Linux · Security advisory · May 12, 2020

ELSA-2020-1932: Security update for 21 packages

ELSA-2020-1932, released May 12, 2020, fixes 1 CVE across 21 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0268
85th percentile

Fixed package versions

ProductReleaseFixed in
buildahol 80:1.11.6-8.0.1.module+el8.2.0+7615+180dc822
buildah-testsol 80:1.11.6-8.0.1.module+el8.2.0+7615+180dc822
cockpit-podmanol 80:12-1.module+el8.2.0+7615+180dc822
conmonol 82:2.0.6-1.0.1.module+el8.2.0+7615+180dc822
container-selinuxol 82:2.124.0-1.module+el8.2.0+7615+180dc822
containernetworking-pluginsol 80:0.8.3-5.0.1.module+el8.2.0+7615+180dc822
containers-commonol 81:0.1.40-11.0.1.module+el8.2.0+7615+180dc822
critol 80:3.12-9.module+el8.2.0+7615+180dc822
criuol 80:3.12-9.module+el8.2.0+7615+180dc822
fuse-overlayfsol 80:0.7.2-5.module+el8.2.0+7615+180dc822
podmanol 80:1.6.4-11.0.1.module+el8.2.0+7615+180dc822
podman-dockerol 80:1.6.4-11.0.1.module+el8.2.0+7615+180dc822
podman-remoteol 80:1.6.4-11.0.1.module+el8.2.0+7615+180dc822
podman-testsol 80:1.6.4-11.0.1.module+el8.2.0+7615+180dc822
python-podman-apiol 80:1.2.0-0.2.gitd0a45fe.module+el8.2.0+7615+180dc822
python3-criuol 80:3.12-9.module+el8.2.0+7615+180dc822
runcol 80:1.0.0-65.rc10.module+el8.2.0+7615+180dc822
skopeool 81:0.1.40-11.0.1.module+el8.2.0+7615+180dc822
skopeo-testsol 81:0.1.40-11.0.1.module+el8.2.0+7615+180dc822
slirp4netnsol 80:0.4.2-3.git21fdece.module+el8.2.0+7615+180dc822
udicaol 80:0.2.1-2.module+el8.2.0+7615+180dc822

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-10696 slirp4netns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 8.8 0.0268 None reported
Showing 1 to 1 of 1 1