Linux · Security advisory · November 10, 2020

ELSA-2020-4694: Security update for 26 packages

ELSA-2020-4694, released November 10, 2020, fixes 3 CVEs across 26 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0209
81st percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 1 Routine 2

Fixed package versions

ProductReleaseFixed in
buildahol 80:1.15.1-2.0.1.module+el8.3.0+7866+f387f528
buildah-testsol 80:1.15.1-2.0.1.module+el8.3.0+7866+f387f528
cockpit-podmanol 80:18.1-2.module+el8.3.0+7866+f387f528
conmonol 82:2.0.20-2.module+el8.3.0+7866+f387f528
container-selinuxol 82:2.144.0-1.module+el8.3.0+7866+f387f528
containernetworking-pluginsol 80:0.8.6-2.module+el8.3.0+7866+f387f528
containers-commonol 81:1.1.1-3.0.1.module+el8.3.0+7866+f387f528
critol 80:3.14-2.module+el8.3.0+7866+f387f528
criuol 80:3.14-2.module+el8.3.0+7866+f387f528
crunol 80:0.14.1-2.module+el8.3.0+7866+f387f528
fuse-overlayfsol 80:1.1.2-3.module+el8.3.0+7866+f387f528
libslirpol 80:4.3.1-1.module+el8.3.0+7866+f387f528
libslirp-develol 80:4.3.1-1.module+el8.3.0+7866+f387f528
oci-seccomp-bpf-hookol 80:1.1.2-3.module+el8.3.0+7866+f387f528
podmanol 80:2.0.5-5.0.1.module+el8.3.0+7866+f387f528
podman-catatonitol 80:2.0.5-5.0.1.module+el8.3.0+7866+f387f528
podman-dockerol 80:2.0.5-5.0.1.module+el8.3.0+7866+f387f528
podman-remoteol 80:2.0.5-5.0.1.module+el8.3.0+7866+f387f528
podman-testsol 80:2.0.5-5.0.1.module+el8.3.0+7866+f387f528
python-podman-apiol 80:1.2.0-0.2.gitd0a45fe.module+el8.3.0+7866+f387f528
python3-criuol 80:3.14-2.module+el8.3.0+7866+f387f528
runcol 80:1.0.0-68.rc92.module+el8.3.0+7866+f387f528
skopeool 81:1.1.1-3.0.1.module+el8.3.0+7866+f387f528
skopeo-testsol 81:1.1.1-3.0.1.module+el8.3.0+7866+f387f528
slirp4netnsol 80:1.1.4-2.module+el8.3.0+7866+f387f528
udicaol 80:0.2.2-1.module+el8.3.0+7866+f387f528

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-14040 delve: Go Toolset provides the Go programming language tools and libraries 7.5 0.0189 None reported
Routine CVE-2020-10749 containernetworking-plugins: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 6.0 0.0209 None reported
Routine CVE-2020-10756 podman-catatonit: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 6.5 0.0051 None reported
Showing 1 to 3 of 3 1