RHSA-2020:1926HighCVSS 8.8

Red Hat Security Advisory: container-tools:1.0 security and bug fix update

Published
April 28, 2020
Last Modified
August 6, 2026

🔗 CVE IDs covered (1)

CVE-2020-10696 →

📋 Description

CVE-2020-10696 — buildah: Crafted input tar file may lead to local file overwrite during image build process

🎯 Affected products146

  • Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-0:1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.aarch64 (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-0:1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.ppc64le (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-0:1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.s390x (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-0:1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.src (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-0:1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.x86_64 (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debuginfo-0:1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.aarch64 (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debuginfo-0:1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.ppc64le (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debuginfo-0:1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.s390x (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debuginfo-0:1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.x86_64 (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debugsource-0:1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.aarch64 (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debugsource-0:1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.ppc64le (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debugsource-0:1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.s390x (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debugsource-0:1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca.x86_64 (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • container-selinux-2:2.124.0-1.gitf958d0c.module+el8.2.0+6370+6fb6c8ca.noarch (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • container-selinux-2:2.124.0-1.gitf958d0c.module+el8.2.0+6370+6fb6c8ca.src (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • containernetworking-plugins-0:0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.aarch64 (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • containernetworking-plugins-0:0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.ppc64le (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • containernetworking-plugins-0:0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.s390x (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • containernetworking-plugins-0:0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.src (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • containernetworking-plugins-0:0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.x86_64 (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • containernetworking-plugins-debuginfo-0:0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.aarch64 (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • containernetworking-plugins-debuginfo-0:0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.ppc64le (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • containernetworking-plugins-debuginfo-0:0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.s390x (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • containernetworking-plugins-debuginfo-0:0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.x86_64 (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • containernetworking-plugins-debugsource-0:0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.aarch64 (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • containernetworking-plugins-debugsource-0:0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.ppc64le (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • containernetworking-plugins-debugsource-0:0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.s390x (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • containernetworking-plugins-debugsource-0:0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca.x86_64 (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • containers-common-1:0.1.32-4.git1715c90.module+el8.2.0+6370+6fb6c8ca.aarch64 (container-tools:1.0) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • +116 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (7)