Red Hat Security AdvisoryRHSA-2020:4694
container-tools:rhel8 security, bug fix, and enhancement update
Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) buildah-1.15.1-2.module+el8.3.0+8221+97165c3f.aarch64::container-tools:rhel8, buildah-1.15.1-2.module+el8.3.0+8221+97165c3f.ppc64le::container-tools:rhel8, buildah-1.15.1-2.module+el8.3.0+8221+97165c3f.s390x::container-tools:rhel8 +47
Fixes 3 records
Priority LOW 37
The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01886 · Published 2020-06-17 · Partial fix · 0.3.3 CWE-835
Priority LOW 31
A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks.
CVSS 3.1MEDIUM 6.0· Network · Low privileges · No interaction · EPSS 0.02087 · Published 2020-06-03 · Partial fix · 0.8.6 CWE-300
Priority LOW 29
An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.0051 · Published 2020-07-09 · Partial fix · 4.3.1 CWE-125
