Skip to content
OpenAdvisories
High RHSA-2024:0757 1 CVE

Red Hat Security Advisory: container-tools:4.0 security update

Published Oct 21, 2024 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 67

ReleasePackageFixed in
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream aardvark-dns 2:1.0.1-28.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream buildah 1:1.24.2-3.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream buildah-debuginfo 1:1.24.2-3.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream buildah-debugsource 1:1.24.2-3.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream buildah-tests 1:1.24.2-3.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream buildah-tests-debuginfo 1:1.24.2-3.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream cockpit-podman 0:43-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream conmon 2:2.1.0-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream conmon-debuginfo 2:2.1.0-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream conmon-debugsource 2:2.1.0-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream container-selinux 2:2.178.0-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream containernetworking-plugins 0:1.0.1-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream containernetworking-plugins-debuginfo 0:1.0.1-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream containernetworking-plugins-debugsource 0:1.0.1-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream containers-common 2:1-28.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream crit 0:3.15-3.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream criu 0:3.15-3.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream criu-debuginfo 0:3.15-3.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream criu-debugsource 0:3.15-3.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream criu-devel 0:3.15-3.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream criu-libs 0:3.15-3.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream criu-libs-debuginfo 0:3.15-3.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream crun 0:1.4.4-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream crun-debuginfo 0:1.4.4-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream crun-debugsource 0:1.4.4-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream fuse-overlayfs 0:1.8.2-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream fuse-overlayfs-debuginfo 0:1.8.2-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream fuse-overlayfs-debugsource 0:1.8.2-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream libslirp 0:4.4.0-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream libslirp-debuginfo 0:4.4.0-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream libslirp-debugsource 0:4.4.0-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream libslirp-devel 0:4.4.0-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream netavark 2:1.0.1-28.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream oci-seccomp-bpf-hook 0:1.2.3-3.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream oci-seccomp-bpf-hook-debuginfo 0:1.2.3-3.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream oci-seccomp-bpf-hook-debugsource 0:1.2.3-3.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream podman 2:4.0.2-6.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream podman-catatonit 2:4.0.2-6.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream podman-catatonit-debuginfo 2:4.0.2-6.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream podman-debuginfo 2:4.0.2-6.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream podman-debugsource 2:4.0.2-6.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream podman-docker 2:4.0.2-6.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream podman-gvproxy 2:4.0.2-6.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream podman-gvproxy-debuginfo 2:4.0.2-6.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream podman-plugins 2:4.0.2-6.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream podman-plugins-debuginfo 2:4.0.2-6.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream podman-remote 2:4.0.2-6.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream podman-remote-debuginfo 2:4.0.2-6.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream podman-tests 2:4.0.2-6.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream python-podman 0:4.0.0-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream python3-criu 0:3.15-3.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream python3-podman 0:4.0.0-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream runc 1:1.1.12-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream runc-debuginfo 1:1.1.12-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream runc-debugsource 1:1.1.12-1.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream skopeo 2:1.6.1-2.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream skopeo-debuginfo 2:1.6.1-2.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream skopeo-debugsource 2:1.6.1-2.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream skopeo-tests 2:1.6.1-2.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream slirp4netns 0:1.1.8-2.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream slirp4netns-debuginfo 0:1.1.8-2.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream slirp4netns-debugsource 0:1.1.8-2.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream toolbox 0:0.0.99.3-0.4.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream toolbox-debuginfo 0:0.0.99.3-0.4.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream toolbox-debugsource 0:0.0.99.3-0.4.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream toolbox-tests 0:0.0.99.3-0.4.module+el8.6.0+21254+7ef668f8
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::appstream udica 0:0.2.6-3.module+el8.6.0+21254+7ef668f8

Vulnerabilities 1

  • High 8.6
    CVE-2024-21626 Public exploit EPSS 19%

    runc container breakout through process.cwd trickery and leaked fds

    runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a worki…

    opencontainers runc zot kubescape Debian Ubuntu Azure Linux Alpine Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/security/vulnerabilities/RHSB-2024-001
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2258725
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0757.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-21626
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-21626
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-21626
  • article
    https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv