Linux · Security advisory · November 4, 2020

RHSA-2020:4694: Security update for 27 packages

RHSA-2020:4694, released November 4, 2020, fixes 3 CVEs across 27 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0209
81st percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 1 Routine 2

Fixed package versions

ProductReleaseFixed in
buildahRHEL 80:1.15.1-2.module+el8.3.0+8221+97165c3f
buildah-testsRHEL 80:1.15.1-2.module+el8.3.0+8221+97165c3f
cockpit-podmanRHEL 80:18.1-2.module+el8.3.0+8221+97165c3f
conmonRHEL 82:2.0.20-2.module+el8.3.0+8221+97165c3f
container-selinuxRHEL 82:2.144.0-1.module+el8.3.0+8221+97165c3f
containernetworking-pluginsRHEL 80:0.8.6-2.module+el8.3.0+8221+97165c3f
containers-commonRHEL 81:1.1.1-3.module+el8.3.0+8221+97165c3f
critRHEL 80:3.14-2.module+el8.3.0+8221+97165c3f
criuRHEL 80:3.14-2.module+el8.3.0+8221+97165c3f
crunRHEL 80:0.14.1-2.module+el8.3.0+8221+97165c3f
fuse-overlayfsRHEL 80:1.1.2-3.module+el8.3.0+8221+97165c3f
libslirpRHEL 80:4.3.1-1.module+el8.3.0+8221+97165c3f
libslirp-develRHEL 80:4.3.1-1.module+el8.3.0+8221+97165c3f
oci-seccomp-bpf-hookRHEL 80:1.1.2-3.module+el8.3.0+8221+97165c3f
podmanRHEL 80:2.0.5-5.module+el8.3.0+8221+97165c3f
podman-catatonitRHEL 80:2.0.5-5.module+el8.3.0+8221+97165c3f
podman-dockerRHEL 80:2.0.5-5.module+el8.3.0+8221+97165c3f
podman-remoteRHEL 80:2.0.5-5.module+el8.3.0+8221+97165c3f
podman-testsRHEL 80:2.0.5-5.module+el8.3.0+8221+97165c3f
python-podman-apiRHEL 80:1.2.0-0.2.gitd0a45fe.module+el8.3.0+8221+97165c3f
python3-criuRHEL 80:3.14-2.module+el8.3.0+8221+97165c3f
runcRHEL 80:1.0.0-68.rc92.module+el8.3.0+8221+97165c3f
skopeoRHEL 81:1.1.1-3.module+el8.3.0+8221+97165c3f
skopeo-testsRHEL 81:1.1.1-3.module+el8.3.0+8221+97165c3f
slirp4netnsRHEL 80:1.1.4-2.module+el8.3.0+8221+97165c3f
toolboxRHEL 80:0.0.8-1.module+el8.3.0+8221+97165c3f
udicaRHEL 80:0.2.2-1.module+el8.3.0+8221+97165c3f

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-14040 delve: Go Toolset provides the Go programming language tools and libraries 7.5 0.0189 None reported
Routine CVE-2020-10749 containernetworking-plugins: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 6.0 0.0209 None reported
Routine CVE-2020-10756 podman-catatonit: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 6.5 0.0051 None reported
Showing 1 to 3 of 3 1