RHSA-2023:2758 — Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

Fixed packages 65

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream	aardvark-dns	2:1.5.0-2.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	buildah	1:1.29.1-1.module+el8.8.0+18195+471da4bb
Red Hat · RHEL 8 enterprise_linux:8::appstream	buildah-debuginfo	1:1.29.1-1.module+el8.8.0+18195+471da4bb
Red Hat · RHEL 8 enterprise_linux:8::appstream	buildah-debugsource	1:1.29.1-1.module+el8.8.0+18195+471da4bb
Red Hat · RHEL 8 enterprise_linux:8::appstream	buildah-tests	1:1.29.1-1.module+el8.8.0+18195+471da4bb
Red Hat · RHEL 8 enterprise_linux:8::appstream	buildah-tests-debuginfo	1:1.29.1-1.module+el8.8.0+18195+471da4bb
Red Hat · RHEL 8 enterprise_linux:8::appstream	cockpit-podman	0:63.1-1.module+el8.8.0+18286+cd236dce
Red Hat · RHEL 8 enterprise_linux:8::appstream	conmon	3:2.1.6-1.module+el8.8.0+18098+9b44df5f
Red Hat · RHEL 8 enterprise_linux:8::appstream	conmon-debuginfo	3:2.1.6-1.module+el8.8.0+18098+9b44df5f
Red Hat · RHEL 8 enterprise_linux:8::appstream	conmon-debugsource	3:2.1.6-1.module+el8.8.0+18098+9b44df5f
Red Hat · RHEL 8 enterprise_linux:8::appstream	container-selinux	2:2.205.0-2.module+el8.8.0+18438+15d3aa65
Red Hat · RHEL 8 enterprise_linux:8::appstream	containernetworking-plugins	1:1.2.0-1.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	containernetworking-plugins-debuginfo	1:1.2.0-1.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	containernetworking-plugins-debugsource	1:1.2.0-1.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	containers-common	2:1-63.module+el8.8.0+18438+15d3aa65
Red Hat · RHEL 8 enterprise_linux:8::appstream	crit	0:3.15-3.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	criu	0:3.15-3.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	criu-debuginfo	0:3.15-3.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	criu-debugsource	0:3.15-3.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	criu-devel	0:3.15-3.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	criu-libs	0:3.15-3.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	criu-libs-debuginfo	0:3.15-3.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	crun	0:1.8.1-2.module+el8.8.0+18418+f0e540fe
Red Hat · RHEL 8 enterprise_linux:8::appstream	crun-debuginfo	0:1.8.1-2.module+el8.8.0+18418+f0e540fe
Red Hat · RHEL 8 enterprise_linux:8::appstream	crun-debugsource	0:1.8.1-2.module+el8.8.0+18418+f0e540fe
Red Hat · RHEL 8 enterprise_linux:8::appstream	fuse-overlayfs	0:1.10-1.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	fuse-overlayfs-debuginfo	0:1.10-1.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	fuse-overlayfs-debugsource	0:1.10-1.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	libslirp	0:4.4.0-1.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	libslirp-debuginfo	0:4.4.0-1.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	libslirp-debugsource	0:4.4.0-1.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	libslirp-devel	0:4.4.0-1.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	netavark	2:1.5.0-4.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	oci-seccomp-bpf-hook	0:1.2.8-1.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	oci-seccomp-bpf-hook-debuginfo	0:1.2.8-1.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	oci-seccomp-bpf-hook-debugsource	0:1.2.8-1.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman	3:4.4.1-8.module+el8.8.0+18438+15d3aa65
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-catatonit	3:4.4.1-8.module+el8.8.0+18438+15d3aa65
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-catatonit-debuginfo	3:4.4.1-8.module+el8.8.0+18438+15d3aa65
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-debuginfo	3:4.4.1-8.module+el8.8.0+18438+15d3aa65
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-debugsource	3:4.4.1-8.module+el8.8.0+18438+15d3aa65
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-docker	3:4.4.1-8.module+el8.8.0+18438+15d3aa65
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-gvproxy	3:4.4.1-8.module+el8.8.0+18438+15d3aa65
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-gvproxy-debuginfo	3:4.4.1-8.module+el8.8.0+18438+15d3aa65
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-plugins	3:4.4.1-8.module+el8.8.0+18438+15d3aa65
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-plugins-debuginfo	3:4.4.1-8.module+el8.8.0+18438+15d3aa65
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-remote	3:4.4.1-8.module+el8.8.0+18438+15d3aa65
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-remote-debuginfo	3:4.4.1-8.module+el8.8.0+18438+15d3aa65
Red Hat · RHEL 8 enterprise_linux:8::appstream	podman-tests	3:4.4.1-8.module+el8.8.0+18438+15d3aa65
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-podman	0:4.4.1-1.module+el8.8.0+18275+3a56cc62
Red Hat · RHEL 8 enterprise_linux:8::appstream	python3-criu	0:3.15-3.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	python3-podman	0:4.4.1-1.module+el8.8.0+18275+3a56cc62
Red Hat · RHEL 8 enterprise_linux:8::appstream	runc	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	runc-debuginfo	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	runc-debugsource	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	skopeo	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c
Red Hat · RHEL 8 enterprise_linux:8::appstream	skopeo-tests	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c
Red Hat · RHEL 8 enterprise_linux:8::appstream	slirp4netns	0:1.2.0-2.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	slirp4netns-debuginfo	0:1.2.0-2.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	slirp4netns-debugsource	0:1.2.0-2.module+el8.8.0+18060+3f21f2cc
Red Hat · RHEL 8 enterprise_linux:8::appstream	toolbox	0:0.0.99.3-7.module+el8.8.0+18119+e3deee03
Red Hat · RHEL 8 enterprise_linux:8::appstream	toolbox-debuginfo	0:0.0.99.3-7.module+el8.8.0+18119+e3deee03
Red Hat · RHEL 8 enterprise_linux:8::appstream	toolbox-debugsource	0:0.0.99.3-7.module+el8.8.0+18119+e3deee03
Red Hat · RHEL 8 enterprise_linux:8::appstream	toolbox-tests	0:0.0.99.3-7.module+el8.8.0+18119+e3deee03
Red Hat · RHEL 8 enterprise_linux:8::appstream	udica	0:0.2.6-20.module+el8.8.0+18060+3f21f2cc

Vulnerabilities 14

High 7.5

CVE-2022-27664

golang.org/x/net/http2 Denial of Service vulnerability

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

katib-suggestion-hyperopt katib-earlystopping katib-suggestion-pbt-enas katib-suggestion-optuna-enas Debian Ubuntu Azure Linux Alpine Wolfi Go

Sep 6, 2022
High 7.5

CVE-2022-30630

Stack exhaustion in Glob on certain paths in io/fs

Uncontrolled recursion in Glob in io/fs before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path which contains a large number of path separators.

Go standard library io/fs golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022
High 7.5

CVE-2022-30631

Stack exhaustion when reading certain archives in compress/gzip

Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compressed files.

Go standard library compress/gzip golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022
High 7.5

CVE-2022-30633

Stack exhaustion when unmarshaling certain documents in encoding/xml

Uncontrolled recursion in Unmarshal in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via unmarshalling an XML document into a Go struct which has a nested field that uses the 'any' field tag.

Go standard library encoding/xml golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022
High 7.5

CVE-2022-30635

Stack exhaustion when decoding certain messages in encoding/gob

Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.

Go standard library encoding/gob golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022
Medium 6.8

CVE-2023-0778

Podman Time-of-check Time-of-use (TOCTOU) Race Condition

A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system.

cri-o podman podman github.com/containers/podman/v4 Debian Ubuntu Azure Linux Alpine Go

Mar 27, 2023
Medium 6.5

CVE-2022-1705

Improper sanitization of Transfer-Encoding headers in net/http

Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly fails to reject the header as invalid.

Go standard library net/http golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022
Medium 6.5

CVE-2022-32148

Exposure of client IP addresses in net/http

Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.ServeHTTP with a Request.Header map containing a nil value for the X-Forwarded-For header, which causes ReverseProxy to set …

Go standard library net/http golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022
Medium 5.5

CVE-2022-1962

Stack exhaustion due to deeply nested types in go/parser

Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply nested types or declarations.

Go standard library go/parser golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022
Medium 5.3

CVE-2022-41717 Public exploit

Excessive memory growth in net/http and golang.org/x/net/http2

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large…

Go standard library golang.org/x/net net/http golang.org/x/net/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go

Dec 8, 2022
Low 3.1

CVE-2022-30629

Session tickets lack random ticket_age_add in crypto/tls

Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.

Go standard library crypto/tls golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022
Unscored —

CVE-2022-28131

Stack exhaustion from deeply nested XML documents in encoding/xml

Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.

Go standard library encoding/xml golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022
Unscored —

CVE-2022-30632

Stack exhaustion on crafted paths in path/filepath

Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators.

Go standard library path/filepath golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022
Unscored —

CVE-2022-32189

Panic when decoding Float and Rat types in math/big

A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.

Go standard library math/big golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022

References

article
https://access.redhat.com/security/updates/classification/#moderate
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index
report
https://bugzilla.redhat.com/show_bug.cgi?id=2033280
report
https://bugzilla.redhat.com/show_bug.cgi?id=2047290
report
https://bugzilla.redhat.com/show_bug.cgi?id=2059658
report
https://bugzilla.redhat.com/show_bug.cgi?id=2080458
report
https://bugzilla.redhat.com/show_bug.cgi?id=2089790
report
https://bugzilla.redhat.com/show_bug.cgi?id=2090166
report
https://bugzilla.redhat.com/show_bug.cgi?id=2092793
report
https://bugzilla.redhat.com/show_bug.cgi?id=2097708
report
https://bugzilla.redhat.com/show_bug.cgi?id=2106396
report
https://bugzilla.redhat.com/show_bug.cgi?id=2107342
report
https://bugzilla.redhat.com/show_bug.cgi?id=2107371
report
https://bugzilla.redhat.com/show_bug.cgi?id=2107374
report
https://bugzilla.redhat.com/show_bug.cgi?id=2107376
report
https://bugzilla.redhat.com/show_bug.cgi?id=2107383
report
https://bugzilla.redhat.com/show_bug.cgi?id=2107386
report
https://bugzilla.redhat.com/show_bug.cgi?id=2107388
report
https://bugzilla.redhat.com/show_bug.cgi?id=2107390
report
https://bugzilla.redhat.com/show_bug.cgi?id=2107392
report
https://bugzilla.redhat.com/show_bug.cgi?id=2113814
report
https://bugzilla.redhat.com/show_bug.cgi?id=2116481
report
https://bugzilla.redhat.com/show_bug.cgi?id=2116922
report
https://bugzilla.redhat.com/show_bug.cgi?id=2120435
report
https://bugzilla.redhat.com/show_bug.cgi?id=2121841
report
https://bugzilla.redhat.com/show_bug.cgi?id=2123415
report
https://bugzilla.redhat.com/show_bug.cgi?id=2124414
report
https://bugzilla.redhat.com/show_bug.cgi?id=2124416
report
https://bugzilla.redhat.com/show_bug.cgi?id=2124669
report
https://bugzilla.redhat.com/show_bug.cgi?id=2124705
report
https://bugzilla.redhat.com/show_bug.cgi?id=2124952
report
https://bugzilla.redhat.com/show_bug.cgi?id=2126243
report
https://bugzilla.redhat.com/show_bug.cgi?id=2126697
report
https://bugzilla.redhat.com/show_bug.cgi?id=2128675
report
https://bugzilla.redhat.com/show_bug.cgi?id=2131741
report
https://bugzilla.redhat.com/show_bug.cgi?id=2131836
report
https://bugzilla.redhat.com/show_bug.cgi?id=2135970
report
https://bugzilla.redhat.com/show_bug.cgi?id=2135973
report
https://bugzilla.redhat.com/show_bug.cgi?id=2136319

Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

Fixed packages 65

Vulnerabilities 14

golang.org/x/net/http2 Denial of Service vulnerability

Stack exhaustion in Glob on certain paths in io/fs

Stack exhaustion when reading certain archives in compress/gzip

Stack exhaustion when unmarshaling certain documents in encoding/xml

Stack exhaustion when decoding certain messages in encoding/gob

Podman Time-of-check Time-of-use (TOCTOU) Race Condition

Improper sanitization of Transfer-Encoding headers in net/http

Exposure of client IP addresses in net/http

Stack exhaustion due to deeply nested types in go/parser

Excessive memory growth in net/http and golang.org/x/net/http2

Session tickets lack random ticket_age_add in crypto/tls

Stack exhaustion from deeply nested XML documents in encoding/xml

Stack exhaustion on crafted paths in path/filepath

Panic when decoding Float and Rat types in math/big

References