CVE-2022-2990

aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...

CVE-2022-2990 is fixed in 36 products on 1 platform, first by DEBIAN-CVE-2022-2990, released September 13, 2022. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.1
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0035
29th percentile

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: possible information disclosure and modification (CVE-2022-2989) * buildah: possible information disclosure and modification (CVE-2022-2990) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * podman creates lock file in /etc/cni/net.d/cni.lock instead of /run/lock/ (BZ#2125644) * (podman image trust) does not support the new trust type "sigstoreSigned " (BZ#2125645) * podman kill may deadlock (BZ#2125647) * Error: runc: exec failed: unable to start container process: open /dev/pts/0: operation not permitted: OCI permission denied [RHEL 8.7] (BZ#2125648) * containers-common-1-44 is missing RPM-GPG-KEY-redhat-beta [RHEL 8.7] (BZ#2125686) * ADD Dockerfile reference is not validating HTTP status code [rhel8-8.7.0] (BZ#2129767) * Two aardvark-dns instances trying to use the same port on the same interface. [rhel-8.7.0.z] (netavark) (BZ#2130234) * containers config.json gets empty after sudden power loss (BZ#2130236) * PANIC podman API service endpoint handler panic (BZ#2132412) * Podman container got global IPv6 address unexpectedly even when macvlan network is created for pure IPv4 network (BZ#2133390) * Skopeo push image to redhat quay with sigstore was failed (BZ#2136406) * Podman push image to redhat quay with sigstore was failed (BZ#2136433) * Buildah push image to redhat quay with sigstore was failed (BZ#2136438) * Two aardvark-dns instances trying to use the same port on the same interface. [rhel-8.8] (aardvark-dns) (BZ#2137295) Enhancement(s): * [RFE]Podman support to perform custom actions on unhealthy containers (BZ#2130911) * [RFE] python-podman: Podman support to perform custom actions on unhealthy containers (BZ#2132360) * Podman volume plugin timeout should be configurable (BZ#2132992)

Where it's fixed

ProductFixed inFixReleased
Linux
aardvark-dns · RHEL 8 2:1.1.0-5.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
aardvark-dns · almalinux 8 2:1.1.0-5.module_el8.7.0+3344+484dae7b ALSA-2022:7822 Nov 8, 2022
aardvark-dns · ol 8 2:1.1.0-5.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
aardvark-dns · rocky 8 2:1.1.0-5.module+el8.7.0+1078+e72fcd4f RLSA-2022:7822 Nov 8, 2022
buildah · RHEL 8 1:1.27.2-2.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
buildah · RHEL 9 1:1.27.0-2.el9 RHSA-2022:8008 Nov 15, 2022
buildah · almalinux 8 1:1.27.2-2.module_el8.7.0+3348+f3135399 ALSA-2022:7822 Nov 8, 2022
buildah · almalinux 9 1:1.27.0-2.el9 ALSA-2022:8008 Nov 15, 2022
buildah · ol 8 1:1.27.2-2.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
buildah · ol 9 1:1.27.0-2.0.1.el9 ELSA-2022-8008 Nov 22, 2022
buildah · rocky 8 1:1.27.2-2.module+el8.7.0+1078+e72fcd4f RLSA-2022:7822 Nov 8, 2022
buildah-tests · RHEL 8 1:1.27.2-2.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
buildah-tests · RHEL 9 1:1.27.0-2.el9 RHSA-2022:8008 Nov 15, 2022
buildah-tests · almalinux 8 1:1.27.2-2.module_el8.7.0+3348+f3135399 ALSA-2022:7822 Nov 8, 2022
buildah-tests · almalinux 9 1:1.27.0-2.el9 ALSA-2022:8008 Nov 15, 2022
buildah-tests · ol 8 1:1.27.2-2.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
buildah-tests · ol 9 1:1.27.0-2.0.1.el9 ELSA-2022-8008 Nov 22, 2022
cockpit-podman · RHEL 8 0:53-1.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
cockpit-podman · almalinux 8 53-1.module_el8.7.0+3344+484dae7b ALSA-2022:7822 Nov 8, 2022
cockpit-podman · ol 8 0:53-1.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
cockpit-podman · rocky 8 0:53-1.module+el8.7.0+1078+e72fcd4f RLSA-2022:7822 Nov 8, 2022
conmon · RHEL 8 3:2.1.4-1.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
conmon · almalinux 8 3:2.1.4-1.module_el8.7.0+3344+484dae7b ALSA-2022:7822 Nov 8, 2022
conmon · ol 8 3:2.1.4-1.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
conmon · rocky 8 2:2.1.4-1.module+el8.7.0+1077+0e4f03d4 RLSA-2022:7822 Nov 8, 2022
container-selinux · RHEL 8 2:2.189.0-1.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
container-selinux · almalinux 8 2:2.189.0-1.module_el8.7.0+3407+95aa0ca9 ALSA-2022:7822 Nov 8, 2022
container-selinux · ol 8 2:2.189.0-1.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
container-selinux · rocky 8 2:2.189.0-1.module+el8.7.0+1076+9b1c11c1 RLSA-2022:7822 Nov 8, 2022
containernetworking-plugins · RHEL 8 1:1.1.1-3.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
containernetworking-plugins · almalinux 8 1:1.1.1-3.module_el8.6.0+3070+1510fbd1 ALSA-2022:7822 Nov 8, 2022
containernetworking-plugins · ol 8 1:1.1.1-3.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
containernetworking-plugins · rocky 8 1:1.1.1-3.module+el8.7.0+1078+e72fcd4f RLSA-2022:7822 Nov 8, 2022
containers-common · RHEL 8 2:1-43.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
containers-common · almalinux 8 2:1-43.module_el8.7.0+3344+484dae7b ALSA-2022:7822 Nov 8, 2022
containers-common · ol 8 2:1-43.0.1.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
containers-common · rocky 8 2:1-43.module+el8.7.0+1078+e72fcd4f RLSA-2022:7822 Nov 8, 2022
crit · RHEL 8 0:3.15-3.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
crit · almalinux 8 3.15-3.module_el8.6.0+2751+06427ca3 ALSA-2022:7822 Nov 8, 2022
crit · ol 8 0:3.15-3.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
criu · RHEL 8 0:3.15-3.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
criu · almalinux 8 3.15-3.module_el8.6.0+2751+06427ca3 ALSA-2022:7822 Nov 8, 2022
criu · ol 8 0:3.15-3.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
criu · rocky 8 0:3.15-3.module+el8.7.0+1077+0e4f03d4 RLSA-2022:7822 Nov 8, 2022
criu-devel · RHEL 8 0:3.15-3.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
criu-devel · almalinux 8 3.15-3.module_el8.7.0+3407+95aa0ca9 ALSA-2022:7822 Nov 8, 2022
criu-devel · ol 8 0:3.15-3.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
criu-libs · RHEL 8 0:3.15-3.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
criu-libs · almalinux 8 3.15-3.module_el8.6.0+2751+06427ca3 ALSA-2022:7822 Nov 8, 2022
criu-libs · ol 8 0:3.15-3.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
crun · RHEL 8 0:1.5-1.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
crun · almalinux 8 1.5-1.module_el8.7.0+3407+95aa0ca9 ALSA-2022:7822 Nov 8, 2022
crun · ol 8 0:1.5-1.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
crun · rocky 8 0:1.5-1.module+el8.7.0+1077+0e4f03d4 RLSA-2022:7822 Nov 8, 2022
fuse-overlayfs · RHEL 8 0:1.9-1.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
fuse-overlayfs · almalinux 8 1.9-1.module_el8.7.0+3407+95aa0ca9 ALSA-2022:7822 Nov 8, 2022
fuse-overlayfs · ol 8 0:1.9-1.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
fuse-overlayfs · rocky 8 0:1.9-1.module+el8.7.0+1077+0e4f03d4 RLSA-2022:7822 Nov 8, 2022
golang-github-containers-buildah · Debian 12.15 (bookworm) 1.28.0+ds1-2 DEBIAN-CVE-2022-2990 Sep 13, 2022
golang-github-containers-buildah · Debian 13.5 (trixie) 1.28.0+ds1-2 DEBIAN-CVE-2022-2990 Sep 13, 2022
golang-github-containers-buildah · Debian 14 1.28.0+ds1-2 DEBIAN-CVE-2022-2990 Sep 13, 2022
libslirp · RHEL 8 0:4.4.0-1.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
libslirp · almalinux 8 4.4.0-1.module_el8.6.0+2877+8e437bf5 ALSA-2022:7822 Nov 8, 2022
libslirp · ol 8 0:4.4.0-1.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
libslirp · rocky 8 0:4.4.0-1.module+el8.7.0+1077+0e4f03d4 RLSA-2022:7822 Nov 8, 2022
libslirp-devel · RHEL 8 0:4.4.0-1.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
libslirp-devel · almalinux 8 4.4.0-1.module_el8.6.0+2877+8e437bf5 ALSA-2022:7822 Nov 8, 2022
libslirp-devel · ol 8 0:4.4.0-1.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
netavark · RHEL 8 2:1.1.0-7.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
netavark · almalinux 8 2:1.1.0-7.module_el8.7.0+3344+484dae7b ALSA-2022:7822 Nov 8, 2022
netavark · ol 8 2:1.1.0-7.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
netavark · rocky 8 2:1.1.0-7.module+el8.7.0+1078+e72fcd4f RLSA-2022:7822 Nov 8, 2022
oci-seccomp-bpf-hook · RHEL 8 0:1.2.6-1.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
oci-seccomp-bpf-hook · almalinux 8 1.2.6-1.module_el8.6.0+3336+00d107d5 ALSA-2022:7822 Nov 8, 2022
oci-seccomp-bpf-hook · ol 8 0:1.2.6-1.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
oci-seccomp-bpf-hook · rocky 8 0:1.2.6-1.module+el8.7.0+1078+e72fcd4f RLSA-2022:7822 Nov 8, 2022
podman · RHEL 8 3:4.2.0-4.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
podman · RHEL 9 2:4.2.0-7.el9_1 RHSA-2022:8431 Nov 15, 2022
podman · almalinux 8 3:4.2.0-4.module_el8.7.0+3344+484dae7b ALSA-2022:7822 Nov 8, 2022
podman · almalinux 9 2:4.2.0-7.el9_1 ALSA-2022:8431 Nov 15, 2022
podman · ol 8 3:4.2.0-4.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
podman · ol 9 2:4.2.0-7.0.1.el9_1 ELSA-2022-8431 Nov 24, 2022
podman · rocky 8 3:4.2.0-4.module+el8.7.0+1078+e72fcd4f RLSA-2022:7822 Nov 8, 2022
podman-catatonit · RHEL 8 3:4.2.0-4.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
podman-catatonit · RHEL 9 2:4.2.0-7.el9_1 RHSA-2022:8431 Nov 15, 2022
podman-catatonit · almalinux 8 3:4.2.0-4.module_el8.7.0+3344+484dae7b ALSA-2022:7822 Nov 8, 2022
podman-catatonit · almalinux 9 2:4.2.0-7.el9_1 ALSA-2022:8431 Nov 15, 2022
podman-catatonit · ol 8 3:4.2.0-4.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
podman-catatonit · ol 9 2:4.2.0-7.0.1.el9_1 ELSA-2022-8431 Nov 24, 2022
podman-docker · RHEL 8 3:4.2.0-4.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
podman-docker · RHEL 9 2:4.2.0-7.el9_1 RHSA-2022:8431 Nov 15, 2022
podman-docker · almalinux 8 3:4.2.0-4.module_el8.7.0+3344+484dae7b ALSA-2022:7822 Nov 8, 2022
podman-docker · almalinux 9 2:4.2.0-7.el9_1 ALSA-2022:8431 Nov 15, 2022
podman-docker · ol 8 3:4.2.0-4.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
podman-docker · ol 9 2:4.2.0-7.0.1.el9_1 ELSA-2022-8431 Nov 24, 2022
podman-gvproxy · RHEL 8 3:4.2.0-4.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
podman-gvproxy · RHEL 9 2:4.2.0-7.el9_1 RHSA-2022:8431 Nov 15, 2022
podman-gvproxy · almalinux 8 3:4.2.0-4.module_el8.7.0+3344+484dae7b ALSA-2022:7822 Nov 8, 2022
podman-gvproxy · almalinux 9 2:4.2.0-7.el9_1 ALSA-2022:8431 Nov 15, 2022
podman-gvproxy · ol 8 3:4.2.0-4.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
podman-gvproxy · ol 9 2:4.2.0-7.0.1.el9_1 ELSA-2022-8431 Nov 24, 2022
podman-plugins · RHEL 8 3:4.2.0-4.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
podman-plugins · RHEL 9 2:4.2.0-7.el9_1 RHSA-2022:8431 Nov 15, 2022
podman-plugins · almalinux 8 3:4.2.0-4.module_el8.7.0+3344+484dae7b ALSA-2022:7822 Nov 8, 2022
podman-plugins · almalinux 9 2:4.2.0-7.el9_1 ALSA-2022:8431 Nov 15, 2022
podman-plugins · ol 8 3:4.2.0-4.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
podman-plugins · ol 9 2:4.2.0-7.0.1.el9_1 ELSA-2022-8431 Nov 24, 2022
podman-remote · RHEL 8 3:4.2.0-4.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
podman-remote · RHEL 9 2:4.2.0-7.el9_1 RHSA-2022:8431 Nov 15, 2022
podman-remote · almalinux 8 3:4.2.0-4.module_el8.7.0+3344+484dae7b ALSA-2022:7822 Nov 8, 2022
podman-remote · almalinux 9 2:4.2.0-7.el9_1 ALSA-2022:8431 Nov 15, 2022
podman-remote · ol 8 3:4.2.0-4.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
podman-remote · ol 9 2:4.2.0-7.0.1.el9_1 ELSA-2022-8431 Nov 24, 2022
podman-tests · RHEL 8 3:4.2.0-4.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
podman-tests · RHEL 9 2:4.2.0-7.el9_1 RHSA-2022:8431 Nov 15, 2022
podman-tests · almalinux 8 3:4.2.0-4.module_el8.7.0+3344+484dae7b ALSA-2022:7822 Nov 8, 2022
podman-tests · almalinux 9 2:4.2.0-7.el9_1 ALSA-2022:8431 Nov 15, 2022
podman-tests · ol 8 3:4.2.0-4.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
podman-tests · ol 9 2:4.2.0-7.0.1.el9_1 ELSA-2022-8431 Nov 24, 2022
python-podman · rocky 8 0:4.2.1-1.module+el8.7.0+1078+e72fcd4f RLSA-2022:7822 Nov 8, 2022
python3-criu · RHEL 8 0:3.15-3.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
python3-criu · almalinux 8 3.15-3.module_el8.7.0+3407+95aa0ca9 ALSA-2022:7822 Nov 8, 2022
python3-criu · ol 8 0:3.15-3.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
python3-podman · RHEL 8 0:4.2.1-1.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
python3-podman · almalinux 8 4.2.1-1.module_el8.7.0+3344+484dae7b ALSA-2022:7822 Nov 8, 2022
python3-podman · ol 8 0:4.2.1-1.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
runc · RHEL 8 1:1.1.4-1.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
runc · almalinux 8 1:1.1.4-1.module_el8.7.0+3344+484dae7b ALSA-2022:7822 Nov 8, 2022
runc · ol 8 1:1.1.4-1.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
runc · rocky 8 1:1.1.4-1.module+el8.7.0+1077+0e4f03d4 RLSA-2022:7822 Nov 8, 2022
skopeo · RHEL 8 2:1.9.3-1.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
skopeo · almalinux 8 2:1.9.3-1.module_el8.7.0+3344+484dae7b ALSA-2022:7822 Nov 8, 2022
skopeo · ol 8 2:1.9.3-1.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
skopeo · rocky 8 2:1.9.3-1.module+el8.7.0+1078+e72fcd4f RLSA-2022:7822 Nov 8, 2022
skopeo-tests · RHEL 8 2:1.9.3-1.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
skopeo-tests · almalinux 8 2:1.9.3-1.module_el8.7.0+3344+484dae7b ALSA-2022:7822 Nov 8, 2022
skopeo-tests · ol 8 2:1.9.3-1.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
slirp4netns · RHEL 8 0:1.2.0-2.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
slirp4netns · almalinux 8 1.2.0-2.module_el8.6.0+3070+1510fbd1 ALSA-2022:7822 Nov 8, 2022
slirp4netns · ol 8 0:1.2.0-2.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
slirp4netns · rocky 8 0:1.2.0-2.module+el8.7.0+1078+e72fcd4f RLSA-2022:7822 Nov 8, 2022
toolbox · RHEL 8 0:0.0.99.3-0.6.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
toolbox · almalinux 8 0.0.99.3-0.6.module_el8.6.0+3070+1510fbd1 ALSA-2022:7822 Nov 8, 2022
toolbox · rocky 8 0:0.0.99.3-0.6.module+el8.7.0+1078+e72fcd4f RLSA-2022:7822 Nov 8, 2022
toolbox-tests · RHEL 8 0:0.0.99.3-0.6.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
toolbox-tests · almalinux 8 0.0.99.3-0.6.module_el8.6.0+3070+1510fbd1 ALSA-2022:7822 Nov 8, 2022
udica · RHEL 8 0:0.2.6-3.module+el8.7.0+17064+3b31f55c RHSA-2022:7822 Nov 8, 2022
udica · almalinux 8 0.2.6-3.module_el8.7.0+3344+484dae7b ALSA-2022:7822 Nov 8, 2022
udica · ol 8 0:0.2.6-3.module+el8.7.0+20877+e0f9ac15 ELSA-2022-7822 Nov 22, 2022
udica · rocky 8 0:0.2.6-3.module+el8.7.0+1077+0e4f03d4 RLSA-2022:7822 Nov 8, 2022

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.