Skip to content
OpenAdvisories
High RHSA-2022:7469 3 CVEs

Red Hat Security Advisory: container-tools:4.0 security and bug fix update

Published Oct 21, 2024 · Updated Oct 9, 2026

Ecosystem: Red Hat

Fixed packages 67

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream aardvark-dns 2:1.0.1-35.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah 1:1.24.5-2.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-debuginfo 1:1.24.5-2.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-debugsource 1:1.24.5-2.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-tests 1:1.24.5-2.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream buildah-tests-debuginfo 1:1.24.5-2.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream cockpit-podman 0:46-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream conmon 2:2.1.4-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream conmon-debuginfo 2:2.1.4-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream conmon-debugsource 2:2.1.4-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream container-selinux 2:2.189.0-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins 1:1.1.1-2.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins-debuginfo 1:1.1.1-2.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream containernetworking-plugins-debugsource 1:1.1.1-2.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream containers-common 2:1-35.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream crit 0:3.15-3.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream criu 0:3.15-3.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-debuginfo 0:3.15-3.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-debugsource 0:3.15-3.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-devel 0:3.15-3.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-libs 0:3.15-3.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream criu-libs-debuginfo 0:3.15-3.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream crun 0:1.5-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream crun-debuginfo 0:1.5-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream crun-debugsource 0:1.5-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs 0:1.9-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs-debuginfo 0:1.9-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream fuse-overlayfs-debugsource 0:1.9-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream libslirp 0:4.4.0-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream libslirp-debuginfo 0:4.4.0-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream libslirp-debugsource 0:4.4.0-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream libslirp-devel 0:4.4.0-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream netavark 2:1.0.1-35.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream oci-seccomp-bpf-hook 0:1.2.5-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream oci-seccomp-bpf-hook-debuginfo 0:1.2.5-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream oci-seccomp-bpf-hook-debugsource 0:1.2.5-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman 2:4.0.2-8.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-catatonit 2:4.0.2-8.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-catatonit-debuginfo 2:4.0.2-8.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-debuginfo 2:4.0.2-8.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-debugsource 2:4.0.2-8.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-docker 2:4.0.2-8.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-gvproxy 2:4.0.2-8.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-gvproxy-debuginfo 2:4.0.2-8.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-plugins 2:4.0.2-8.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-plugins-debuginfo 2:4.0.2-8.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-remote 2:4.0.2-8.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-remote-debuginfo 2:4.0.2-8.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream podman-tests 2:4.0.2-8.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream python-podman 0:4.0.0-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-criu 0:3.15-3.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-podman 0:4.0.0-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream runc 1:1.1.4-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream runc-debuginfo 1:1.1.4-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream runc-debugsource 1:1.1.4-1.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo 2:1.6.2-5.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-debuginfo 2:1.6.2-5.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-debugsource 2:1.6.2-5.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream skopeo-tests 2:1.6.2-5.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns 0:1.1.8-2.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns-debuginfo 0:1.1.8-2.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream slirp4netns-debugsource 0:1.1.8-2.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream toolbox 0:0.0.99.3-0.5.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream toolbox-debuginfo 0:0.0.99.3-0.5.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream toolbox-debugsource 0:0.0.99.3-0.5.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream toolbox-tests 0:0.0.99.3-0.5.module+el8.7.0+16520+2db5507d
Red Hat · RHEL 8 enterprise_linux:8::appstream udica 0:0.2.6-3.module+el8.7.0+16520+2db5507d

Vulnerabilities 3

  • High 7.5
    CVE-2022-1708

    Node DOS by way of memory exhaustion through ExecSync request in CRI-O

    A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after co…

    cri-o github.com/cri-o/cri-o cri-o Azure Linux Alpine Go
  • High 7.5
    CVE-2022-27191

    golang.org/x/crypto/ssh Denial of service via crafted Signer

    The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.

    go k3d k3d-proxy k3d-tools Debian Ubuntu Alpine Wolfi Go
  • Medium 5.9
    CVE-2022-29162

    Incorrect Default Permissions in runc

    runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to version 1.1.2 where `runc exec --cap` created processes with non-empty inheritable Linux process capabilities, creating an aty…

    opencontainers runc ctop podman Debian Ubuntu Azure Linux Alpine Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2064702
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2076617
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2085361
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2086398
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7469.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-1708
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-1708
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-1708
  • article
    https://github.com/cri-o/cri-o/security/advisories/GHSA-fcm2-6c3h-pg6j
  • report
    https://access.redhat.com/security/cve/CVE-2022-27191
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-27191
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-27191
  • article
    https://groups.google.com/g/golang-announce/c/-cp44ypCT5s/m/wmegxkLiAQAJ
  • report
    https://access.redhat.com/security/cve/CVE-2022-29162
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-29162
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-29162
  • article
    https://github.com/opencontainers/runc/security/advisories/GHSA-f3fp-gc8g-vw66