# CVE-2019-19921: container-selinux: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  Se...

CVE-2019-19921 is fixed in 36 products on 1 platform, first by golang-github-opencontainers-runc-dev 1.0.0~rc10-0ubuntu1~18.04.2, released February 12, 2020. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2019-19921
- Priority: High
- CVSS: 7.0 (Moderate)
- EPSS: 0.0043
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Feb 12, 2020

## Description

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  Security Fix(es):  * runc: volume mount race condition with shared mounts leads to information leak/integrity manipulation (CVE-2019-19921)  * containers/image: Container images read entire image manifest into memory (CVE-2020-1702)  * podman: incorrectly allows existing files in volumes to be overwritten by a container when it is created (CVE-2020-1726)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  Additional Changes:  For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes linked from the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | aardvark-dns almalinux 8 | 2:1.7.0-1.module_el8.9.0+3657+d86e192f | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | buildah RHEL 8 | 0:1.11.6-7.module+el8.2.0+5856+b8046c6d | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | buildah almalinux 8 | 1:1.31.3-1.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | buildah ol 8 | 0:1.11.6-7.0.1.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | buildah-tests RHEL 8 | 0:1.11.6-7.module+el8.2.0+5856+b8046c6d | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | buildah-tests almalinux 8 | 1:1.31.3-1.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | buildah-tests ol 8 | 0:1.11.6-7.0.1.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | cockpit-podman RHEL 8 | 0:12-1.module+el8.2.0+5950+6d183a6a | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | cockpit-podman almalinux 8 | 75-1.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | cockpit-podman ol 8 | 0:12-1.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | conmon RHEL 8 | 2:2.0.6-1.module+el8.2.0+5182+3136e5d4 | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | conmon almalinux 8 | 3:2.1.8-1.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | conmon ol 8 | 2:2.0.6-1.0.1.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | container-selinux RHEL 8 | 2:2.124.0-1.module+el8.2.0+5182+3136e5d4 | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | container-selinux almalinux 8 | 2:2.221.0-1.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | container-selinux ol 8 | 2:2.124.0-1.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | containernetworking-plugins RHEL 8 | 0:0.8.3-5.module+el8.2.0+5201+6b31f0d9 | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | containernetworking-plugins almalinux 8 | 1:1.3.0-4.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | containernetworking-plugins ol 8 | 0:0.8.3-5.0.1.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | containers-common RHEL 8 | 1:0.1.40-10.module+el8.2.0+5955+6cd70ceb | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | containers-common almalinux 8 | 2:1-54.module_el8.9.0+3673+0c64b403 | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | containers-common ol 8 | 1:0.1.40-10.0.1.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | crit RHEL 8 | 0:3.12-9.module+el8.2.0+5029+3ac48e7d | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | crit almalinux 8 | 3.18-4.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | crit ol 8 | 0:3.12-9.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | criu RHEL 8 | 0:3.12-9.module+el8.2.0+5029+3ac48e7d | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | criu almalinux 8 | 3.18-4.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | criu ol 8 | 0:3.12-9.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | criu-devel almalinux 8 | 3.18-4.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | criu-libs almalinux 8 | 3.18-4.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | crun almalinux 8 | 1.8.7-1.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | fuse-overlayfs RHEL 8 | 0:0.7.2-5.module+el8.2.0+6060+9dbc027d | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | fuse-overlayfs almalinux 8 | 1.12-1.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | fuse-overlayfs ol 8 | 0:0.7.2-5.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | golang-github-opencontainers-runc-dev Ubuntu 18.04.6 LTS (bionic) | 1.0.0~rc10-0ubuntu1~18.04.2 | [golang-github-opencontainers-runc-dev 1.0.0~rc10-0ubuntu1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-golang-github-opencontainers-runc-dev-1.0.0-rc10-0ubuntu1-18.04.2.md) | Feb 12, 2020 |
| Linux | golang-github-opencontainers-runc-dev Ubuntu 20.04 LTS (focal) | 1.0.0~rc10-0ubuntu1 | [golang-github-opencontainers-runc-dev 1.0.0~rc10-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-golang-github-opencontainers-runc-dev-1.0.0-rc10-0ubuntu1.md) | Feb 12, 2020 |
| Linux | libslirp almalinux 8 | 4.4.0-1.module_el8.8.0+3615+3543c705 | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | libslirp-devel almalinux 8 | 4.4.0-1.module_el8.8.0+3615+3543c705 | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | netavark almalinux 8 | 2:1.7.0-1.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | oci-seccomp-bpf-hook almalinux 8 | 1.2.9-1.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | podman RHEL 8 | 0:1.6.4-10.module+el8.2.0+6063+e761893a | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | podman almalinux 8 | 3:4.6.1-4.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | podman ol 8 | 0:1.6.4-10.0.1.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | podman-catatonit almalinux 8 | 3:4.6.1-4.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | podman-docker RHEL 8 | 0:1.6.4-10.module+el8.2.0+6063+e761893a | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | podman-docker almalinux 8 | 3:4.6.1-4.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | podman-docker ol 8 | 0:1.6.4-10.0.1.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | podman-gvproxy almalinux 8 | 3:4.6.1-4.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | podman-plugins almalinux 8 | 3:4.6.1-4.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | podman-remote RHEL 8 | 0:1.6.4-10.module+el8.2.0+6063+e761893a | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | podman-remote almalinux 8 | 3:4.6.1-4.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | podman-remote ol 8 | 0:1.6.4-10.0.1.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | podman-tests RHEL 8 | 0:1.6.4-10.module+el8.2.0+6063+e761893a | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | podman-tests almalinux 8 | 3:4.6.1-4.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | podman-tests ol 8 | 0:1.6.4-10.0.1.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | python-podman-api RHEL 8 | 0:1.2.0-0.2.gitd0a45fe.module+el8.2.0+5201+6b31f0d9 | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | python-podman-api ol 8 | 0:1.2.0-0.2.gitd0a45fe.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | python3-criu RHEL 8 | 0:3.12-9.module+el8.2.0+5029+3ac48e7d | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | python3-criu almalinux 8 | 3.18-4.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | python3-criu ol 8 | 0:3.12-9.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | python3-podman almalinux 8 | 4.6.0-1.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | runc RHEL 8 | 0:1.0.0-65.rc10.module+el8.2.0+5762+aaee29fb | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | runc Ubuntu 18.04.6 LTS (bionic) | 1.0.0~rc10-0ubuntu1~18.04.2 | [runc 1.0.0~rc10-0ubuntu1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-runc-1.0.0-rc10-0ubuntu1-18.04.2.md) | Feb 12, 2020 |
| Linux | runc Ubuntu 20.04 LTS (focal) | 1.0.0~rc10-0ubuntu1 | [runc 1.0.0~rc10-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-runc-1.0.0-rc10-0ubuntu1.md) | Feb 12, 2020 |
| Linux | runc almalinux 8 | 1:1.1.9-1.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | runc almalinux 9 | 4:1.1.9-1.el9 | [ALSA-2023:6380](https://patchblox.com/security/data/fix/linux/alsa-2023-6380.md) | Nov 7, 2023 |
| Linux | runc ol 8 | 0:1.0.0-65.rc10.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | skopeo RHEL 8 | 1:0.1.40-10.module+el8.2.0+5955+6cd70ceb | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | skopeo almalinux 8 | 2:1.13.3-1.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | skopeo ol 8 | 1:0.1.40-10.0.1.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | skopeo-tests RHEL 8 | 1:0.1.40-10.module+el8.2.0+5955+6cd70ceb | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | skopeo-tests almalinux 8 | 2:1.13.3-1.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | skopeo-tests ol 8 | 1:0.1.40-10.0.1.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | slirp4netns RHEL 8 | 0:0.4.2-3.git21fdece.module+el8.2.0+5658+9a15711d | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | slirp4netns almalinux 8 | 1.2.1-1.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | slirp4netns ol 8 | 0:0.4.2-3.git21fdece.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |
| Linux | toolbox RHEL 8 | 0:0.0.7-1.module+el8.2.0+6096+9c3f08f3 | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | toolbox almalinux 8 | 0.0.99.4-5.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | toolbox-tests almalinux 8 | 0.0.99.4-5.module_el8.9.0+3643+9234dc3b | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | udica RHEL 8 | 0:0.2.1-2.module+el8.2.0+4896+8f613c81 | [RHSA-2020:1650](https://patchblox.com/security/data/fix/linux/rhsa-2020-1650.md) | Apr 28, 2020 |
| Linux | udica almalinux 8 | 0.2.6-20.module_el8.8.0+3615+3543c705 | [ALSA-2023:6939](https://patchblox.com/security/data/fix/linux/alsa-2023-6939.md) | Nov 14, 2023 |
| Linux | udica ol 8 | 0:0.2.1-2.module+el8.2.0+5584+b2b2d3fb | [ELSA-2020-1650](https://patchblox.com/security/data/fix/linux/elsa-2020-1650.md) | May 5, 2020 |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.