[ALSA-2022:1793] Moderate: container-tools:3.0 security and bug fix update
Type:
security
Severity:
moderate
Release date:
2022-05-10
Description:
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * crun: Default inheritable capabilities for linux container should be empty (CVE-2022-27650) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 skopeo-tests-1.2.4-1.module_el8.6.0+2876+9ed4eae2.aarch64.rpm 00aff9986e25b1035c31bc8c1eaa9c9923fdae3ca34c4cd58025894b35a73810
aarch64 skopeo-1.2.4-1.module_el8.6.0+2876+9ed4eae2.aarch64.rpm 0ad63e2498d49bb384c545900e575e7c881ed8bc6e8f8c9e73a00f116c682096
aarch64 buildah-1.19.9-3.module_el8.6.0+2876+9ed4eae2.aarch64.rpm 0d8d403da963f13c9dec806ea991c5adcc13e21e89455f3b3ed0c102f6ce117b
aarch64 toolbox-tests-0.0.99.3-1.module_el8.6.0+2876+9ed4eae2.aarch64.rpm 16784108ed45fc7b449fab89028a3f35fc4a285f7cc8fb8fffeefadbb76486bb
aarch64 criu-3.15-1.module_el8.6.0+2876+9ed4eae2.aarch64.rpm 183bda468943a18b6ad10f132ac7b8ad92c5ba67382f18c333c8c9aa867498a4
aarch64 crun-0.18-3.module_el8.6.0+2876+9ed4eae2.aarch64.rpm 20d35afd7246f297545b7d305004ebd7caf269f476b62a7b1b1b12c062078895
aarch64 podman-plugins-3.0.1-8.module_el8.6.0+2876+9ed4eae2.aarch64.rpm 237d3e5513282ae31f0bfb7fb8e609d80499518b435fa176429346e46d3ccb02
aarch64 python3-criu-3.15-1.module_el8.6.0+2876+9ed4eae2.aarch64.rpm 2c7f1ee8ae4215d079cff1e2b603282a859335d29bd594ea9af2b34898b61f0b
aarch64 conmon-2.0.26-1.module_el8.6.0+2876+9ed4eae2.aarch64.rpm 306fe44498a4025085a058d7b4579031779ed4142c440f955e909f6289bd77f1
aarch64 podman-catatonit-3.0.1-8.module_el8.6.0+2876+9ed4eae2.aarch64.rpm 36b8654df0e76790dbbdadb4b7a5846bdbf637eb9da97da4fc95da19dee62df6
aarch64 buildah-tests-1.19.9-3.module_el8.6.0+2876+9ed4eae2.aarch64.rpm 3bb371084382cb21688b169b4555f483358dcf826f75aa6b2cd009206673ed5d
aarch64 fuse-overlayfs-1.4.0-2.module_el8.6.0+2876+9ed4eae2.aarch64.rpm 3ca66bf90a7db10bfcb190424d8994f7ce1b9500e48b74b8a372134de734ad81
aarch64 containernetworking-plugins-0.9.1-1.module_el8.6.0+2876+9ed4eae2.aarch64.rpm 3f0c39e32bbcb770678be8761bf54de06006a20775a7b770a14e52d6a06b3829
aarch64 toolbox-0.0.99.3-1.module_el8.6.0+2876+9ed4eae2.aarch64.rpm 6326ac51181d49abba255c70b37255d5ca7775d62b75a79b5feb347e5a1581fb
aarch64 oci-seccomp-bpf-hook-1.2.0-3.module_el8.6.0+2876+9ed4eae2.aarch64.rpm 7002596a5823b220a24a2825ed359567469700fe68233be7bad9a8193dab70f9
aarch64 runc-1.0.0-73.rc95.module_el8.6.0+2876+9ed4eae2.aarch64.rpm 729869a4fe4988174ff7d830d91b074d4a16ed1b33595ba31b879fc58947a9a7
aarch64 crit-3.15-1.module_el8.6.0+2876+9ed4eae2.aarch64.rpm 9736844ada2bb607243e5c208ad7849c2a30f63c7a355b98d3ec2b58fd0553a7
aarch64 containers-common-1.2.4-1.module_el8.6.0+2876+9ed4eae2.aarch64.rpm a2e892af0c9f2f0f5cede506d773b0306091a9b95173cae35cbedb3389e888d9
aarch64 podman-tests-3.0.1-8.module_el8.6.0+2876+9ed4eae2.aarch64.rpm a75dd26f40372959e2151ec7df7dd8b1e820fe0febf0875e62f0c9066902834b
aarch64 libslirp-devel-4.3.1-1.module_el8.6.0+2876+9ed4eae2.aarch64.rpm bf78102e9bec56771abff788e3e9faa89d9851415bd9113306a377b5e4217b09
aarch64 podman-3.0.1-8.module_el8.6.0+2876+9ed4eae2.aarch64.rpm c832198fb3be6287c4517dbc7533e64586a4701f82599d5e5953d73ef873c985
aarch64 podman-remote-3.0.1-8.module_el8.6.0+2876+9ed4eae2.aarch64.rpm f102042d148ac6a612b4fe7755aa9b9c2089d76e1ea4c5c91bfb4f762784f506
aarch64 libslirp-4.3.1-1.module_el8.6.0+2876+9ed4eae2.aarch64.rpm f719eed0bd389be60c4c101043a6341134725a1dcea82f94b45108a00a3826b0
aarch64 slirp4netns-1.1.8-1.module_el8.6.0+2876+9ed4eae2.aarch64.rpm f9f089fce7f81a740a5e0f4b0bd3d6bdf571a5957dde324c949f356db249314e
noarch container-selinux-2.178.0-2.module_el8.6.0+2876+9ed4eae2.noarch.rpm 1cda21c5c27e76dd2608de3b6f634027f68a75fc151fff58b9926e3345fa1a97
noarch udica-0.2.4-1.module_el8.6.0+2876+9ed4eae2.noarch.rpm 5127ec25a6d4632da80e860fe822430306d9edd11da0e2720e8993208343d5b0
noarch podman-docker-3.0.1-8.module_el8.6.0+2876+9ed4eae2.noarch.rpm 90615c91bdf8f887eb20e53cc731207069dd77c87ce27c4962cc33a4c9720bd9
noarch cockpit-podman-29-2.module_el8.6.0+2876+9ed4eae2.noarch.rpm ca63901ffa3247a330ba3fdd859e8ce0a9963d6f27c13d2480ec70ad444226c3
ppc64le podman-plugins-3.0.1-8.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm 0ab33e3c1f7eb28c5a1fc3558ded23ab0e42e022badd5e54995e27a440bdf91f
ppc64le containernetworking-plugins-0.9.1-1.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm 11b3499552b00bd188b40a0adecb3f5bea02a64d93b185ae08c78110cd6a47c4
ppc64le podman-3.0.1-8.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm 3dd4ac868b0fe5f5a8a2720a25cd3896371ddc68c9aea60e8809a63b24a8cb3b
ppc64le skopeo-tests-1.2.4-1.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm 47935db593fc2bb61c108f0888a08fee0ef7703069ad3d75211764d0ec00ce74
ppc64le podman-tests-3.0.1-8.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm 4ae91561112eff678361cd286b21f9502037726b33a05f83f5a9921101b33a5a
ppc64le podman-catatonit-3.0.1-8.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm 4f68fe1f5d7f5cc55b540f9e7e1ddaf9f90e26c611918ac17647c0574625048a
ppc64le skopeo-1.2.4-1.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm 6f27dcbe9eb89be88935f524f69389a49b3a7afe0eb525d0c7f8cb52d75a2761
ppc64le runc-1.0.0-73.rc95.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm 7056dcd6815b6c0a9dc1889821ee03f79ee3e561590eba07f86b4124f11327c1
ppc64le podman-remote-3.0.1-8.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm 7517a3793079d908a0ddcfcd22aeef8fc6d3a8f00962cc5ee3b41e4e484902ff
ppc64le libslirp-4.3.1-1.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm 7e321e8815bb1d11f925c77d7b0804a162490902f67d405602ad4f5220597a61
ppc64le buildah-1.19.9-3.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm 8ab8c53f88a8c05b364e835645c4f8ec3aa98bb7aeff66b86f4b5668aab017f8
ppc64le toolbox-tests-0.0.99.3-1.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm 8ca142be6f51583f8f1bfbeb2149cb8e289c572c652a263e6b7faa6a5c27e192
ppc64le python3-criu-3.15-1.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm 900eb64a1ea3f8d7517d19f3f2f017f137e04d3c3da5aaeb4b48f4b3edafb363
ppc64le slirp4netns-1.1.8-1.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm 94aacc55967ad7e354ce1c8f81cbaf8109b2efe6d84a02ab4f1f86a507a058d2
ppc64le libslirp-devel-4.3.1-1.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm 9becdb022aca7853e26027a20244f2bedf325eb9f06ce3943d0221d2ceca4f77
ppc64le oci-seccomp-bpf-hook-1.2.0-3.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm 9c0fed6a8e512b704223e1943bbdd239c1189765efc1af24371b7b6541e01cae
ppc64le crit-3.15-1.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm aad15709cc1072405bbb1e2e6ae948b251b9cc13875e66424429a83566effdb0
ppc64le fuse-overlayfs-1.4.0-2.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm aeb1d60d13fe6bb342a77ab92520f16d9b69af29aa486338a6a9cddd68f047e8
ppc64le buildah-tests-1.19.9-3.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm badd0c6ac2a583aea147741e5b5b66691cdceaccbded146e74dc4533fb4095f7
ppc64le criu-3.15-1.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm be3bb39d472b615ddf851ffd90b90bac650096c32663aed0cb291c2a941f1506
ppc64le containers-common-1.2.4-1.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm c0dcfb7a5f6effb06840c3bff8b883df07d9a6571ba63eea1b16254e6d0df404
ppc64le conmon-2.0.26-1.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm ea49ffd7a59b2b34d369cce0677c256b1eb46d10b9291c1702c59d5b6a7b76d0
ppc64le toolbox-0.0.99.3-1.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm faeb38785b259ba6b6ff7c6d1f6c87188c0076ea8b106e795c5ca1fa192775d7
ppc64le crun-0.18-3.module_el8.6.0+2876+9ed4eae2.ppc64le.rpm fd51afe4d629586e0ad9681e3fbb5e4e5b2d01c5834de05db1ca479845a28f86
x86_64 podman-3.0.1-8.module_el8.6.0+2876+9ed4eae2.x86_64.rpm 024bb883f470d0895a40d6eeea67c8e29dba5e69184c348f17cfb4ba9422a055
x86_64 podman-tests-3.0.1-8.module_el8.6.0+2876+9ed4eae2.x86_64.rpm 11641af8376533ac09f21fc7f124354ab115e36466e9b20f3da7131647bcff4d
x86_64 criu-3.15-1.module_el8.6.0+2876+9ed4eae2.x86_64.rpm 1ec8368433e7d6bbd4ec3ed6caa3182fd0ee197898f10436b5b47838bbbba77c
x86_64 libslirp-devel-4.3.1-1.module_el8.6.0+2876+9ed4eae2.x86_64.rpm 27c0497463caea3a884f35c234bebfa9913644f0836bdebdb5ddf36a8c8705d8
x86_64 containernetworking-plugins-0.9.1-1.module_el8.6.0+2876+9ed4eae2.x86_64.rpm 27d5db39b7c8fd45330ee33d345f875c1f3fecdbcf0007d403aa6a6cbec13d49
x86_64 toolbox-0.0.99.3-1.module_el8.6.0+2876+9ed4eae2.x86_64.rpm 2aaf41ed563f4b751398c56ea3e0d99ed511f33344a52d3dfc6317e6aca38c77
x86_64 fuse-overlayfs-1.4.0-2.module_el8.6.0+2876+9ed4eae2.x86_64.rpm 2bf1066fd6e7def3e753896d866fa1c759ec367d78c8c880b9baf72d08cc69a1
x86_64 skopeo-tests-1.2.4-1.module_el8.6.0+2876+9ed4eae2.x86_64.rpm 2e72994a80f267369822a1533185aed4d6f503e61c88e04581fad421a81bc292
x86_64 buildah-1.19.9-3.module_el8.6.0+2876+9ed4eae2.x86_64.rpm 2e76b4d62e3d5f39f636f8e5cbb395e81b2ee8c47ab88689d91bf363a9757896
x86_64 crit-3.15-1.module_el8.6.0+2876+9ed4eae2.x86_64.rpm 3aaf5f27dcda843a3ec58617a3dae9c84280708e037614ac1c944f68b73a29fa
x86_64 podman-plugins-3.0.1-8.module_el8.6.0+2876+9ed4eae2.x86_64.rpm 44d6da6821ba6b03106e01ab5f597f18a546208de8b50f3a81d514f346b785e9
x86_64 podman-remote-3.0.1-8.module_el8.6.0+2876+9ed4eae2.x86_64.rpm 4670cfed1e234d22f95cd41bc185db1a42231d1975f87884842f76e5f3873380
x86_64 crun-0.18-3.module_el8.6.0+2876+9ed4eae2.x86_64.rpm 4df8c9c6160d0d7f5b74ee0fe06c606bdb5f618f5122ad51cdfbcd59a932d65d
x86_64 containers-common-1.2.4-1.module_el8.6.0+2876+9ed4eae2.x86_64.rpm 7c3274fb7d6209b0c171fc55c339732e472cac8712cadcaf395c031c0ba233e5
x86_64 runc-1.0.0-73.rc95.module_el8.6.0+2876+9ed4eae2.x86_64.rpm 7dd3e3e89f6ee33094249b5622dc43c24732b092f86e1c98820ef132dcfb5c9e
x86_64 python3-criu-3.15-1.module_el8.6.0+2876+9ed4eae2.x86_64.rpm 8d73f6e4d23b62c73efa11f8e61b1e5e9d99518aff894c426d644b2e0ffdee18
x86_64 conmon-2.0.26-1.module_el8.6.0+2876+9ed4eae2.x86_64.rpm 9bc8e24ff940b362d3ffead90d70bffb2c87d14dc019ff4efbeea8c3cc008cb3
x86_64 libslirp-4.3.1-1.module_el8.6.0+2876+9ed4eae2.x86_64.rpm 9e1495b5d6fb661fcea9e2d6b6a0e2098aa2341924c6d0f0790a7dd9ffded4f0
x86_64 toolbox-tests-0.0.99.3-1.module_el8.6.0+2876+9ed4eae2.x86_64.rpm adc6183b70ce5ddc7fee73cec54f0f456ea9d5d46289f617ec24aa6c975a161e
x86_64 slirp4netns-1.1.8-1.module_el8.6.0+2876+9ed4eae2.x86_64.rpm ae330e32cefa5765da6bb66e2805eb85c5042ea98056d9222309322d5f336160
x86_64 buildah-tests-1.19.9-3.module_el8.6.0+2876+9ed4eae2.x86_64.rpm b1830583e87b979860114bf8a2a17c6f9902d572c4588c23eee7b9e62d073a62
x86_64 skopeo-1.2.4-1.module_el8.6.0+2876+9ed4eae2.x86_64.rpm b47243bbae50a74464eb8ecb14e82d2f02a9cdff6a90877e723691b3324613b4
x86_64 podman-catatonit-3.0.1-8.module_el8.6.0+2876+9ed4eae2.x86_64.rpm d7ab7911623824f3a9819d0ebbe798129120e3962cbd9f0152f6c211a8e139bd
x86_64 oci-seccomp-bpf-hook-1.2.0-3.module_el8.6.0+2876+9ed4eae2.x86_64.rpm e9939c728def7a9bfb39543ab413fac3946fd348d0671bc5ec99f42ae3fed18d
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.