containernetworking-plugins-0.9.1-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 6b34d25bc02a96bcd7a27c35c2859e29dc873e830d9ef4cd5794650d0f157bb6

containernetworking-plugins-debuginfo-0.9.1-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 82966068c736a6d80b4dbca62c71b6db45c1088eab27f46d386d47e47342c72e

containernetworking-plugins-debugsource-0.9.1-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: e4b6e5085f9efbbeb9584bb5c06ba627857010a8f63cf6c9d86ea70464dd4b41

containers-common-1.2.4-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 29f48c36eb5157a1f53c55949e9a150f8a304502b47692dfe32ed7d1ff7c8531

crit-3.15-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 224f14c5e1c62ed8e56eaf6d5418b66c10ff3ae3c99d860e112bc39e540b49b3

criu-3.15-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 268dc29e27f06fb18f1d99655eff77c4e25eddcdfc473abec50fe3be59cde193

criu-debuginfo-3.15-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: cc3f98b8ef382a435a5928814fc02b394aa9d8e12db95fddced518dda878790f

criu-debugsource-3.15-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 0a6cab0694ad3df11f6703bdf499fc49a011bf6b795e768311b5060fec6416a4

crun-0.18-3.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 9bb08225c14e97f35323b172115b3359f05b1534ee82be0d46ef3cd0c69702a1

crun-debuginfo-0.18-3.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: e4b74b2b2873df144c6323b026e39be88814e76b248d795c715623ebc453f073

crun-debugsource-0.18-3.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 7f2b1ee6cd6bd6b357de08ba7d12d47f4d9171c1a8575f0708482a50510045d3

fuse-overlayfs-1.4.0-2.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 72414af49cf0409605a3a7da885b5a1a499cf445f790f8d01da1b3a3af373027

fuse-overlayfs-debuginfo-1.4.0-2.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: a7e5486dfaf984e67257715baa7ac35f7c09b84167b378a345cced98cfe3c322

fuse-overlayfs-debugsource-1.4.0-2.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 10b1e6d47c5844d3a733e615741aa4264737d5afcdad4d73541703edfb138515

libslirp-4.3.1-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 63024aa55c83ed2bc68b8f11aad0f391111b0efc384c73922115c17339a1e8eb

libslirp-debuginfo-4.3.1-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: dd7f3dd9c4d9c1596e3c12256383a8f2925d567e1574d08afe183afd5175406d

libslirp-debugsource-4.3.1-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 2f4e0d16a03d3b2341a4c5f3781e4067e5525136d5dcd2f350d999f597dc0ded

libslirp-devel-4.3.1-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 3d70003fd8181aa20dffb597c34f34c9144301747e4f88430b6683c13fa4ddd5

oci-seccomp-bpf-hook-1.2.0-3.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: bf6bc5cf88cd58ad934c15753bccb283c82645d167e2c3182caffbb04285b1bc

oci-seccomp-bpf-hook-debuginfo-1.2.0-3.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: c77419f96e0de68c9fe2a530ada76ad2f0e990cbe871fb20133b31eaeaa5ffd4

oci-seccomp-bpf-hook-debugsource-1.2.0-3.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: cef81eeece8ffbcffd17b97bc4d79d65ce2f70dc1f4995b16868a93b2b8d3f67

podman-3.0.1-8.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 38e949bee8df0f75c8290643672db76b77c3964677a976771c2f4d57e81d5ae9

podman-catatonit-3.0.1-8.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: e5c6d560f77e6154e298984bbb902027710a93b3ecbcb57585e4f50c0e5e8e38

podman-catatonit-debuginfo-3.0.1-8.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: ac6d8888055b38cb24da5039b6fa13f7a1c9cdc8df177e9b874fa6d107b3a5ed

podman-debuginfo-3.0.1-8.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 60cd89a1c41a27c6ad1cb0d997868726dc47fc9770c3b4e8b23d6ddbce5bbf4b

podman-debugsource-3.0.1-8.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 481f67afb0ef090d45016673f87f1fa7987599465e6021ac5eae1adecbbc0bf0

podman-plugins-3.0.1-8.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 58814cb2155cd11fda369f2f7399fd1d909a99512ab7e55a0217f38adeb7d5db

podman-plugins-debuginfo-3.0.1-8.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 845ed5f382e33ebe421f327779fe3d8b8d2995da3dc5e7891526c66c4cdd6427

podman-remote-3.0.1-8.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: bd7a68ad094b89905498927ee6711ecd8fabf439862868853e041b8b63334d49

podman-remote-debuginfo-3.0.1-8.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 749c9989d4b774b2953803d91de764a73145fb1074b7542066bd71a7894a2eca

podman-tests-3.0.1-8.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: fe9f8c7fc59afe01c2d186bd5c23481ee51d5796561dae4f9b1c3dd8c5e88b6b

python3-criu-3.15-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 1805252385c93b6c5b914672a4f6e4ec758ee69b5e27a463cd3753e8a6a77485

runc-1.0.0-73.rc95.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: c4c4c50750718f10c96630fad8b694c6b40cc6660e8280c1080084ae2036484f

runc-debuginfo-1.0.0-73.rc95.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 07d947cfb497d89a8c66ee78d6501e96952530dd84218aa8e2d72074e70521c8

runc-debugsource-1.0.0-73.rc95.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 7b5c354126ed9f78563a4759cc2661c6e593f31336b7abecd74ee2040be554dc

skopeo-1.2.4-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: a5fb520e31c5985e53a0fa36c6f1a6043162c5461e6b08ffe3d3cfd9c0a01ddc

skopeo-debuginfo-1.2.4-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: a03e7348065d4f23798445170cb049972b443e9fe7ad721fb24bbe6aded68c81

skopeo-debugsource-1.2.4-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 4b70c53012155a741069ef714f956e75d74962549c35dcfc2f917170adfd4e55

skopeo-tests-1.2.4-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 72bce6af45d491b1164d2a0f1773c24ca741349b614be1f271a5bb2470ae819d

slirp4netns-1.1.8-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 27fe47bfc9efce1a6068b84f5f7e38f3591143e9168cb908502b45c0513d1433

slirp4netns-debuginfo-1.1.8-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 521ccd9bf399e363f0f4c409a0e3c835e14d7a1b18eea1b37dde9bf6b2441f21

slirp4netns-debugsource-1.1.8-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: c3dcda19e26195d756b730a8f55d0b5d95ba8b02b037fe73af4328bb76a22821

toolbox-0.0.99.3-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: e5039226abf720e56a17b17814eecd2235df1b8a7f57313f6f48dd909493a58d

toolbox-debuginfo-0.0.99.3-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 631b982d0ce87afd2f31eb34802a9d791e6a1992a32434a5c6f6f387aa2fb1d5

toolbox-debugsource-0.0.99.3-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 829302bfae511045a996c5ec2ef9ffe5f3755f9a3dcc1d882be37871201d1e1e

toolbox-tests-0.0.99.3-1.module+el8.6.0+14694+4f5132e0.x86_64.rpm

SHA-256: 84c5a6a970ea39befa4fbf5d6e3193e1c66dcb5bccd05c03ef65a6286b3cd229

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6