RLSA-2021:1796

Dashboard / Vulnerabilities / RLSA-2021:1796

RLSA-2021:1796

Summary: Moderate: container-tools:rhel8 security, bug fix, and enhancement update

Details: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference (CVE-2020-29652) * podman: Remote traffic to rootless containers is seen as orginating from localhost (CVE-2021-20199) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.

References: https://errata.rockylinux.org/RLSA-2021:1796, https://bugzilla.redhat.com/show_bug.cgi?id=1707078, https://bugzilla.redhat.com/show_bug.cgi?id=1724946, https://bugzilla.redhat.com/show_bug.cgi?id=1726442, https://bugzilla.redhat.com/show_bug.cgi?id=1763007, https://bugzilla.redhat.com/show_bug.cgi?id=1770037, https://bugzilla.redhat.com/show_bug.cgi?id=1798278, https://bugzilla.redhat.com/show_bug.cgi?id=1811773, https://bugzilla.redhat.com/show_bug.cgi?id=1838233, https://bugzilla.redhat.com/show_bug.cgi?id=1841485, https://bugzilla.redhat.com/show_bug.cgi?id=1844199, https://bugzilla.redhat.com/show_bug.cgi?id=1853455, https://bugzilla.redhat.com/show_bug.cgi?id=1860176, https://bugzilla.redhat.com/show_bug.cgi?id=1867892, https://bugzilla.redhat.com/show_bug.cgi?id=1881894, https://bugzilla.redhat.com/show_bug.cgi?id=1897282, https://bugzilla.redhat.com/show_bug.cgi?id=1897594, https://bugzilla.redhat.com/show_bug.cgi?id=1902979, https://bugzilla.redhat.com/show_bug.cgi?id=1903813, https://bugzilla.redhat.com/show_bug.cgi?id=1904549, https://bugzilla.redhat.com/show_bug.cgi?id=1908883, https://bugzilla.redhat.com/show_bug.cgi?id=1915383, https://bugzilla.redhat.com/show_bug.cgi?id=1918554, https://bugzilla.redhat.com/show_bug.cgi?id=1919050, https://bugzilla.redhat.com/show_bug.cgi?id=1921128, https://bugzilla.redhat.com/show_bug.cgi?id=1923986, https://bugzilla.redhat.com/show_bug.cgi?id=1924146, https://bugzilla.redhat.com/show_bug.cgi?id=1931545, https://bugzilla.redhat.com/show_bug.cgi?id=1931785, https://bugzilla.redhat.com/show_bug.cgi?id=1932083, https://bugzilla.redhat.com/show_bug.cgi?id=1935376, https://bugzilla.redhat.com/show_bug.cgi?id=1935922, https://bugzilla.redhat.com/show_bug.cgi?id=1936927, https://bugzilla.redhat.com/show_bug.cgi?id=1937487, https://bugzilla.redhat.com/show_bug.cgi?id=1938234