Summary
The rhel9/toolbox container image can be used with Toolbox to obtain AlmaLinux based containerized command line environments to aid with development and software testing. Toolbox is built on top of Podman and other standard container technologies from OCI.
This updates the rhel9/toolbox image in the AlmaLinux container registry.
To pull this container image, run one of the following commands:
podman pull registry.AlmaLinux.io/rhel9/toolbox (authenticated)
podman pull registry.access.AlmaLinux.com/ubi9/toolbox (unauthenticated)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | toolbox | 0.0.99.3-10.el9_2 |
| AlmaLinux · 9 | toolbox-tests | 0.0.99.3-10.el9_2 |
Vulnerabilities 2
-
High 7.5
HTTP/2 Stream Cancellation Attack
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
KEV Oct 10, 2023 -
High 7.5CVE-2023-39325 Public exploit
HTTP/2 rapid reset can cause excessive work in net/http
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress requ…