Skip to content
OpenAdvisories
Medium RHSA-2020:1650 3 CVEs

Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

Published Sep 16, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 40

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah 0:1.11.6-7.module+el8.2.0+5856+b8046c6d
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-debuginfo 0:1.11.6-7.module+el8.2.0+5856+b8046c6d
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-debugsource 0:1.11.6-7.module+el8.2.0+5856+b8046c6d
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-tests 0:1.11.6-7.module+el8.2.0+5856+b8046c6d
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-tests-debuginfo 0:1.11.6-7.module+el8.2.0+5856+b8046c6d
Red Hat · RHEL 8 enterprise_linux:8::appstream cockpit-podman 0:12-1.module+el8.2.0+5950+6d183a6a
Red Hat · RHEL 8 enterprise_linux:8::appstream conmon 2:2.0.6-1.module+el8.2.0+5182+3136e5d4
Red Hat · RHEL 8 enterprise_linux:8::appstream container-selinux 2:2.124.0-1.module+el8.2.0+5182+3136e5d4
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins 0:0.8.3-5.module+el8.2.0+5201+6b31f0d9
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins-debuginfo 0:0.8.3-5.module+el8.2.0+5201+6b31f0d9
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins-debugsource 0:0.8.3-5.module+el8.2.0+5201+6b31f0d9
Red Hat · RHEL 8 enterprise_linux:8::appstream containers-common 1:0.1.40-10.module+el8.2.0+5955+6cd70ceb
Red Hat · RHEL 8 enterprise_linux:8::appstream crit 0:3.12-9.module+el8.2.0+5029+3ac48e7d
Red Hat · RHEL 8 enterprise_linux:8::appstream criu 0:3.12-9.module+el8.2.0+5029+3ac48e7d
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-debuginfo 0:3.12-9.module+el8.2.0+5029+3ac48e7d
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-debugsource 0:3.12-9.module+el8.2.0+5029+3ac48e7d
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs 0:0.7.2-5.module+el8.2.0+6060+9dbc027d
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs-debuginfo 0:0.7.2-5.module+el8.2.0+6060+9dbc027d
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs-debugsource 0:0.7.2-5.module+el8.2.0+6060+9dbc027d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman 0:1.6.4-10.module+el8.2.0+6063+e761893a
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-debuginfo 0:1.6.4-10.module+el8.2.0+6063+e761893a
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-debugsource 0:1.6.4-10.module+el8.2.0+6063+e761893a
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-docker 0:1.6.4-10.module+el8.2.0+6063+e761893a
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-remote 0:1.6.4-10.module+el8.2.0+6063+e761893a
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-remote-debuginfo 0:1.6.4-10.module+el8.2.0+6063+e761893a
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-tests 0:1.6.4-10.module+el8.2.0+6063+e761893a
Red Hat · RHEL 8 enterprise_linux:8::appstream python-podman-api 0:1.2.0-0.2.gitd0a45fe.module+el8.2.0+5201+6b31f0d9
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-criu 0:3.12-9.module+el8.2.0+5029+3ac48e7d
Red Hat · RHEL 8 enterprise_linux:8::appstream runc 0:1.0.0-65.rc10.module+el8.2.0+5762+aaee29fb
Red Hat · RHEL 8 enterprise_linux:8::appstream runc-debuginfo 0:1.0.0-65.rc10.module+el8.2.0+5762+aaee29fb
Red Hat · RHEL 8 enterprise_linux:8::appstream runc-debugsource 0:1.0.0-65.rc10.module+el8.2.0+5762+aaee29fb
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo 1:0.1.40-10.module+el8.2.0+5955+6cd70ceb
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-debuginfo 1:0.1.40-10.module+el8.2.0+5955+6cd70ceb
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-debugsource 1:0.1.40-10.module+el8.2.0+5955+6cd70ceb
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-tests 1:0.1.40-10.module+el8.2.0+5955+6cd70ceb
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns 0:0.4.2-3.git21fdece.module+el8.2.0+5658+9a15711d
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns-debuginfo 0:0.4.2-3.git21fdece.module+el8.2.0+5658+9a15711d
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns-debugsource 0:0.4.2-3.git21fdece.module+el8.2.0+5658+9a15711d
Red Hat · RHEL 8 enterprise_linux:8::appstream toolbox 0:0.0.7-1.module+el8.2.0+6096+9c3f08f3
Red Hat · RHEL 8 enterprise_linux:8::appstream udica 0:0.2.1-2.module+el8.2.0+4896+8f613c81

Vulnerabilities 3

  • Medium 5.9
    CVE-2019-19921

    opencontainers runc contains procfs race condition with a shared volume mount

    runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run cus…

    containerd runc github.com/opencontainers/runc runc Debian Ubuntu Alpine Go
  • Medium 5.9
    CVE-2020-1726

    Podman has Files or Directories Accessible to External Parties

    A flaw was discovered in Podman where it incorrectly allows containers when created to overwrite existing files in volumes, even if they are mounted as read-only. When a user runs a malicious container or a container based on a malicious image with an attache…

    The podman podman github.com/containers/podman Debian Alpine Go
  • Unscored —
    CVE-2020-1702

    A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, su…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1703245
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1717357
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1731107
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1732704
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1732713
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1748519
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1749999
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1754744
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1754763
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1755119
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1756919
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1757693
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1757845
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1763454
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1766774
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1768930
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1769469
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1771990
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1774755
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1775307
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1776112
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1779834
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1783267
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1783268
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1783270
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1783272
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1783274
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1784267
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1784952
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1788539
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1792796
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1793084
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1793598
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1796107
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1801152
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1802907
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1803496