RHSA-2024:2586MediumCVSS 7.5

Red Hat Security Advisory: container-tools:3.0 security update

Published
April 30, 2024
Last Modified
September 8, 2026

🔗 CVE IDs covered (2)

CVE-2021-33198 →CVE-2022-41715 →

📋 Description

CVE-2021-33198 — golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents CVE-2022-41715 — golang: regexp/syntax: limit memory used by parsing regexps

🎯 Affected products200

  • Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • buildah-0:1.19.9-1.module+el8.4.0+21529+674bace2.ppc64le (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • buildah-0:1.19.9-1.module+el8.4.0+21529+674bace2.src (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • buildah-0:1.19.9-1.module+el8.4.0+21529+674bace2.src (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • buildah-0:1.19.9-1.module+el8.4.0+21529+674bace2.src (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • buildah-0:1.19.9-1.module+el8.4.0+21529+674bace2.x86_64 (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • buildah-0:1.19.9-1.module+el8.4.0+21529+674bace2.x86_64 (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • buildah-0:1.19.9-1.module+el8.4.0+21529+674bace2.x86_64 (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • buildah-debuginfo-0:1.19.9-1.module+el8.4.0+21529+674bace2.ppc64le (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • buildah-debuginfo-0:1.19.9-1.module+el8.4.0+21529+674bace2.x86_64 (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • buildah-debuginfo-0:1.19.9-1.module+el8.4.0+21529+674bace2.x86_64 (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • buildah-debuginfo-0:1.19.9-1.module+el8.4.0+21529+674bace2.x86_64 (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • buildah-debugsource-0:1.19.9-1.module+el8.4.0+21529+674bace2.ppc64le (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • buildah-debugsource-0:1.19.9-1.module+el8.4.0+21529+674bace2.x86_64 (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • buildah-debugsource-0:1.19.9-1.module+el8.4.0+21529+674bace2.x86_64 (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • buildah-debugsource-0:1.19.9-1.module+el8.4.0+21529+674bace2.x86_64 (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • buildah-tests-0:1.19.9-1.module+el8.4.0+21529+674bace2.ppc64le (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • buildah-tests-0:1.19.9-1.module+el8.4.0+21529+674bace2.x86_64 (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • buildah-tests-0:1.19.9-1.module+el8.4.0+21529+674bace2.x86_64 (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • buildah-tests-0:1.19.9-1.module+el8.4.0+21529+674bace2.x86_64 (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • buildah-tests-debuginfo-0:1.19.9-1.module+el8.4.0+21529+674bace2.ppc64le (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • buildah-tests-debuginfo-0:1.19.9-1.module+el8.4.0+21529+674bace2.x86_64 (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • buildah-tests-debuginfo-0:1.19.9-1.module+el8.4.0+21529+674bace2.x86_64 (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • buildah-tests-debuginfo-0:1.19.9-1.module+el8.4.0+21529+674bace2.x86_64 (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • cockpit-podman-0:29-2.module+el8.4.0+21529+674bace2.noarch (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • cockpit-podman-0:29-2.module+el8.4.0+21529+674bace2.noarch (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • cockpit-podman-0:29-2.module+el8.4.0+21529+674bace2.noarch (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • cockpit-podman-0:29-2.module+el8.4.0+21529+674bace2.src (container-tools:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • +170 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (3)