Skip to content
OpenAdvisories
Medium ELSA-2021-4222 1 CVE

Moderate: container-tools:3.0 security and bug fix update (Oracle Linux 8)

Published Nov 16, 2021 · Updated Nov 16, 2021

Ecosystem: Oracle Linux

Summary

buildah
[1.19.9-1]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.19
(https://github.com/containers/buildah/commit/c1d6200)
- fixes CVE-2021-3602
- Related: #1977943

Fixed packages 26

ReleasePackageFixed in
Oracle Linux · 8 buildah 0:1.19.9-1.module+el8.5.0+20341+152f6d53
Oracle Linux · 8 buildah-tests 0:1.19.9-1.module+el8.5.0+20341+152f6d53
Oracle Linux · 8 cockpit-podman 0:29-2.module+el8.5.0+20341+152f6d53
Oracle Linux · 8 conmon 2:2.0.26-1.module+el8.5.0+20341+152f6d53
Oracle Linux · 8 container-selinux 2:2.167.0-1.module+el8.5.0+20408+23b8328e
Oracle Linux · 8 containernetworking-plugins 0:0.9.1-1.module+el8.5.0+20341+152f6d53
Oracle Linux · 8 containers-common 1:1.2.2-10.0.1.module+el8.5.0+20341+152f6d53
Oracle Linux · 8 crit 0:3.15-1.module+el8.5.0+20341+152f6d53
Oracle Linux · 8 criu 0:3.15-1.module+el8.5.0+20341+152f6d53
Oracle Linux · 8 crun 0:0.18-2.module+el8.5.0+20341+152f6d53
Oracle Linux · 8 fuse-overlayfs 0:1.4.0-2.module+el8.5.0+20341+152f6d53
Oracle Linux · 8 libslirp 0:4.3.1-1.module+el8.5.0+20341+152f6d53
Oracle Linux · 8 libslirp-devel 0:4.3.1-1.module+el8.5.0+20341+152f6d53
Oracle Linux · 8 oci-seccomp-bpf-hook 0:1.2.0-3.module+el8.5.0+20341+152f6d53
Oracle Linux · 8 podman 0:3.0.1-6.0.1.module+el8.5.0+20408+23b8328e
Oracle Linux · 8 podman-catatonit 0:3.0.1-6.0.1.module+el8.5.0+20408+23b8328e
Oracle Linux · 8 podman-docker 0:3.0.1-6.0.1.module+el8.5.0+20408+23b8328e
Oracle Linux · 8 podman-plugins 0:3.0.1-6.0.1.module+el8.5.0+20408+23b8328e
Oracle Linux · 8 podman-remote 0:3.0.1-6.0.1.module+el8.5.0+20408+23b8328e
Oracle Linux · 8 podman-tests 0:3.0.1-6.0.1.module+el8.5.0+20408+23b8328e
Oracle Linux · 8 python3-criu 0:3.15-1.module+el8.5.0+20341+152f6d53
Oracle Linux · 8 runc 0:1.0.0-72.rc92.module+el8.5.0+20341+152f6d53
Oracle Linux · 8 skopeo 1:1.2.2-10.0.1.module+el8.5.0+20341+152f6d53
Oracle Linux · 8 skopeo-tests 1:1.2.2-10.0.1.module+el8.5.0+20341+152f6d53
Oracle Linux · 8 slirp4netns 0:1.1.8-1.module+el8.5.0+20341+152f6d53
Oracle Linux · 8 udica 0:0.2.4-1.module+el8.5.0+20341+152f6d53

Vulnerabilities 1

  • Medium 5.5
    CVE-2021-3602

    Buildah processes using chroot isolation may leak environment values to intermediate processes

    An information disclosure flaw was found in Buildah, when building containers using chroot isolation. Running processes in container builds (e.g. Dockerfile RUN commands) can access environment variables from parent and grandparent processes. When run in a co…

    cri-o buildah podman buildah Debian Ubuntu Azure Linux Alpine Go