Fixed packages 67
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | aardvark-dns | 2:1.0.1-38.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | buildah | 1:1.24.6-7.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | buildah-debuginfo | 1:1.24.6-7.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | buildah-debugsource | 1:1.24.6-7.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | buildah-tests | 1:1.24.6-7.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | buildah-tests-debuginfo | 1:1.24.6-7.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | cockpit-podman | 0:46-1.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | conmon | 2:2.1.4-2.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | conmon-debuginfo | 2:2.1.4-2.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | conmon-debugsource | 2:2.1.4-2.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | container-selinux | 2:2.205.0-3.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | containernetworking-plugins | 1:1.1.1-6.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | containernetworking-plugins-debuginfo | 1:1.1.1-6.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | containernetworking-plugins-debugsource | 1:1.1.1-6.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | containers-common | 2:1-38.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | crit | 0:3.15-3.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | criu | 0:3.15-3.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | criu-debuginfo | 0:3.15-3.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | criu-debugsource | 0:3.15-3.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | criu-devel | 0:3.15-3.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | criu-libs | 0:3.15-3.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | criu-libs-debuginfo | 0:3.15-3.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | crun | 0:1.8.7-1.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | crun-debuginfo | 0:1.8.7-1.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | crun-debugsource | 0:1.8.7-1.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | fuse-overlayfs | 0:1.9-2.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | fuse-overlayfs-debuginfo | 0:1.9-2.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | fuse-overlayfs-debugsource | 0:1.9-2.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libslirp | 0:4.4.0-1.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libslirp-debuginfo | 0:4.4.0-1.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libslirp-debugsource | 0:4.4.0-1.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libslirp-devel | 0:4.4.0-1.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | netavark | 2:1.0.1-38.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | oci-seccomp-bpf-hook | 0:1.2.5-2.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | oci-seccomp-bpf-hook-debuginfo | 0:1.2.5-2.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | oci-seccomp-bpf-hook-debugsource | 0:1.2.5-2.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman | 2:4.0.2-26.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-catatonit | 2:4.0.2-26.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-catatonit-debuginfo | 2:4.0.2-26.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-debuginfo | 2:4.0.2-26.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-debugsource | 2:4.0.2-26.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-docker | 2:4.0.2-26.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-gvproxy | 2:4.0.2-26.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-gvproxy-debuginfo | 2:4.0.2-26.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-plugins | 2:4.0.2-26.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-plugins-debuginfo | 2:4.0.2-26.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-remote | 2:4.0.2-26.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-remote-debuginfo | 2:4.0.2-26.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-tests | 2:4.0.2-26.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-podman | 0:4.0.0-2.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-criu | 0:3.15-3.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-podman | 0:4.0.0-2.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | runc | 1:1.1.12-1.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | runc-debuginfo | 1:1.1.12-1.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | runc-debugsource | 1:1.1.12-1.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | skopeo | 2:1.6.2-9.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | skopeo-debuginfo | 2:1.6.2-9.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | skopeo-debugsource | 2:1.6.2-9.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | skopeo-tests | 2:1.6.2-9.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | slirp4netns | 0:1.1.8-3.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | slirp4netns-debuginfo | 0:1.1.8-3.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | slirp4netns-debugsource | 0:1.1.8-3.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | toolbox | 0:0.0.99.4-5.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | toolbox-debuginfo | 0:0.0.99.4-5.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | toolbox-debugsource | 0:0.0.99.4-5.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | toolbox-tests | 0:0.0.99.4-5.module+el8.9.0+21242+944321bb |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | udica | 0:0.2.6-4.module+el8.9.0+21242+944321bb |
Vulnerabilities 3
-
High 8.6
runc container breakout through process.cwd trickery and leaked fds
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a worki…
-
Unscored —
Denial of service via chunk extensions in net/http
A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically rea…
-
Unscored —
Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel
Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
article
https://access.redhat.com/security/vulnerabilities/RHSB-2024-001
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2253193
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2253330
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2258725
-
article
https://issues.redhat.com/browse/RHEL-15029
-
article
https://issues.redhat.com/browse/RHEL-17145
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0748.json
-
report
https://access.redhat.com/security/cve/CVE-2023-39326
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-39326
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-39326
-
advisory
https://pkg.go.dev/vuln/GO-2023-2382
-
report
https://access.redhat.com/security/cve/CVE-2023-45287
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-45287
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-45287
-
advisory
https://pkg.go.dev/vuln/GO-2023-2375
-
report
https://access.redhat.com/security/cve/CVE-2024-21626
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-21626
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-21626
-
article
https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv