Red Hat Security AdvisoryRHSA-2019:4269
container-tools:rhel8 security and bug fix update
Released 2019-12-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) buildah-1.9.0-5.module+el8.1.0+4240+893c1ab8.aarch64::container-tools:rhel8, buildah-1.9.0-5.module+el8.1.0+4240+893c1ab8.ppc64le::container-tools:rhel8, buildah-1.9.0-5.module+el8.1.0+4240+893c1ab8.s390x::container-tools:rhel8 +47
Fixes 4 records
Priority HIGH 74
Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.82813 · Published 2019-08-13 · Partial fix · 0.0.0-20190813141303-74dc4d7220e7 CWE-400
Priority HIGH 74
Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.83433 · Published 2019-08-13 · Partial fix · 0.0.0-20190813141303-74dc4d7220e7 CWE-400
Priority MEDIUM 40
runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04409 · Published 2019-09-25 · Partial fix · 1.0.0-rc8.0.20190930145003-cad42f6e0932, 1.3.1-0.20190929122143-5215b1806f52 CWE-863
Priority LOW 28
An issue was discovered in Podman in libpod before 1.6.0.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01386 · Published 2019-10-28 · Partial fix · 1.6.0 CWE-59
THREATIST.IORead the docs