Linux · Security advisory · April 28, 2020

RHSA-2020:1932: Security update for 22 packages

RHSA-2020:1932, released April 28, 2020, fixes 1 CVE across 22 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0268
85th percentile

Fixed package versions

ProductReleaseFixed in
buildahRHEL 80:1.11.6-8.module+el8.2.0+6368+cf16aa14
buildah-testsRHEL 80:1.11.6-8.module+el8.2.0+6368+cf16aa14
cockpit-podmanRHEL 80:12-1.module+el8.2.0+6368+cf16aa14
conmonRHEL 82:2.0.6-1.module+el8.2.0+6368+cf16aa14
container-selinuxRHEL 82:2.124.0-1.module+el8.2.0+6368+cf16aa14
containernetworking-pluginsRHEL 80:0.8.3-5.module+el8.2.0+6368+cf16aa14
containers-commonRHEL 81:0.1.40-11.module+el8.2.0+6374+67f43e89
critRHEL 80:3.12-9.module+el8.2.0+6368+cf16aa14
criuRHEL 80:3.12-9.module+el8.2.0+6368+cf16aa14
fuse-overlayfsRHEL 80:0.7.2-5.module+el8.2.0+6368+cf16aa14
podmanRHEL 80:1.6.4-11.module+el8.2.0+6368+cf16aa14
podman-dockerRHEL 80:1.6.4-11.module+el8.2.0+6368+cf16aa14
podman-remoteRHEL 80:1.6.4-11.module+el8.2.0+6368+cf16aa14
podman-testsRHEL 80:1.6.4-11.module+el8.2.0+6368+cf16aa14
python-podman-apiRHEL 80:1.2.0-0.2.gitd0a45fe.module+el8.2.0+6368+cf16aa14
python3-criuRHEL 80:3.12-9.module+el8.2.0+6368+cf16aa14
runcRHEL 80:1.0.0-65.rc10.module+el8.2.0+6368+cf16aa14
skopeoRHEL 81:0.1.40-11.module+el8.2.0+6374+67f43e89
skopeo-testsRHEL 81:0.1.40-11.module+el8.2.0+6374+67f43e89
slirp4netnsRHEL 80:0.4.2-3.git21fdece.module+el8.2.0+6368+cf16aa14
toolboxRHEL 80:0.0.7-1.module+el8.2.0+6368+cf16aa14
udicaRHEL 80:0.2.1-2.module+el8.2.0+6368+cf16aa14

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-10696 slirp4netns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 8.8 0.0268 None reported
Showing 1 to 1 of 1 1