Skip to content
OpenAdvisories
Medium ELSA-2020-1650 3 CVEs

Moderate: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

Published May 5, 2020 · Updated May 5, 2020

Ecosystem: Oracle Linux

Fixed packages 21

ReleasePackageFixed in
Oracle Linux · 8 buildah 0:1.11.6-7.0.1.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 buildah-tests 0:1.11.6-7.0.1.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 cockpit-podman 0:12-1.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 conmon 2:2.0.6-1.0.1.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 container-selinux 2:2.124.0-1.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 containernetworking-plugins 0:0.8.3-5.0.1.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 containers-common 1:0.1.40-10.0.1.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 crit 0:3.12-9.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 criu 0:3.12-9.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 fuse-overlayfs 0:0.7.2-5.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 podman 0:1.6.4-10.0.1.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 podman-docker 0:1.6.4-10.0.1.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 podman-remote 0:1.6.4-10.0.1.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 podman-tests 0:1.6.4-10.0.1.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 python-podman-api 0:1.2.0-0.2.gitd0a45fe.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 python3-criu 0:3.12-9.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 runc 0:1.0.0-65.rc10.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 skopeo 1:0.1.40-10.0.1.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 skopeo-tests 1:0.1.40-10.0.1.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 slirp4netns 0:0.4.2-3.git21fdece.module+el8.2.0+5584+b2b2d3fb
Oracle Linux · 8 udica 0:0.2.1-2.module+el8.2.0+5584+b2b2d3fb

Vulnerabilities 3

  • Medium 5.9
    CVE-2019-19921

    opencontainers runc contains procfs race condition with a shared volume mount

    runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run cus…

    containerd runc github.com/opencontainers/runc runc Debian Ubuntu Alpine Go
  • Medium 5.9
    CVE-2020-1726

    Podman has Files or Directories Accessible to External Parties

    A flaw was discovered in Podman where it incorrectly allows containers when created to overwrite existing files in volumes, even if they are mounted as read-only. When a user runs a malicious container or a container based on a malicious image with an attache…

    The podman podman github.com/containers/podman Debian Alpine Go
  • Unscored —
    CVE-2020-1702

    A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, su…