Skip to content
OpenAdvisories
Medium RLSA-2021:1796 2 CVEs

Moderate: container-tools:rhel8 security, bug fix, and enhancement update

Published May 18, 2021 · Updated Feb 4, 2026

Ecosystem: Rocky Linux

Summary

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference (CVE-2020-29652)

* podman: Remote traffic to rootless containers is seen as orginating from localhost (CVE-2021-20199)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.

Fixed packages 38

ReleasePackageFixed in
Rocky Linux · 8 buildah 0:1.19.7-1.module+el8.4.0+558+7340b765
Rocky Linux · 8 cockpit-podman 0:29-2.module+el8.7.0+1076+9b1c11c1
Rocky Linux · 8 cockpit-podman 0:29-2.module+el8.4.0+556+40122d08
Rocky Linux · 8 cockpit-podman 0:29-2.module+el8.5.0+709+440d5e7e
Rocky Linux · 8 cockpit-podman 0:29-2.module+el8.6.0+783+10209741
Rocky Linux · 8 conmon 2:2.0.26-1.module+el8.4.0+558+7340b765
Rocky Linux · 8 conmon 2:2.0.26-1.module+el8.5.0+709+440d5e7e
Rocky Linux · 8 conmon 2:2.0.26-1.module+el8.6.0+783+10209741
Rocky Linux · 8 container-selinux 2:2.158.0-1.module+el8.4.0+558+7340b765
Rocky Linux · 8 containernetworking-plugins 0:0.9.1-1.module+el8.7.0+1076+9b1c11c1
Rocky Linux · 8 containernetworking-plugins 0:0.9.1-1.module+el8.4.0+556+40122d08
Rocky Linux · 8 containernetworking-plugins 0:0.9.1-1.module+el8.5.0+709+440d5e7e
Rocky Linux · 8 containernetworking-plugins 0:0.9.1-1.module+el8.6.0+783+10209741
Rocky Linux · 8 criu 0:3.15-1.module+el8.7.0+1076+9b1c11c1
Rocky Linux · 8 criu 0:3.15-1.module+el8.4.0+556+40122d08
Rocky Linux · 8 criu 0:3.15-1.module+el8.5.0+709+440d5e7e
Rocky Linux · 8 criu 0:3.15-1.module+el8.6.0+783+10209741
Rocky Linux · 8 fuse-overlayfs 0:1.4.0-2.module+el8.7.0+1076+9b1c11c1
Rocky Linux · 8 fuse-overlayfs 0:1.4.0-2.module+el8.4.0+558+7340b765
Rocky Linux · 8 fuse-overlayfs 0:1.4.0-2.module+el8.5.0+709+440d5e7e
Rocky Linux · 8 fuse-overlayfs 0:1.4.0-2.module+el8.6.0+783+10209741
Rocky Linux · 8 libslirp 0:4.3.1-1.module+el8.7.0+1076+9b1c11c1
Rocky Linux · 8 libslirp 0:4.3.1-1.module+el8.4.0+556+40122d08
Rocky Linux · 8 libslirp 0:4.3.1-1.module+el8.5.0+709+440d5e7e
Rocky Linux · 8 libslirp 0:4.3.1-1.module+el8.6.0+783+10209741
Rocky Linux · 8 oci-seccomp-bpf-hook 0:1.2.0-2.module+el8.4.0+556+40122d08
Rocky Linux · 8 podman 0:3.0.1-6.module+el8.4.0+558+7340b765
Rocky Linux · 8 podman 0:3.0.1-6.module+el8.5.0+709+440d5e7e
Rocky Linux · 8 skopeo 1:1.2.2-8.module+el8.5.0+661+c0df01f6
Rocky Linux · 8 slirp4netns 0:1.1.8-1.module+el8.7.0+1076+9b1c11c1
Rocky Linux · 8 slirp4netns 0:1.1.8-1.module+el8.4.0+537+38cf4e42
Rocky Linux · 8 slirp4netns 0:1.1.8-1.module+el8.5.0+709+440d5e7e
Rocky Linux · 8 slirp4netns 0:1.1.8-1.module+el8.6.0+783+10209741
Rocky Linux · 8 toolbox 0:0.0.8-1.module+el8.4.0+556+40122d08
Rocky Linux · 8 udica 0:0.2.4-1.module+el8.7.0+1076+9b1c11c1
Rocky Linux · 8 udica 0:0.2.4-1.module+el8.4.0+556+40122d08
Rocky Linux · 8 udica 0:0.2.4-1.module+el8.5.0+709+440d5e7e
Rocky Linux · 8 udica 0:0.2.4-1.module+el8.6.0+783+10209741

Vulnerabilities 2

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1707078
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1724946
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1726442
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1763007
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1770037
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1798278
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1811773
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1838233
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1841485
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1844199
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1853455
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1860176
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1867892
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1881894
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1897282
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1897594
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1902979
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1903813
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1904549
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1908883
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1915383
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1918554
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1919050
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1921128
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1923986
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1924146
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1931545
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1931785
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1932083
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1935376
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1935922
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1936927
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1937487
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1938234