Red Hat Security Advisory

RHSA-2021:1796

container-tools:rhel8 security, bug fix, and enhancement update

Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) buildah-1.19.7-1.module+el8.4.0+10607+f4da7515.aarch64::container-tools:rhel8, buildah-1.19.7-1.module+el8.4.0+10607+f4da7515.ppc64le::container-tools:rhel8, buildah-1.19.7-1.module+el8.4.0+10607+f4da7515.s390x::container-tools:rhel8 +47

Fixes 2 records

TI-2020-17810 CVE-2020-29652 · GHSA-3vm4-22fp-5rfm

A nil pointer dereference in the golang.org/x/crypto/ssh component through…

LOW 39

A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03179 Published 2020-12-17 Partial fix · 0.0.0-20201216223049-8b5274cf687f CWE-476

TI-2021-03497 CVE-2021-20199 · GHSA-grh6-q6m2-rh72

Origin validation error in podman

LOW 29

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01159 Published 2021-02-02 Partial fix · 3.0.0 CWE-346