Vulnerability in container-tools:rhel8 package
Summary
ALBA-2020:5496: container-tools:rhel8 bug fix update. Affects libslirp versions < 4.3.1-1.module_el8.6.0+2876+9ed4eae2. Fixed in 4.3.1-1.module_el8.6.0+2876+9ed4eae2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The container-tools module is a collection of tools used for working with containers, including podman, buildah, skopeo, and runc. These tools are commonly used in containerized environments to manage and interact with containers. The vulnerability affects the container-tools package in the AlmaLinux 8 ecosystem.
Vulnerability Detail
The vulnerability in the container-tools package is related to a bug fix update. The specific details of the bug fix are not provided in the vulnerability report. However, it is mentioned that the description and summary for the container-tools module have been updated in version 8.3.0. The impact and potential ramifications of the vulnerability are not specified.
How To Fix
Minimum fixed version
4.3.1-1.module_el8.6.0+2876+9ed4eae2
This is the first release that contains the fix.
sudo dnf update libslirp
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The container-tools package in the AlmaLinux 8 ecosystem has a vulnerability that can be fixed by updating to version 8.3.0 or later. It is recommended to apply the fix to ensure the security of containerized environments. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for libslirp →
FAQ
The container-tools module is a collection of tools used for working with containers, including podman, buildah, skopeo, and runc.
The impact of the vulnerability is not specified in the vulnerability report.
To fix the vulnerability, it is recommended to update the container-tools package to version 8.3.0 or later.
The affected packages are libslirp, libslirp-devel, python-podman-api.
More information about the vulnerability can be found in the source link provided in the vulnerability report.
References
Related vulnerabilities
Recent vulnerabilities recorded for libslirp.