Skip to content
OpenAdvisories
High RHSA-2022:7457 6 CVEs

Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

Published Oct 21, 2024 · Updated Oct 9, 2026

Ecosystem: Red Hat

Fixed packages 67

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream aardvark-dns 2:1.1.0-4.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah 1:1.27.0-2.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-debuginfo 1:1.27.0-2.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-debugsource 1:1.27.0-2.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-tests 1:1.27.0-2.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-tests-debuginfo 1:1.27.0-2.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream cockpit-podman 0:53-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream conmon 3:2.1.4-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream conmon-debuginfo 3:2.1.4-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream conmon-debugsource 3:2.1.4-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream container-selinux 2:2.189.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins 1:1.1.1-3.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins-debuginfo 1:1.1.1-3.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins-debugsource 1:1.1.1-3.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream containers-common 2:1-40.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream crit 0:3.15-3.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream criu 0:3.15-3.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-debuginfo 0:3.15-3.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-debugsource 0:3.15-3.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-devel 0:3.15-3.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-libs 0:3.15-3.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-libs-debuginfo 0:3.15-3.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream crun 0:1.5-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream crun-debuginfo 0:1.5-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream crun-debugsource 0:1.5-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs 0:1.9-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs-debuginfo 0:1.9-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs-debugsource 0:1.9-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream libslirp 0:4.4.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream libslirp-debuginfo 0:4.4.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream libslirp-debugsource 0:4.4.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream libslirp-devel 0:4.4.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream netavark 2:1.1.0-6.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream oci-seccomp-bpf-hook 0:1.2.6-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream oci-seccomp-bpf-hook-debuginfo 0:1.2.6-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream oci-seccomp-bpf-hook-debugsource 0:1.2.6-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream podman 3:4.2.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-catatonit 3:4.2.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-catatonit-debuginfo 3:4.2.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-debuginfo 3:4.2.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-debugsource 3:4.2.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-docker 3:4.2.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-gvproxy 3:4.2.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-gvproxy-debuginfo 3:4.2.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-plugins 3:4.2.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-plugins-debuginfo 3:4.2.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-remote 3:4.2.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-remote-debuginfo 3:4.2.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-tests 3:4.2.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream python-podman 0:4.2.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-criu 0:3.15-3.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-podman 0:4.2.0-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream runc 1:1.1.4-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream runc-debuginfo 1:1.1.4-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream runc-debugsource 1:1.1.4-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo 2:1.9.2-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-debuginfo 2:1.9.2-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-debugsource 2:1.9.2-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-tests 2:1.9.2-1.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns 0:1.2.0-2.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns-debuginfo 0:1.2.0-2.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns-debugsource 0:1.2.0-2.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream toolbox 0:0.0.99.3-0.6.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream toolbox-debuginfo 0:0.0.99.3-0.6.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream toolbox-debugsource 0:0.0.99.3-0.6.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream toolbox-tests 0:0.0.99.3-0.6.module+el8.7.0+16772+33343656
Red Hat · RHEL 8 enterprise_linux:8::appstream udica 0:0.2.6-3.module+el8.7.0+16772+33343656

Vulnerabilities 6

  • High 7.5
    CVE-2022-1708

    Node DOS by way of memory exhaustion through ExecSync request in CRI-O

    A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after co…

    cri-o github.com/cri-o/cri-o cri-o Azure Linux Alpine Go
  • High 7.5
    CVE-2022-27191

    golang.org/x/crypto/ssh Denial of service via crafted Signer

    The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.

    go k3d k3d-proxy k3d-tools Debian Ubuntu Alpine Wolfi Go
  • High 7.1
    CVE-2022-2990

    Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification

    An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used t…

    buildah buildah golang-github-containers-buildah golang-github-containers-buildah Debian Ubuntu Azure Linux Alpine Go
  • Medium 5.9
    CVE-2022-29162

    Incorrect Default Permissions in runc

    runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to version 1.1.2 where `runc exec --cap` created processes with non-empty inheritable Linux process capabilities, creating an aty…

    opencontainers runc ctop podman Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Low 3.0
    CVE-2021-41190

    Clarify Content-Type handling in OCI spec

    The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to determine the type of document during…

    opencontainers distribution-spec buildah docker.io Ubuntu Azure Linux Alpine Go
  • Unscored —
    CVE-2021-36221

    Panic in ReverseProxy in net/http/httputil

    Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.

    go stdlib golang-1.8 golang-1.13 Debian Ubuntu Alpine Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1820551
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1941727
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1945929
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1974423
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1995656
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1996050
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2005866
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2009264
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2009346
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2024938
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2027662
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2028408
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2030195
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2039045
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2052697
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2053990
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2055313
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2059666
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2062697
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2064702
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2066145
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2068006
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2072452
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2073958
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2078925
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2079759
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2079761
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2081836
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2083570
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2083997
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2085361
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2086398
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2086757
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2090609
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2090920
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2093079
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2094610