Linux · Security advisory · May 5, 2020

ELSA-2020-1650: Security update for 21 packages

ELSA-2020-1650, released May 5, 2020, fixes 3 CVEs across 21 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0177
78th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 1 Routine 2

Fixed package versions

ProductReleaseFixed in
buildahol 80:1.11.6-7.0.1.module+el8.2.0+5584+b2b2d3fb
buildah-testsol 80:1.11.6-7.0.1.module+el8.2.0+5584+b2b2d3fb
cockpit-podmanol 80:12-1.module+el8.2.0+5584+b2b2d3fb
conmonol 82:2.0.6-1.0.1.module+el8.2.0+5584+b2b2d3fb
container-selinuxol 82:2.124.0-1.module+el8.2.0+5584+b2b2d3fb
containernetworking-pluginsol 80:0.8.3-5.0.1.module+el8.2.0+5584+b2b2d3fb
containers-commonol 81:0.1.40-10.0.1.module+el8.2.0+5584+b2b2d3fb
critol 80:3.12-9.module+el8.2.0+5584+b2b2d3fb
criuol 80:3.12-9.module+el8.2.0+5584+b2b2d3fb
fuse-overlayfsol 80:0.7.2-5.module+el8.2.0+5584+b2b2d3fb
podmanol 80:1.6.4-10.0.1.module+el8.2.0+5584+b2b2d3fb
podman-dockerol 80:1.6.4-10.0.1.module+el8.2.0+5584+b2b2d3fb
podman-remoteol 80:1.6.4-10.0.1.module+el8.2.0+5584+b2b2d3fb
podman-testsol 80:1.6.4-10.0.1.module+el8.2.0+5584+b2b2d3fb
python-podman-apiol 80:1.2.0-0.2.gitd0a45fe.module+el8.2.0+5584+b2b2d3fb
python3-criuol 80:3.12-9.module+el8.2.0+5584+b2b2d3fb
runcol 80:1.0.0-65.rc10.module+el8.2.0+5584+b2b2d3fb
skopeool 81:0.1.40-10.0.1.module+el8.2.0+5584+b2b2d3fb
skopeo-testsol 81:0.1.40-10.0.1.module+el8.2.0+5584+b2b2d3fb
slirp4netnsol 80:0.4.2-3.git21fdece.module+el8.2.0+5584+b2b2d3fb
udicaol 80:0.2.1-2.module+el8.2.0+5584+b2b2d3fb

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2019-19921 container-selinux: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 7.0 0.0043 None reported
Routine CVE-2020-1726 buildah: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 5.9 0.0177 None reported
Routine CVE-2020-1702 toolbox: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 3.5 0.0069 None reported
Showing 1 to 3 of 3 1