Skip to content
OpenAdvisories
High RLSA-2021:0705 1 CVE

Important: container-tools:1.0 security update

Published Mar 2, 2021 · Updated Feb 4, 2026

Ecosystem: Rocky Linux

Summary

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* podman: container users permissions are not respected in privileged containers (CVE-2021-20188)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 20

ReleasePackageFixed in
Rocky Linux · 8 buildah 0:1.5-8.gite94b4f9.module+el8.5.0+681+c9a1951f
Rocky Linux · 8 buildah 0:1.5-8.gite94b4f9.module+el8.4.0+557+48ba8b2f
Rocky Linux · 8 container-selinux 2:2.124.0-1.gitf958d0c.module+el8.5.0+681+c9a1951f
Rocky Linux · 8 container-selinux 2:2.124.0-1.gitf958d0c.module+el8.4.0+557+48ba8b2f
Rocky Linux · 8 containernetworking-plugins 0:0.7.4-4.git9ebe139.module+el8.5.0+681+c9a1951f
Rocky Linux · 8 containernetworking-plugins 0:0.7.4-4.git9ebe139.module+el8.4.0+557+48ba8b2f
Rocky Linux · 8 criu 0:3.12-9.module+el8.5.0+681+c9a1951f
Rocky Linux · 8 criu 0:3.12-9.module+el8.4.0+557+48ba8b2f
Rocky Linux · 8 fuse-overlayfs 0:0.3-5.module+el8.5.0+681+c9a1951f
Rocky Linux · 8 fuse-overlayfs 0:0.3-5.module+el8.4.0+557+48ba8b2f
Rocky Linux · 8 oci-systemd-hook 1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f
Rocky Linux · 8 oci-umount 2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f
Rocky Linux · 8 podman 0:1.0.0-8.git921f98f.module+el8.5.0+681+c9a1951f
Rocky Linux · 8 podman 0:1.0.0-8.git921f98f.module+el8.4.0+557+48ba8b2f
Rocky Linux · 8 runc 0:1.0.0-56.rc5.dev.git2abd837.module+el8.5.0+681+c9a1951f
Rocky Linux · 8 runc 0:1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f
Rocky Linux · 8 skopeo 1:0.1.32-6.git1715c90.module+el8.5.0+681+c9a1951f
Rocky Linux · 8 skopeo 1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f
Rocky Linux · 8 slirp4netns 0:0.1-5.dev.gitc4e1bc5.module+el8.5.0+681+c9a1951f
Rocky Linux · 8 slirp4netns 0:0.1-5.dev.gitc4e1bc5.module+el8.4.0+535+5beadeea

Vulnerabilities 1

  • High 7.0
    CVE-2021-20188

    Improper Authorization in github.com/containers/libpod

    A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not correctly checked. This flaw can be abused by a low-privileged user inside the container to access any other file in the container, even if …

    libpod libpod github.com/containers/libpod Debian Ubuntu Go

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1915734