RHSA-2022:7822 — Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

Fixed packages 67

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream	aardvark-dns	2:1.1.0-5.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	buildah	1:1.27.2-2.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	buildah-debuginfo	1:1.27.2-2.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	buildah-debugsource	1:1.27.2-2.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	buildah-tests	1:1.27.2-2.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	buildah-tests-debuginfo	1:1.27.2-2.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	cockpit-podman	0:53-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	conmon	3:2.1.4-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	conmon-debuginfo	3:2.1.4-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	conmon-debugsource	3:2.1.4-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	container-selinux	2:2.189.0-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	containernetworking-plugins	1:1.1.1-3.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	containernetworking-plugins-debuginfo	1:1.1.1-3.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	containernetworking-plugins-debugsource	1:1.1.1-3.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	containers-common	2:1-43.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	crit	0:3.15-3.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	criu	0:3.15-3.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	criu-debuginfo	0:3.15-3.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	criu-debugsource	0:3.15-3.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	criu-devel	0:3.15-3.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	criu-libs	0:3.15-3.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	criu-libs-debuginfo	0:3.15-3.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	crun	0:1.5-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	crun-debuginfo	0:1.5-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	crun-debugsource	0:1.5-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	fuse-overlayfs	0:1.9-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	fuse-overlayfs-debuginfo	0:1.9-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	fuse-overlayfs-debugsource	0:1.9-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	libslirp	0:4.4.0-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	libslirp-debuginfo	0:4.4.0-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	libslirp-debugsource	0:4.4.0-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	libslirp-devel	0:4.4.0-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	netavark	2:1.1.0-7.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	oci-seccomp-bpf-hook	0:1.2.6-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	oci-seccomp-bpf-hook-debuginfo	0:1.2.6-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	oci-seccomp-bpf-hook-debugsource	0:1.2.6-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman	3:4.2.0-4.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-catatonit	3:4.2.0-4.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-catatonit-debuginfo	3:4.2.0-4.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-debuginfo	3:4.2.0-4.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-debugsource	3:4.2.0-4.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-docker	3:4.2.0-4.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-gvproxy	3:4.2.0-4.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-gvproxy-debuginfo	3:4.2.0-4.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-plugins	3:4.2.0-4.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-plugins-debuginfo	3:4.2.0-4.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-remote	3:4.2.0-4.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-remote-debuginfo	3:4.2.0-4.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-tests	3:4.2.0-4.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-podman	0:4.2.1-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	python3-criu	0:3.15-3.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	python3-podman	0:4.2.1-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	runc	1:1.1.4-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	runc-debuginfo	1:1.1.4-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	runc-debugsource	1:1.1.4-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	skopeo	2:1.9.3-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	skopeo-debuginfo	2:1.9.3-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	skopeo-debugsource	2:1.9.3-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	skopeo-tests	2:1.9.3-1.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	slirp4netns	0:1.2.0-2.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	slirp4netns-debuginfo	0:1.2.0-2.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	slirp4netns-debugsource	0:1.2.0-2.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	toolbox	0:0.0.99.3-0.6.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	toolbox-debuginfo	0:0.0.99.3-0.6.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	toolbox-debugsource	0:0.0.99.3-0.6.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	toolbox-tests	0:0.0.99.3-0.6.module+el8.7.0+17064+3b31f55c
Red Hat · RHEL 8 enterprise_linux:8::appstream	udica	0:0.2.6-3.module+el8.7.0+17064+3b31f55c

Vulnerabilities 2

High 7.1

CVE-2022-2989

Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to…

podman podman github.com/containers/podman/v3 github.com/containers/podman/v4 Debian Ubuntu Azure Linux Alpine Go

Sep 13, 2022
High 7.1

CVE-2022-2990

Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used t…

buildah buildah golang-github-containers-buildah golang-github-containers-buildah Debian Ubuntu Azure Linux Alpine Go

Sep 13, 2022

References

article
https://access.redhat.com/security/updates/classification/#low
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index
report
https://bugzilla.redhat.com/show_bug.cgi?id=2121445
report
https://bugzilla.redhat.com/show_bug.cgi?id=2121453
report
https://bugzilla.redhat.com/show_bug.cgi?id=2125644
report
https://bugzilla.redhat.com/show_bug.cgi?id=2125645
report
https://bugzilla.redhat.com/show_bug.cgi?id=2125647
report
https://bugzilla.redhat.com/show_bug.cgi?id=2125648
report
https://bugzilla.redhat.com/show_bug.cgi?id=2125686
report
https://bugzilla.redhat.com/show_bug.cgi?id=2129767
report
https://bugzilla.redhat.com/show_bug.cgi?id=2130234
report
https://bugzilla.redhat.com/show_bug.cgi?id=2130236
report
https://bugzilla.redhat.com/show_bug.cgi?id=2130911
report
https://bugzilla.redhat.com/show_bug.cgi?id=2132360
report
https://bugzilla.redhat.com/show_bug.cgi?id=2132412
report
https://bugzilla.redhat.com/show_bug.cgi?id=2132992
report
https://bugzilla.redhat.com/show_bug.cgi?id=2133390
report
https://bugzilla.redhat.com/show_bug.cgi?id=2136406
report
https://bugzilla.redhat.com/show_bug.cgi?id=2136433
report
https://bugzilla.redhat.com/show_bug.cgi?id=2136438
report
https://bugzilla.redhat.com/show_bug.cgi?id=2137295
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7822.json
report
https://access.redhat.com/security/cve/CVE-2022-2989
advisory
https://www.cve.org/CVERecord?id=CVE-2022-2989
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-2989
article
https://www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation/
report
https://access.redhat.com/security/cve/CVE-2022-2990
advisory
https://www.cve.org/CVERecord?id=CVE-2022-2990
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-2990

Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

Fixed packages 67

Vulnerabilities 2

Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification

Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification

References