Skip to content
OpenAdvisories
High ALSA-2020:0348 2 CVEs

Important: container-tools:rhel8 security, bug fix, and enhancement update

Published Feb 4, 2020 · Updated Nov 5, 2026

Ecosystem: AlmaLinux

Summary

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() (CVE-2020-7039)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fixed packages 8

ReleasePackageFixed in
AlmaLinux · 8 cockpit-podman 11-1.module_el8.5.0+108+00865455
AlmaLinux · 8 cockpit-podman 11-1.module_el8.5.0+2635+e4386a39
AlmaLinux · 8 containernetworking-plugins 0.8.3-4.module_el8.5.0+2635+e4386a39
AlmaLinux · 8 containernetworking-plugins 0.8.3-4.module_el8.5.0+108+00865455
AlmaLinux · 8 python-podman-api 1.2.0-0.2.gitd0a45fe.module_el8.5.0+2635+e4386a39
AlmaLinux · 8 python-podman-api 1.2.0-0.2.gitd0a45fe.module_el8.5.0+108+00865455
AlmaLinux · 8 udica 0.2.1-2.module_el8.5.0+108+00865455
AlmaLinux · 8 udica 0.2.1-2.module_el8.5.0+2635+e4386a39

Vulnerabilities 2

References

  • report
    https://bugzilla.redhat.com/1731747
  • report
    https://bugzilla.redhat.com/1732280
  • report
    https://bugzilla.redhat.com/1732811
  • report
    https://bugzilla.redhat.com/1749716
  • report
    https://bugzilla.redhat.com/1752599
  • report
    https://bugzilla.redhat.com/1779787
  • report
    https://bugzilla.redhat.com/1779789
  • report
    https://bugzilla.redhat.com/1783277
  • report
    https://bugzilla.redhat.com/1783278
  • report
    https://bugzilla.redhat.com/1783279
  • report
    https://bugzilla.redhat.com/1783280
  • report
    https://bugzilla.redhat.com/1783281
  • report
    https://bugzilla.redhat.com/1787523
  • report
    https://bugzilla.redhat.com/1787524
  • report
    https://bugzilla.redhat.com/1791551
  • advisory
    https://errata.almalinux.org/8/ALSA-2020-0348.html
  • report
    https://vulners.com/cve/CVE-2019-15890
  • report
    https://vulners.com/cve/CVE-2020-7039