Skip to content
OpenAdvisories
High RHSA-2024:5194 2 CVEs

Red Hat Security Advisory: container-tools:rhel8 security update

Published Oct 21, 2024 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 65

ReleasePackageFixed in
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream aardvark-dns 2:1.5.0-2.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream buildah 1:1.29.3-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream buildah-debuginfo 1:1.29.3-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream buildah-debugsource 1:1.29.3-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream buildah-tests 1:1.29.3-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream buildah-tests-debuginfo 1:1.29.3-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream cockpit-podman 0:63.1-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream conmon 3:2.1.6-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream conmon-debuginfo 3:2.1.6-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream conmon-debugsource 3:2.1.6-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream container-selinux 2:2.229.0-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream containernetworking-plugins 1:1.2.0-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream containernetworking-plugins-debuginfo 1:1.2.0-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream containernetworking-plugins-debugsource 1:1.2.0-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream containers-common 2:1-66.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream crit 0:3.15-4.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream criu 0:3.15-4.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream criu-debuginfo 0:3.15-4.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream criu-debugsource 0:3.15-4.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream criu-devel 0:3.15-4.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream criu-libs 0:3.15-4.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream criu-libs-debuginfo 0:3.15-4.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream crun 0:1.8.4-2.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream crun-debuginfo 0:1.8.4-2.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream crun-debugsource 0:1.8.4-2.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream fuse-overlayfs 0:1.11-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream fuse-overlayfs-debuginfo 0:1.11-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream fuse-overlayfs-debugsource 0:1.11-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream libslirp 0:4.4.0-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream libslirp-debuginfo 0:4.4.0-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream libslirp-debugsource 0:4.4.0-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream libslirp-devel 0:4.4.0-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream netavark 2:1.5.1-3.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream oci-seccomp-bpf-hook 0:1.2.8-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream oci-seccomp-bpf-hook-debuginfo 0:1.2.8-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream oci-seccomp-bpf-hook-debugsource 0:1.2.8-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream podman 3:4.4.1-22.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream podman-catatonit 3:4.4.1-22.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream podman-catatonit-debuginfo 3:4.4.1-22.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream podman-debuginfo 3:4.4.1-22.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream podman-debugsource 3:4.4.1-22.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream podman-docker 3:4.4.1-22.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream podman-gvproxy 3:4.4.1-22.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream podman-gvproxy-debuginfo 3:4.4.1-22.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream podman-plugins 3:4.4.1-22.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream podman-plugins-debuginfo 3:4.4.1-22.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream podman-remote 3:4.4.1-22.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream podman-remote-debuginfo 3:4.4.1-22.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream podman-tests 3:4.4.1-22.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream python-podman 0:4.4.1-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream python3-criu 0:3.15-4.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream python3-podman 0:4.4.1-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream runc 1:1.1.12-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream runc-debuginfo 1:1.1.12-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream runc-debugsource 1:1.1.12-1.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream skopeo 2:1.11.2-0.2.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream skopeo-tests 2:1.11.2-0.2.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream slirp4netns 0:1.2.0-3.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream slirp4netns-debuginfo 0:1.2.0-3.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream slirp4netns-debugsource 0:1.2.0-3.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream toolbox 0:0.0.99.3-7.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream toolbox-debuginfo 0:0.0.99.3-7.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream toolbox-debugsource 0:0.0.99.3-7.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream toolbox-tests 0:0.0.99.3-7.module+el8.8.0+22142+4cbed6b3
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream udica 0:0.2.6-20.module+el8.8.0+22142+4cbed6b3

Vulnerabilities 2

  • High 7.5
    CVE-2024-37298

    Potential memory exhaustion attack due to sparse slice deserialization

    gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running `schema.Decoder.Decode()` on a struct that has a field of type `[]struct{...}` opens it up to malicious attacks regarding memory allocations, taking advantage of the spars…

    gorilla schema zot telegraf Debian Ubuntu Azure Linux Wolfi Go
  • Medium 6.0
    CVE-2024-6104

    go-retryablehttp can leak basic auth credentials to log files

    go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7.

    HashiCorp Shared library zot kubescape Debian Ubuntu Azure Linux Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2294000
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2295010
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5194.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-6104
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-6104
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-6104
  • report
    https://access.redhat.com/security/cve/CVE-2024-37298
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-37298
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-37298
  • article
    https://github.com/gorilla/schema/blob/main/decoder.go#L223
  • article
    https://github.com/gorilla/schema/commit/cd59f2f12cbdfa9c06aa63e425d1fe4a806967ff
  • article
    https://github.com/gorilla/schema/security/advisories/GHSA-3669-72x9-r9p3