RLSA-2019:3403

Dashboard / Vulnerabilities / RLSA-2019:3403

RLSA-2019:3403

Summary: Important: container-tools:rhel8 security, bug fix, and enhancement update

Details: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * QEMU: slirp: heap buffer overflow during packet reassembly (CVE-2019-14378) * containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure (CVE-2019-10214) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.

References: https://errata.rockylinux.org/RLSA-2019:3403, https://bugzilla.redhat.com/show_bug.cgi?id=1655211, https://bugzilla.redhat.com/show_bug.cgi?id=1661597, https://bugzilla.redhat.com/show_bug.cgi?id=1671023, https://bugzilla.redhat.com/show_bug.cgi?id=1672581, https://bugzilla.redhat.com/show_bug.cgi?id=1674519, https://bugzilla.redhat.com/show_bug.cgi?id=1677251, https://bugzilla.redhat.com/show_bug.cgi?id=1677264, https://bugzilla.redhat.com/show_bug.cgi?id=1689255, https://bugzilla.redhat.com/show_bug.cgi?id=1690514, https://bugzilla.redhat.com/show_bug.cgi?id=1691543, https://bugzilla.redhat.com/show_bug.cgi?id=1692513, https://bugzilla.redhat.com/show_bug.cgi?id=1693154, https://bugzilla.redhat.com/show_bug.cgi?id=1693424, https://bugzilla.redhat.com/show_bug.cgi?id=1707220, https://bugzilla.redhat.com/show_bug.cgi?id=1719626, https://bugzilla.redhat.com/show_bug.cgi?id=1719994, https://bugzilla.redhat.com/show_bug.cgi?id=1720646, https://bugzilla.redhat.com/show_bug.cgi?id=1720654, https://bugzilla.redhat.com/show_bug.cgi?id=1721247, https://bugzilla.redhat.com/show_bug.cgi?id=1721638, https://bugzilla.redhat.com/show_bug.cgi?id=1723879, https://bugzilla.redhat.com/show_bug.cgi?id=1728700, https://bugzilla.redhat.com/show_bug.cgi?id=1730281, https://bugzilla.redhat.com/show_bug.cgi?id=1731117, https://bugzilla.redhat.com/show_bug.cgi?id=1732508, https://bugzilla.redhat.com/show_bug.cgi?id=1734745, https://bugzilla.redhat.com/show_bug.cgi?id=1734809, https://bugzilla.redhat.com/show_bug.cgi?id=1737077, https://bugzilla.redhat.com/show_bug.cgi?id=1739961, https://bugzilla.redhat.com/show_bug.cgi?id=1740079, https://bugzilla.redhat.com/show_bug.cgi?id=1741157, https://bugzilla.redhat.com/show_bug.cgi?id=1743685