Moderate: container-tools:rhel8 security, bug fix, and enhancement update
Summary
ALSA-2020:3053: Moderate: container-tools:rhel8 security, bug fix, and enhancement update. Affects python-podman-api across 2 version ranges.
< 1.2.0-0.2.gitd0a45fe.module_el8.5.0+108+00865455
< 1.2.0-0.2.gitd0a45fe.module_el8.5.0+2635+e4386a39
Fixed in 1.2.0-0.2.gitd0a45fe.module_el8.5.0+108+00865455 or 1.2.0-0.2.gitd0a45fe.module_el8.5.0+2635+e4386a39, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.
Vulnerability Detail
A use-after-free vulnerability (CVE-2020-1983) has been discovered in the slirp component of QEMU. This vulnerability can be exploited through the ip_reass() function in ip_input.c, potentially leading to arbitrary code execution or denial of service attacks. The impact of this vulnerability is considered moderate.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo dnf update python-podman-api-
< 1.2.0-0.2.gitd0a45fe.module_el8.5.0+108+008654551.2.0-0.2.gitd0a45fe.module_el8.5.0+108+00865455 -
< 1.2.0-0.2.gitd0a45fe.module_el8.5.0+2635+e4386a391.2.0-0.2.gitd0a45fe.module_el8.5.0+2635+e4386a39
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Conclusion
In conclusion, it is important to update the affected packages to the recommended versions in order to mitigate the risk of exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for python-podman-api →
FAQ
The container-tools module provides various tools for working with containers, including podman, buildah, skopeo, and runc.
This vulnerability can potentially allow an attacker to execute arbitrary code or launch denial of service attacks.
To fix this vulnerability, update the affected packages to the recommended versions.
No, there are no known workarounds for this vulnerability.
You can find more information about this vulnerability in the CVE page(s) listed in the References section of the original advisory.
Related vulnerabilities
Recent vulnerabilities recorded for python-podman-api.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
