# CVE-2020-14370: buildah-tests: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  Se...

CVE-2020-14370 is fixed in 28 products on 1 platform, first by RHSA-2021:0531, released February 16, 2021. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2020-14370
- Priority: Routine
- CVSS: 6.5 (Moderate)
- EPSS: 0.0140
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Feb 16, 2021

## Description

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  Security Fix(es):  * podman: environment variables leak between containers when started via Varlink or Docker-compatible REST API (CVE-2020-14370)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  Additional Changes:  For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | buildah RHEL 8 | 0:1.16.7-4.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | buildah ol 8 | 0:1.16.7-4.0.1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | buildah-tests RHEL 8 | 0:1.16.7-4.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | buildah-tests ol 8 | 0:1.16.7-4.0.1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | cockpit-podman RHEL 8 | 0:27.1-3.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | cockpit-podman ol 8 | 0:27.1-3.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | conmon RHEL 8 | 2:2.0.22-3.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | conmon ol 8 | 2:2.0.22-3.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | container-selinux RHEL 8 | 2:2.155.0-1.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | container-selinux ol 8 | 2:2.155.0-1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | containernetworking-plugins RHEL 8 | 0:0.9.0-1.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | containernetworking-plugins ol 8 | 0:0.9.0-1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | containers-common RHEL 8 | 1:1.2.0-9.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | containers-common ol 8 | 1:1.2.0-9.0.1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | crit RHEL 8 | 0:3.15-1.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | crit ol 8 | 0:3.15-1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | criu RHEL 8 | 0:3.15-1.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | criu ol 8 | 0:3.15-1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | crun RHEL 8 | 0:0.16-2.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | crun ol 8 | 0:0.16-2.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | fuse-overlayfs RHEL 8 | 0:1.3.0-2.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | fuse-overlayfs ol 8 | 0:1.3.0-2.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | libslirp RHEL 8 | 0:4.3.1-1.module+el8.3.1+9803+64eb0fd6 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | libslirp ol 8 | 0:4.3.1-1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | libslirp-devel RHEL 8 | 0:4.3.1-1.module+el8.3.1+9803+64eb0fd6 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | libslirp-devel ol 8 | 0:4.3.1-1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | oci-seccomp-bpf-hook RHEL 8 | 0:1.2.0-1.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | oci-seccomp-bpf-hook ol 8 | 0:1.2.0-1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | podman RHEL 8 | 0:2.2.1-7.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | podman ol 8 | 0:2.2.1-7.0.1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | podman-catatonit RHEL 8 | 0:2.2.1-7.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | podman-catatonit ol 8 | 0:2.2.1-7.0.1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | podman-docker RHEL 8 | 0:2.2.1-7.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | podman-docker ol 8 | 0:2.2.1-7.0.1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | podman-plugins RHEL 8 | 0:2.2.1-7.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | podman-plugins ol 8 | 0:2.2.1-7.0.1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | podman-remote RHEL 8 | 0:2.2.1-7.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | podman-remote ol 8 | 0:2.2.1-7.0.1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | podman-tests RHEL 8 | 0:2.2.1-7.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | podman-tests ol 8 | 0:2.2.1-7.0.1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | python-podman-api RHEL 8 | 0:1.2.0-0.2.gitd0a45fe.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | python-podman-api ol 8 | 0:1.2.0-0.2.gitd0a45fe.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | python3-criu RHEL 8 | 0:3.15-1.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | python3-criu ol 8 | 0:3.15-1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | runc RHEL 8 | 0:1.0.0-70.rc92.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | runc ol 8 | 0:1.0.0-70.rc92.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | skopeo RHEL 8 | 1:1.2.0-9.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | skopeo ol 8 | 1:1.2.0-9.0.1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | skopeo-tests RHEL 8 | 1:1.2.0-9.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | skopeo-tests ol 8 | 1:1.2.0-9.0.1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | slirp4netns RHEL 8 | 0:1.1.8-1.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | slirp4netns ol 8 | 0:1.1.8-1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |
| Linux | toolbox RHEL 8 | 0:0.0.8-1.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | udica RHEL 8 | 0:0.2.4-1.module+el8.3.1+9857+68fb1526 | [RHSA-2021:0531](https://patchblox.com/security/data/fix/linux/rhsa-2021-0531.md) | Feb 16, 2021 |
| Linux | udica ol 8 | 0:0.2.4-1.module+el8.3.1+9659+c1901784 | [ELSA-2021-0531](https://patchblox.com/security/data/fix/linux/elsa-2021-0531.md) | Feb 20, 2021 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.