Skip to content
OpenAdvisories
High RHSA-2021:0705 1 CVE

Red Hat Security Advisory: container-tools:1.0 security update

Published Sep 13, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 35

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah 0:1.5-8.gite94b4f9.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-debuginfo 0:1.5-8.gite94b4f9.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-debugsource 0:1.5-8.gite94b4f9.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream container-selinux 2:2.124.0-1.gitf958d0c.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins 0:0.7.4-4.git9ebe139.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins-debuginfo 0:0.7.4-4.git9ebe139.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins-debugsource 0:0.7.4-4.git9ebe139.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream containers-common 1:0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream crit 0:3.12-9.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream criu 0:3.12-9.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-debuginfo 0:3.12-9.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-debugsource 0:3.12-9.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs 0:0.3-5.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs-debuginfo 0:0.3-5.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs-debugsource 0:0.3-5.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream oci-systemd-hook 1:0.1.15-2.git2d0b8a3.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream oci-systemd-hook-debuginfo 1:0.1.15-2.git2d0b8a3.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream oci-systemd-hook-debugsource 1:0.1.15-2.git2d0b8a3.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream oci-umount 2:2.3.4-2.git87f9237.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream oci-umount-debuginfo 2:2.3.4-2.git87f9237.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream oci-umount-debugsource 2:2.3.4-2.git87f9237.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream podman 0:1.0.0-8.git921f98f.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-debuginfo 0:1.0.0-8.git921f98f.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-debugsource 0:1.0.0-8.git921f98f.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-docker 0:1.0.0-8.git921f98f.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-criu 0:3.12-9.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream runc 0:1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream runc-debuginfo 0:1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream runc-debugsource 0:1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo 1:0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-debuginfo 1:0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-debugsource 1:0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns 0:0.1-5.dev.gitc4e1bc5.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns-debuginfo 0:0.1-5.dev.gitc4e1bc5.module+el8.3.0+10171+12421f43
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns-debugsource 0:0.1-5.dev.gitc4e1bc5.module+el8.3.0+10171+12421f43

Vulnerabilities 1

  • High 7.0
    CVE-2021-20188

    Improper Authorization in github.com/containers/libpod

    A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not correctly checked. This flaw can be abused by a low-privileged user inside the container to access any other file in the container, even if …

    libpod libpod github.com/containers/libpod Debian Ubuntu Go

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1915734
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0705.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-20188
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-20188
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-20188