Vulnerability in container-tools:rhel8 package
Summary
ALBA-2019:1956: container-tools:rhel8 bug fix update. Affects oci-systemd-hook across 3 version ranges.
< 1:0.1.15-2.git2d0b8a3.module_el8.5.0+119+9a9ec082
< 1:0.1.15-2.git2d0b8a3.module_el8.4.0+2496+12421f43
< 1:0.1.15-2.git2d0b8a3.module_el8.3.0+2044+12421f43
Fixed in 1:0.1.15-2.git2d0b8a3.module_el8.5.0+119+9a9ec082, 1:0.1.15-2.git2d0b8a3.module_el8.4.0+2496+12421f43 or 1:0.1.15-2.git2d0b8a3.module_el8.3.0+2044+12421f43, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The container-tools module is a collection of tools used for working with containers, including podman, buildah, skopeo, and runc. These tools are commonly used in containerized environments to manage and interact with containers. The package in question, container-tools:rhel8, is specifically designed for Red Hat Enterprise Linux 8.
Vulnerability Detail
The vulnerability in the container-tools:rhel8 package has been identified and addressed in a bug fix update. The specific issues addressed include:
- podman exec rc-code needs to distinguish between stopped containers and non-existing ones
- Performance problems with Podman on systems with IO load
- podman exec leaks an exec_pid_<hash> file for every exec in tmpfs
These issues could potentially lead to incorrect behavior, performance degradation, and resource leaks in containerized environments.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo dnf update oci-systemd-hook-
< 1:0.1.15-2.git2d0b8a3.module_el8.3.0+2044+12421f431:0.1.15-2.git2d0b8a3.module_el8.3.0+2044+12421f43 -
< 1:0.1.15-2.git2d0b8a3.module_el8.4.0+2496+12421f431:0.1.15-2.git2d0b8a3.module_el8.4.0+2496+12421f43 -
< 1:0.1.15-2.git2d0b8a3.module_el8.5.0+119+9a9ec0821:0.1.15-2.git2d0b8a3.module_el8.5.0+119+9a9ec082
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability. It is recommended to apply the fix provided by updating the package to the fixed version.
Conclusion
The vulnerability in the container-tools:rhel8 package has been addressed through a bug fix update. It is recommended to update the package to the fixed version to ensure the security and stability of containerized environments. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for oci-systemd-hook →
FAQ
The container-tools module is a collection of tools used for working with containers, including podman, buildah, skopeo, and runc.
The bug fix update addresses issues related to podman exec rc-code, performance problems with Podman on systems with IO load, and podman exec leaks.
The vulnerability could lead to incorrect behavior, performance degradation, and resource leaks in containerized environments.
To fix the vulnerability, update the container-tools:rhel8 package to the fixed version provided.
No specific workaround has been mentioned. It is recommended to apply the fix by updating the package.
References
Related vulnerabilities
Recent vulnerabilities recorded for oci-systemd-hook.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
