Skip to content
OpenAdvisories
High RHSA-2020:3053 2 CVEs

Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 44

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah 0:1.14.9-1.module+el8.2.1+6689+748e6520
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-debuginfo 0:1.14.9-1.module+el8.2.1+6689+748e6520
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-debugsource 0:1.14.9-1.module+el8.2.1+6689+748e6520
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-tests 0:1.14.9-1.module+el8.2.1+6689+748e6520
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-tests-debuginfo 0:1.14.9-1.module+el8.2.1+6689+748e6520
Red Hat · RHEL 8 enterprise_linux:8::appstream cockpit-podman 0:17-1.module+el8.2.1+6636+bf4db4ab
Red Hat · RHEL 8 enterprise_linux:8::appstream conmon 2:2.0.17-1.module+el8.2.1+6771+3533eb4c
Red Hat · RHEL 8 enterprise_linux:8::appstream container-selinux 2:2.135.0-1.module+el8.2.1+6849+893e4f4a
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins 0:0.8.6-1.module+el8.2.1+6626+598993b4
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins-debuginfo 0:0.8.6-1.module+el8.2.1+6626+598993b4
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins-debugsource 0:0.8.6-1.module+el8.2.1+6626+598993b4
Red Hat · RHEL 8 enterprise_linux:8::appstream containers-common 1:1.0.0-1.module+el8.2.1+6676+604e1b26
Red Hat · RHEL 8 enterprise_linux:8::appstream crit 0:3.14-2.module+el8.2.1+6750+e53a300c
Red Hat · RHEL 8 enterprise_linux:8::appstream criu 0:3.14-2.module+el8.2.1+6750+e53a300c
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-debuginfo 0:3.14-2.module+el8.2.1+6750+e53a300c
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-debugsource 0:3.14-2.module+el8.2.1+6750+e53a300c
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs 0:1.0.0-2.module+el8.2.1+6465+1a51e8b6
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs-debuginfo 0:1.0.0-2.module+el8.2.1+6465+1a51e8b6
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs-debugsource 0:1.0.0-2.module+el8.2.1+6465+1a51e8b6
Red Hat · RHEL 8 enterprise_linux:8::appstream libslirp 0:4.3.0-3.module+el8.2.1+6816+bedf4f91
Red Hat · RHEL 8 enterprise_linux:8::appstream libslirp-debuginfo 0:4.3.0-3.module+el8.2.1+6816+bedf4f91
Red Hat · RHEL 8 enterprise_linux:8::appstream libslirp-debugsource 0:4.3.0-3.module+el8.2.1+6816+bedf4f91
Red Hat · RHEL 8 enterprise_linux:8::appstream libslirp-devel 0:4.3.0-3.module+el8.2.1+6816+bedf4f91
Red Hat · RHEL 8 enterprise_linux:8::appstream podman 0:1.9.3-2.module+el8.2.1+6867+366c07d6
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-debuginfo 0:1.9.3-2.module+el8.2.1+6867+366c07d6
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-debugsource 0:1.9.3-2.module+el8.2.1+6867+366c07d6
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-docker 0:1.9.3-2.module+el8.2.1+6867+366c07d6
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-remote 0:1.9.3-2.module+el8.2.1+6867+366c07d6
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-remote-debuginfo 0:1.9.3-2.module+el8.2.1+6867+366c07d6
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-tests 0:1.9.3-2.module+el8.2.1+6867+366c07d6
Red Hat · RHEL 8 enterprise_linux:8::appstream python-podman-api 0:1.2.0-0.2.gitd0a45fe.module+el8.2.1+6465+1a51e8b6
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-criu 0:3.14-2.module+el8.2.1+6750+e53a300c
Red Hat · RHEL 8 enterprise_linux:8::appstream runc 0:1.0.0-66.rc10.module+el8.2.1+6465+1a51e8b6
Red Hat · RHEL 8 enterprise_linux:8::appstream runc-debuginfo 0:1.0.0-66.rc10.module+el8.2.1+6465+1a51e8b6
Red Hat · RHEL 8 enterprise_linux:8::appstream runc-debugsource 0:1.0.0-66.rc10.module+el8.2.1+6465+1a51e8b6
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo 1:1.0.0-1.module+el8.2.1+6676+604e1b26
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-debuginfo 1:1.0.0-1.module+el8.2.1+6676+604e1b26
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-debugsource 1:1.0.0-1.module+el8.2.1+6676+604e1b26
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-tests 1:1.0.0-1.module+el8.2.1+6676+604e1b26
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns 0:1.0.1-1.module+el8.2.1+6595+03641d72
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns-debuginfo 0:1.0.1-1.module+el8.2.1+6595+03641d72
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns-debugsource 0:1.0.1-1.module+el8.2.1+6595+03641d72
Red Hat · RHEL 8 enterprise_linux:8::appstream toolbox 0:0.0.7-1.module+el8.2.1+6465+1a51e8b6
Red Hat · RHEL 8 enterprise_linux:8::appstream udica 0:0.2.1-2.module+el8.2.1+6465+1a51e8b6

Vulnerabilities 2

  • High 7.5
    CVE-2020-1983

    libslirp: use after free vulnerability cause a denial of service.

    A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.

    slirp libslirp qemu qemu Debian Ubuntu Alpine
  • High 7.0
    CVE-2021-20188

    Improper Authorization in github.com/containers/libpod

    A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not correctly checked. This flaw can be abused by a low-privileged user inside the container to access any other file in the container, even if …

    libpod libpod github.com/containers/libpod Debian Ubuntu Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1703261
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1782408
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1784950
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1785480
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1806044
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1807379
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1808483
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1809648
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1810874
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1811779
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1815170
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1815991
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1822037
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1826486
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1829061
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1829825
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1833390
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1836440
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1838991
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1839065
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3053.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-1983
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-1983
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-1983
  • report
    https://access.redhat.com/security/cve/CVE-2021-20188
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1915734
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-20188
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-20188