Описание
ELSA-2019-3403: container-tools:ol8 security, bug fix, and enhancement update (IMPORTANT)
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
Module container-tools:ol8 is enabled
buildah
1.9.0-5.0.1.module+el8.1.0+5440+994fc847
buildah-tests
1.9.0-5.0.1.module+el8.1.0+5440+994fc847
cockpit-podman
4-1.module+el8.1.0+5440+994fc847
container-selinux
2.107-2.module+el8.1.0+5440+994fc847
containernetworking-plugins
0.8.1-2.0.1.module+el8.1.0+5440+994fc847
containers-common
0.1.37-5.0.2.module+el8.1.0+5440+994fc847
fuse-overlayfs
0.4.1-1.module+el8.1.0+5440+994fc847
oci-systemd-hook
0.1.15-2.git2d0b8a3.module+el8.1.0+5440+994fc847
oci-umount
2.3.4-2.git87f9237.module+el8.1.0+5440+994fc847
podman
1.4.2-5.0.2.module+el8.1.0+5440+994fc847
podman-docker
1.4.2-5.0.2.module+el8.1.0+5440+994fc847
podman-manpages
1.4.2-5.0.2.module+el8.1.0+5440+994fc847
podman-remote
1.4.2-5.0.2.module+el8.1.0+5440+994fc847
podman-tests
1.4.2-5.0.2.module+el8.1.0+5440+994fc847
python-podman-api
1.2.0-0.1.gitd0a45fe.module+el8.1.0+5440+994fc847
runc
1.0.0-60.rc8.module+el8.1.0+5440+994fc847
skopeo
0.1.37-5.0.2.module+el8.1.0+5440+994fc847
skopeo-tests
0.1.37-5.0.2.module+el8.1.0+5440+994fc847
slirp4netns
0.3.0-4.module+el8.1.0+5440+994fc847
Oracle Linux x86_64
Module container-tools:ol8 is enabled
buildah
1.9.0-5.0.1.module+el8.1.0+5440+994fc847
buildah-tests
1.9.0-5.0.1.module+el8.1.0+5440+994fc847
cockpit-podman
4-1.module+el8.1.0+5440+994fc847
container-selinux
2.107-2.module+el8.1.0+5440+994fc847
containernetworking-plugins
0.8.1-2.0.1.module+el8.1.0+5440+994fc847
containers-common
0.1.37-5.0.2.module+el8.1.0+5440+994fc847
fuse-overlayfs
0.4.1-1.module+el8.1.0+5440+994fc847
oci-systemd-hook
0.1.15-2.git2d0b8a3.module+el8.1.0+5440+994fc847
oci-umount
2.3.4-2.git87f9237.module+el8.1.0+5440+994fc847
podman
1.4.2-5.0.2.module+el8.1.0+5440+994fc847
podman-docker
1.4.2-5.0.2.module+el8.1.0+5440+994fc847
podman-manpages
1.4.2-5.0.2.module+el8.1.0+5440+994fc847
podman-remote
1.4.2-5.0.2.module+el8.1.0+5440+994fc847
podman-tests
1.4.2-5.0.2.module+el8.1.0+5440+994fc847
python-podman-api
1.2.0-0.1.gitd0a45fe.module+el8.1.0+5440+994fc847
runc
1.0.0-60.rc8.module+el8.1.0+5440+994fc847
skopeo
0.1.37-5.0.2.module+el8.1.0+5440+994fc847
skopeo-tests
0.1.37-5.0.2.module+el8.1.0+5440+994fc847
slirp4netns
0.3.0-4.module+el8.1.0+5440+994fc847
Связанные CVE
Связанные уязвимости
ELSA-2019-3494: container-tools:1.0 security and bug fix update (IMPORTANT)
Important: container-tools:rhel8 security, bug fix, and enhancement update
The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launch a MiTM attack and steal login credentials or bearer tokens.
The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launch a MiTM attack and steal login credentials or bearer tokens.