Linux · Security advisory · April 28, 2020

RHSA-2020:1650: Security update for 22 packages

RHSA-2020:1650, released April 28, 2020, fixes 3 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0177
78th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 1 Routine 2

Fixed package versions

ProductReleaseFixed in
buildahRHEL 80:1.11.6-7.module+el8.2.0+5856+b8046c6d
buildah-testsRHEL 80:1.11.6-7.module+el8.2.0+5856+b8046c6d
cockpit-podmanRHEL 80:12-1.module+el8.2.0+5950+6d183a6a
conmonRHEL 82:2.0.6-1.module+el8.2.0+5182+3136e5d4
container-selinuxRHEL 82:2.124.0-1.module+el8.2.0+5182+3136e5d4
containernetworking-pluginsRHEL 80:0.8.3-5.module+el8.2.0+5201+6b31f0d9
containers-commonRHEL 81:0.1.40-10.module+el8.2.0+5955+6cd70ceb
critRHEL 80:3.12-9.module+el8.2.0+5029+3ac48e7d
criuRHEL 80:3.12-9.module+el8.2.0+5029+3ac48e7d
fuse-overlayfsRHEL 80:0.7.2-5.module+el8.2.0+6060+9dbc027d
podmanRHEL 80:1.6.4-10.module+el8.2.0+6063+e761893a
podman-dockerRHEL 80:1.6.4-10.module+el8.2.0+6063+e761893a
podman-remoteRHEL 80:1.6.4-10.module+el8.2.0+6063+e761893a
podman-testsRHEL 80:1.6.4-10.module+el8.2.0+6063+e761893a
python-podman-apiRHEL 80:1.2.0-0.2.gitd0a45fe.module+el8.2.0+5201+6b31f0d9
python3-criuRHEL 80:3.12-9.module+el8.2.0+5029+3ac48e7d
runcRHEL 80:1.0.0-65.rc10.module+el8.2.0+5762+aaee29fb
skopeoRHEL 81:0.1.40-10.module+el8.2.0+5955+6cd70ceb
skopeo-testsRHEL 81:0.1.40-10.module+el8.2.0+5955+6cd70ceb
slirp4netnsRHEL 80:0.4.2-3.git21fdece.module+el8.2.0+5658+9a15711d
toolboxRHEL 80:0.0.7-1.module+el8.2.0+6096+9c3f08f3
udicaRHEL 80:0.2.1-2.module+el8.2.0+4896+8f613c81

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2019-19921 container-selinux: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 7.0 0.0043 None reported
Routine CVE-2020-1726 buildah: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 5.9 0.0177 None reported
Routine CVE-2020-1702 toolbox: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 3.5 0.0069 None reported
Showing 1 to 3 of 3 1