Fixed packages 65
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | aardvark-dns | 2:1.10.0-1.module+el8.10.0+21209+52deeb51 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | buildah | 2:1.33.7-1.module+el8.10.0+21590+d7d75709 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | buildah-debuginfo | 2:1.33.7-1.module+el8.10.0+21590+d7d75709 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | buildah-debugsource | 2:1.33.7-1.module+el8.10.0+21590+d7d75709 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | buildah-tests | 2:1.33.7-1.module+el8.10.0+21590+d7d75709 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | buildah-tests-debuginfo | 2:1.33.7-1.module+el8.10.0+21590+d7d75709 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | cockpit-podman | 0:84.1-1.module+el8.10.0+21373+0d273fdf |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | conmon | 3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | conmon-debuginfo | 3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | conmon-debugsource | 3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | container-selinux | 2:2.229.0-2.module+el8.10.0+21196+3f0abbca |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | containernetworking-plugins | 1:1.4.0-2.module+el8.10.0+21366+f9cb49f8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | containernetworking-plugins-debuginfo | 1:1.4.0-2.module+el8.10.0+21366+f9cb49f8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | containernetworking-plugins-debugsource | 1:1.4.0-2.module+el8.10.0+21366+f9cb49f8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | containers-common | 2:1-81.module+el8.10.0+21340+c6c7475a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | crit | 0:3.18-5.module+el8.10.0+21672+01ba06ae |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | criu | 0:3.18-5.module+el8.10.0+21672+01ba06ae |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | criu-debuginfo | 0:3.18-5.module+el8.10.0+21672+01ba06ae |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | criu-debugsource | 0:3.18-5.module+el8.10.0+21672+01ba06ae |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | criu-devel | 0:3.18-5.module+el8.10.0+21672+01ba06ae |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | criu-libs | 0:3.18-5.module+el8.10.0+21672+01ba06ae |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | criu-libs-debuginfo | 0:3.18-5.module+el8.10.0+21672+01ba06ae |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | crun | 0:1.14.3-2.module+el8.10.0+21340+c6c7475a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | crun-debuginfo | 0:1.14.3-2.module+el8.10.0+21340+c6c7475a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | crun-debugsource | 0:1.14.3-2.module+el8.10.0+21340+c6c7475a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | fuse-overlayfs | 0:1.13-1.module+el8.10.0+20412+95ee28e2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | fuse-overlayfs-debuginfo | 0:1.13-1.module+el8.10.0+20412+95ee28e2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | fuse-overlayfs-debugsource | 0:1.13-1.module+el8.10.0+20412+95ee28e2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libslirp | 0:4.4.0-2.module+el8.10.0+21672+01ba06ae |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libslirp-debuginfo | 0:4.4.0-2.module+el8.10.0+21672+01ba06ae |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libslirp-debugsource | 0:4.4.0-2.module+el8.10.0+21672+01ba06ae |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libslirp-devel | 0:4.4.0-2.module+el8.10.0+21672+01ba06ae |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | netavark | 2:1.10.3-1.module+el8.10.0+21306+6be40ce7 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+20565+a40ba0e5 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | oci-seccomp-bpf-hook-debuginfo | 0:1.2.10-1.module+el8.10.0+20565+a40ba0e5 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | oci-seccomp-bpf-hook-debugsource | 0:1.2.10-1.module+el8.10.0+20565+a40ba0e5 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-catatonit | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-catatonit-debuginfo | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-debuginfo | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-debugsource | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-docker | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-gvproxy | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-gvproxy-debuginfo | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-plugins | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-plugins-debuginfo | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-remote | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-remote-debuginfo | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-tests | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-podman | 0:4.9.0-1.module+el8.10.0+21196+3f0abbca |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-criu | 0:3.18-5.module+el8.10.0+21672+01ba06ae |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-podman | 0:4.9.0-1.module+el8.10.0+21196+3f0abbca |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | runc | 1:1.1.12-1.module+el8.10.0+21251+62b7388c |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | runc-debuginfo | 1:1.1.12-1.module+el8.10.0+21251+62b7388c |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | runc-debugsource | 1:1.1.12-1.module+el8.10.0+21251+62b7388c |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | skopeo | 2:1.14.3-2.module+el8.10.0+21728+a1d9b0ab |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | skopeo-tests | 2:1.14.3-2.module+el8.10.0+21728+a1d9b0ab |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | slirp4netns | 0:1.2.3-1.module+el8.10.0+21306+6be40ce7 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | slirp4netns-debuginfo | 0:1.2.3-1.module+el8.10.0+21306+6be40ce7 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | slirp4netns-debugsource | 0:1.2.3-1.module+el8.10.0+21306+6be40ce7 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | toolbox | 0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | toolbox-debuginfo | 0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | toolbox-debugsource | 0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | toolbox-tests | 0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | udica | 0:0.2.6-21.module+el8.10.0+21672+01ba06ae |
Vulnerabilities 5
-
High 8.6
Buildah: buildah: container escape via improper bind mount validation
A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mou…
-
High 7.5
Infinite loop in JSON unmarshaling in google.golang.org/protobuf
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown opti…
-
Medium 4.3
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Th…
-
Unscored —
Incorrect sanitization of forwarded query parameters in net/http/httputil
Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparsable value. Afte…
-
Unscored —
Memory exhaustion when compiling regular expressions in regexp/syntax
Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000,…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2132868
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2132872
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2265513
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2268046
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2268854
-
article
https://issues.redhat.com/browse/RHEL-26664
-
article
https://issues.redhat.com/browse/RHEL-28628
-
article
https://issues.redhat.com/browse/RHEL-30885
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3254.json
-
report
https://access.redhat.com/security/cve/CVE-2022-2880
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-2880
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-2880
-
article
https://github.com/golang/go/issues/54663
-
article
https://groups.google.com/g/golang-announce/c/xtuG5faxtaU?pli=1
-
report
https://access.redhat.com/security/cve/CVE-2022-41715
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-41715
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-41715
-
article
https://github.com/golang/go/issues/55949
-
report
https://access.redhat.com/security/cve/CVE-2024-1753
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-1753
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-1753
-
article
https://github.com/containers/buildah/security/advisories/GHSA-pmf3-c36m-g5cf
-
article
https://github.com/containers/podman/security/advisories/GHSA-874v-pj72-92f3
-
advisory
https://pkg.go.dev/vuln/GO-2024-2658
-
report
https://access.redhat.com/security/cve/CVE-2024-24786
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-24786
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-24786
-
article
https://go.dev/cl/569356
-
article
https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/
-
advisory
https://pkg.go.dev/vuln/GO-2024-2611
-
report
https://access.redhat.com/security/cve/CVE-2024-28180
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-28180
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-28180
-
article
https://github.com/go-jose/go-jose/security/advisories/GHSA-c5q2-7r4c-mv6g