Skip to content
OpenAdvisories
Medium RHSA-2021:4222 1 CVE

Red Hat Security Advisory: container-tools:3.0 security and bug fix update

Published Sep 14, 2024 · Updated Oct 13, 2026

Ecosystem: Red Hat

Fixed packages 58

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah 0:1.19.9-1.module+el8.5.0+12236+c988d830
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-debuginfo 0:1.19.9-1.module+el8.5.0+12236+c988d830
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-debugsource 0:1.19.9-1.module+el8.5.0+12236+c988d830
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-tests 0:1.19.9-1.module+el8.5.0+12236+c988d830
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-tests-debuginfo 0:1.19.9-1.module+el8.5.0+12236+c988d830
Red Hat · RHEL 8 enterprise_linux:8::appstream cockpit-podman 0:29-2.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream conmon 2:2.0.26-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream conmon-debuginfo 2:2.0.26-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream conmon-debugsource 2:2.0.26-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream container-selinux 2:2.167.0-1.module+el8.5.0+12609+beaa716d
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins 0:0.9.1-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins-debuginfo 0:0.9.1-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins-debugsource 0:0.9.1-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream containers-common 1:1.2.2-10.module+el8.5.0+11808+4e1db630
Red Hat · RHEL 8 enterprise_linux:8::appstream crit 0:3.15-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream criu 0:3.15-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-debuginfo 0:3.15-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-debugsource 0:3.15-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream crun 0:0.18-2.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream crun-debuginfo 0:0.18-2.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream crun-debugsource 0:0.18-2.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs 0:1.4.0-2.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs-debuginfo 0:1.4.0-2.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs-debugsource 0:1.4.0-2.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream libslirp 0:4.3.1-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream libslirp-debuginfo 0:4.3.1-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream libslirp-debugsource 0:4.3.1-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream libslirp-devel 0:4.3.1-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream oci-seccomp-bpf-hook 0:1.2.0-3.module+el8.5.0+11073+ba5c6d09
Red Hat · RHEL 8 enterprise_linux:8::appstream oci-seccomp-bpf-hook-debuginfo 0:1.2.0-3.module+el8.5.0+11073+ba5c6d09
Red Hat · RHEL 8 enterprise_linux:8::appstream oci-seccomp-bpf-hook-debugsource 0:1.2.0-3.module+el8.5.0+11073+ba5c6d09
Red Hat · RHEL 8 enterprise_linux:8::appstream podman 0:3.0.1-6.module+el8.5.0+12609+beaa716d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-catatonit 0:3.0.1-6.module+el8.5.0+12609+beaa716d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-catatonit-debuginfo 0:3.0.1-6.module+el8.5.0+12609+beaa716d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-debuginfo 0:3.0.1-6.module+el8.5.0+12609+beaa716d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-debugsource 0:3.0.1-6.module+el8.5.0+12609+beaa716d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-docker 0:3.0.1-6.module+el8.5.0+12609+beaa716d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-plugins 0:3.0.1-6.module+el8.5.0+12609+beaa716d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-plugins-debuginfo 0:3.0.1-6.module+el8.5.0+12609+beaa716d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-remote 0:3.0.1-6.module+el8.5.0+12609+beaa716d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-remote-debuginfo 0:3.0.1-6.module+el8.5.0+12609+beaa716d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-tests 0:3.0.1-6.module+el8.5.0+12609+beaa716d
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-criu 0:3.15-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream runc 0:1.0.0-72.rc92.module+el8.5.0+12236+c988d830
Red Hat · RHEL 8 enterprise_linux:8::appstream runc-debuginfo 0:1.0.0-72.rc92.module+el8.5.0+12236+c988d830
Red Hat · RHEL 8 enterprise_linux:8::appstream runc-debugsource 0:1.0.0-72.rc92.module+el8.5.0+12236+c988d830
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo 1:1.2.2-10.module+el8.5.0+11808+4e1db630
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-debuginfo 1:1.2.2-10.module+el8.5.0+11808+4e1db630
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-debugsource 1:1.2.2-10.module+el8.5.0+11808+4e1db630
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-tests 1:1.2.2-10.module+el8.5.0+11808+4e1db630
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns 0:1.1.8-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns-debuginfo 0:1.1.8-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns-debugsource 0:1.1.8-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream toolbox 0:0.0.99-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream toolbox-debuginfo 0:0.0.99-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream toolbox-debugsource 0:0.0.99-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream toolbox-tests 0:0.0.99-1.module+el8.5.0+10306+3f72d66d
Red Hat · RHEL 8 enterprise_linux:8::appstream udica 0:0.2.4-1.module+el8.5.0+10306+3f72d66d

Vulnerabilities 1

  • Medium 5.5
    CVE-2021-3602

    Buildah processes using chroot isolation may leak environment values to intermediate processes

    An information disclosure flaw was found in Buildah, when building containers using chroot isolation. Running processes in container builds (e.g. Dockerfile RUN commands) can access environment variables from parent and grandparent processes. When run in a co…

    cri-o buildah podman buildah Debian Ubuntu Azure Linux Alpine Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1969264
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1990406
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4222.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-3602
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-3602
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-3602
  • article
    https://github.com/containers/buildah/security/advisories/GHSA-7638-r9r3-rmjj