Fixed packages 40
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | buildah | 0:1.11.6-9.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | buildah-debuginfo | 0:1.11.6-9.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | buildah-debugsource | 0:1.11.6-9.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | buildah-tests | 0:1.11.6-9.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | buildah-tests-debuginfo | 0:1.11.6-9.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | cockpit-podman | 0:11-1.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | conmon | 2:2.0.15-1.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | container-selinux | 2:2.130.0-1.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | containernetworking-plugins | 0:0.8.3-4.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | containernetworking-plugins-debuginfo | 0:0.8.3-4.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | containernetworking-plugins-debugsource | 0:0.8.3-4.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | containers-common | 1:0.1.41-4.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | crit | 0:3.12-9.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | criu | 0:3.12-9.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | criu-debuginfo | 0:3.12-9.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | criu-debugsource | 0:3.12-9.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | fuse-overlayfs | 0:0.7.8-1.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | fuse-overlayfs-debuginfo | 0:0.7.8-1.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | fuse-overlayfs-debugsource | 0:0.7.8-1.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | podman | 0:1.6.4-28.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | podman-debuginfo | 0:1.6.4-28.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | podman-debugsource | 0:1.6.4-28.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | podman-docker | 0:1.6.4-28.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | podman-remote | 0:1.6.4-28.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | podman-remote-debuginfo | 0:1.6.4-28.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | podman-tests | 0:1.6.4-28.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | python-podman-api | 0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | python3-criu | 0:3.12-9.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | runc | 0:1.0.0-65.rc10.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | runc-debuginfo | 0:1.0.0-65.rc10.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | runc-debugsource | 0:1.0.0-65.rc10.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | skopeo | 1:0.1.41-4.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | skopeo-debuginfo | 1:0.1.41-4.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | skopeo-debugsource | 1:0.1.41-4.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | skopeo-tests | 1:0.1.41-4.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | slirp4netns | 0:0.4.2-3.git21fdece.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | slirp4netns-debuginfo | 0:0.4.2-3.git21fdece.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | slirp4netns-debugsource | 0:0.4.2-3.git21fdece.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | toolbox | 0:0.0.7-1.module+el8.4.0+14792+f44be4c2 |
| Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream | udica | 0:0.2.1-2.module+el8.4.0+14792+f44be4c2 |
Vulnerabilities 2
-
High 7.5
Podman's default inheritable capabilities for linux container not empty
A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine), where containers were started incorrectly with non-empty inheritable Linux process capabilities. This …
-
Medium 6.8
Non-empty default inheritable capabilities for linux container in Buildah
A flaw was found in buildah where containers were incorrectly started with non-empty default permissions. A bug was found in Moby (Docker Engine) where containers were incorrectly started with non-empty inheritable Linux process capabilities, enabling an atta…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2066568
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2066840
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1407.json
-
report
https://access.redhat.com/security/cve/CVE-2022-27649
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-27649
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-27649
-
article
https://github.com/containers/podman/security/advisories/GHSA-qvf8-p83w-v58j
-
report
https://access.redhat.com/security/cve/CVE-2022-27651
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-27651
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-27651
-
article
https://github.com/containers/buildah/security/advisories/GHSA-c3g4-w6cv-6v7h