Skip to content
OpenAdvisories
Medium RHSA-2021:4221 1 CVE

Red Hat Security Advisory: container-tools:2.0 security update

Published Sep 14, 2024 · Updated Oct 13, 2026

Ecosystem: Red Hat

Fixed packages 40

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah 0:1.11.6-9.module+el8.5.0+12239+ec01067b
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-debuginfo 0:1.11.6-9.module+el8.5.0+12239+ec01067b
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-debugsource 0:1.11.6-9.module+el8.5.0+12239+ec01067b
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-tests 0:1.11.6-9.module+el8.5.0+12239+ec01067b
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-tests-debuginfo 0:1.11.6-9.module+el8.5.0+12239+ec01067b
Red Hat · RHEL 8 enterprise_linux:8::appstream cockpit-podman 0:11-1.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream conmon 2:2.0.15-1.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream container-selinux 2:2.130.0-1.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins 0:0.8.3-4.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins-debuginfo 0:0.8.3-4.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins-debugsource 0:0.8.3-4.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream containers-common 1:0.1.41-4.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream crit 0:3.12-9.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream criu 0:3.12-9.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-debuginfo 0:3.12-9.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-debugsource 0:3.12-9.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs 0:0.7.8-1.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs-debuginfo 0:0.7.8-1.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs-debugsource 0:0.7.8-1.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream podman 0:1.6.4-26.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-debuginfo 0:1.6.4-26.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-debugsource 0:1.6.4-26.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-docker 0:1.6.4-26.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-remote 0:1.6.4-26.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-remote-debuginfo 0:1.6.4-26.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-tests 0:1.6.4-26.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream python-podman-api 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-criu 0:3.12-9.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream runc 0:1.0.0-66.rc10.module+el8.5.0+11041+627a5cdc
Red Hat · RHEL 8 enterprise_linux:8::appstream runc-debuginfo 0:1.0.0-66.rc10.module+el8.5.0+11041+627a5cdc
Red Hat · RHEL 8 enterprise_linux:8::appstream runc-debugsource 0:1.0.0-66.rc10.module+el8.5.0+11041+627a5cdc
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo 1:0.1.41-4.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-debuginfo 1:0.1.41-4.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-debugsource 1:0.1.41-4.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-tests 1:0.1.41-4.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns 0:0.4.2-3.git21fdece.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns-debuginfo 0:0.4.2-3.git21fdece.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns-debugsource 0:0.4.2-3.git21fdece.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream toolbox 0:0.0.7-1.module+el8.5.0+10223+f7559c42
Red Hat · RHEL 8 enterprise_linux:8::appstream udica 0:0.2.1-2.module+el8.5.0+10223+f7559c42

Vulnerabilities 1

  • Medium 5.5
    CVE-2021-3602

    Buildah processes using chroot isolation may leak environment values to intermediate processes

    An information disclosure flaw was found in Buildah, when building containers using chroot isolation. Running processes in container builds (e.g. Dockerfile RUN commands) can access environment variables from parent and grandparent processes. When run in a co…

    cri-o buildah podman buildah Debian Ubuntu Azure Linux Alpine Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1969264
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4221.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-3602
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-3602
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-3602
  • article
    https://github.com/containers/buildah/security/advisories/GHSA-7638-r9r3-rmjj