Linux · Security advisory · May 18, 2021

RHSA-2021:1796: Security update for 27 packages

RHSA-2021:1796, released May 18, 2021, fixes 2 CVEs across 27 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0318
88th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 1 Routine 1

Fixed package versions

ProductReleaseFixed in
buildahRHEL 80:1.19.7-1.module+el8.4.0+10607+f4da7515
buildah-testsRHEL 80:1.19.7-1.module+el8.4.0+10607+f4da7515
cockpit-podmanRHEL 80:29-2.module+el8.4.0+10607+f4da7515
conmonRHEL 82:2.0.26-1.module+el8.4.0+10607+f4da7515
container-selinuxRHEL 82:2.158.0-1.module+el8.4.0+10607+f4da7515
containernetworking-pluginsRHEL 80:0.9.1-1.module+el8.4.0+10607+f4da7515
containers-commonRHEL 81:1.2.2-8.module+el8.4.0+10607+f4da7515
critRHEL 80:3.15-1.module+el8.4.0+10607+f4da7515
criuRHEL 80:3.15-1.module+el8.4.0+10607+f4da7515
crunRHEL 80:0.18-1.module+el8.4.0+10607+f4da7515
fuse-overlayfsRHEL 80:1.4.0-2.module+el8.4.0+10607+f4da7515
libslirpRHEL 80:4.3.1-1.module+el8.4.0+10607+f4da7515
libslirp-develRHEL 80:4.3.1-1.module+el8.4.0+10607+f4da7515
oci-seccomp-bpf-hookRHEL 80:1.2.0-2.module+el8.4.0+10607+f4da7515
podmanRHEL 80:3.0.1-6.module+el8.4.0+10607+f4da7515
podman-catatonitRHEL 80:3.0.1-6.module+el8.4.0+10607+f4da7515
podman-dockerRHEL 80:3.0.1-6.module+el8.4.0+10607+f4da7515
podman-pluginsRHEL 80:3.0.1-6.module+el8.4.0+10607+f4da7515
podman-remoteRHEL 80:3.0.1-6.module+el8.4.0+10607+f4da7515
podman-testsRHEL 80:3.0.1-6.module+el8.4.0+10607+f4da7515
python3-criuRHEL 80:3.15-1.module+el8.4.0+10607+f4da7515
runcRHEL 80:1.0.0-70.rc92.module+el8.4.0+10607+f4da7515
skopeoRHEL 81:1.2.2-8.module+el8.4.0+10607+f4da7515
skopeo-testsRHEL 81:1.2.2-8.module+el8.4.0+10607+f4da7515
slirp4netnsRHEL 80:1.1.8-1.module+el8.4.0+10607+f4da7515
toolboxRHEL 80:0.0.8-1.module+el8.4.0+10607+f4da7515
udicaRHEL 80:0.2.4-1.module+el8.4.0+10607+f4da7515

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-29652 golang-golang-x-crypto-dev: A nil pointer dereference in the golang.org/x/crypto/ssh component throughv0.0.0-20201203163018-be400aefbc4c for Go a... 7.5 0.0318 None reported
Routine CVE-2021-20199 udica: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 5.9 0.0116 None reported
Showing 1 to 2 of 2 1