Linux · Security advisory · April 7, 2020

RHSA-2020:1379: Security update for 20 packages

RHSA-2020:1379, released April 7, 2020, fixes 1 CVE across 20 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0249
84th percentile

Fixed package versions

ProductReleaseFixed in
buildahRHEL 80:1.11.6-6.module+el8.1.1+5865+cc793d95
buildah-testsRHEL 80:1.11.6-6.module+el8.1.1+5865+cc793d95
cockpit-podmanRHEL 80:11-1.module+el8.1.1+5259+bcdd613a
conmonRHEL 82:2.0.6-1.module+el8.1.1+5259+bcdd613a
container-selinuxRHEL 82:2.124.0-1.module+el8.1.1+5259+bcdd613a
containernetworking-pluginsRHEL 80:0.8.3-4.module+el8.1.1+5259+bcdd613a
containers-commonRHEL 81:0.1.40-8.module+el8.1.1+5351+506397b0
fuse-overlayfsRHEL 80:0.7.2-5.module+el8.1.1+6114+953c5a57
podmanRHEL 80:1.6.4-4.module+el8.1.1+5885+44006e55
podman-dockerRHEL 80:1.6.4-4.module+el8.1.1+5885+44006e55
podman-manpagesRHEL 80:1.6.4-4.module+el8.1.1+5885+44006e55
podman-remoteRHEL 80:1.6.4-4.module+el8.1.1+5885+44006e55
podman-testsRHEL 80:1.6.4-4.module+el8.1.1+5885+44006e55
python-podman-apiRHEL 80:1.2.0-0.2.gitd0a45fe.module+el8.1.1+5259+bcdd613a
runcRHEL 80:1.0.0-64.rc9.module+el8.1.1+5259+bcdd613a
skopeoRHEL 81:0.1.40-8.module+el8.1.1+5351+506397b0
skopeo-testsRHEL 81:0.1.40-8.module+el8.1.1+5351+506397b0
slirp4netnsRHEL 80:0.4.2-3.git21fdece.module+el8.1.1+5657+524a77d7
toolboxRHEL 80:0.0.4-1.module+el8.1.1+4407+ac444e5d
udicaRHEL 80:0.2.1-2.module+el8.1.1+4975+482d6f5d

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2020-8608 libslirp0: In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintfreturn values, leading to a buffer overflow in l... 5.6 0.0249 None reported
Showing 1 to 1 of 1 1