RHSA-2024:2077HighCVSS 8.6

Red Hat Security Advisory: container-tools:rhel8 security and bug fix update

Published
April 29, 2024
Last Modified
November 3, 2026

🔗 CVE IDs covered (3)

CVE-2022-32149 →CVE-2024-1753 →CVE-2022-4122 →

📋 Description

CVE-2022-4122 — podman: Symlink error leads to information disclosure CVE-2022-32149 — golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags CVE-2024-1753 — buildah: Buildah: Container escape via improper bind mount validation

🎯 Affected products200

  • Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • aardvark-dns-2:1.5.0-2.module+el8.8.0+21741+dd5be1e7.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • aardvark-dns-2:1.5.0-2.module+el8.8.0+21741+dd5be1e7.ppc64le (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • aardvark-dns-2:1.5.0-2.module+el8.8.0+21741+dd5be1e7.s390x (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • aardvark-dns-2:1.5.0-2.module+el8.8.0+21741+dd5be1e7.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • aardvark-dns-2:1.5.0-2.module+el8.8.0+21741+dd5be1e7.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.ppc64le (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.s390x (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-debuginfo-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-debuginfo-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.ppc64le (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-debuginfo-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.s390x (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-debuginfo-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-debugsource-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-debugsource-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.ppc64le (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-debugsource-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.s390x (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-debugsource-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-tests-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-tests-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.ppc64le (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-tests-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.s390x (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-tests-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-tests-debuginfo-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-tests-debuginfo-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.ppc64le (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-tests-debuginfo-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.s390x (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • buildah-tests-debuginfo-1:1.29.3-1.module+el8.8.0+21741+dd5be1e7.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • cockpit-podman-0:63.1-1.module+el8.8.0+21741+dd5be1e7.noarch (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • cockpit-podman-0:63.1-1.module+el8.8.0+21741+dd5be1e7.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • conmon-3:2.1.6-1.module+el8.8.0+21741+dd5be1e7.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: When SELinux is enabled, the container is restricted to limited read-only access.

🔗 References (6)