Red Hat Security AdvisoryRHSA-2024:0564
container-tools:3.0 security update
Released 2024-01-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.4) buildah-1.19.9-1.module+el8.4.0+21078+a96cfbf6.src::container-tools:3.0, buildah-1.19.9-1.module+el8.4.0+21078+a96cfbf6.x86_64::container-tools:3.0, buildah-tests-1.19.9-1.module+el8.4.0+21078+a96cfbf6.x86_64::container-tools:3.0 +40
- Red Hat Enterprise Linux AppStream E4S (v.8.4) buildah-1.19.9-1.module+el8.4.0+21078+a96cfbf6.ppc64le::container-tools:3.0, buildah-1.19.9-1.module+el8.4.0+21078+a96cfbf6.src::container-tools:3.0, buildah-1.19.9-1.module+el8.4.0+21078+a96cfbf6.x86_64::container-tools:3.0 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.4) buildah-1.19.9-1.module+el8.4.0+21078+a96cfbf6.src::container-tools:3.0, buildah-1.19.9-1.module+el8.4.0+21078+a96cfbf6.x86_64::container-tools:3.0, buildah-tests-1.19.9-1.module+el8.4.0+21078+a96cfbf6.x86_64::container-tools:3.0 +40
Fixes 2 records
Priority MEDIUM 48
client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides tooling around HTTP servers and clients.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05994 · Published 2022-02-15 · Partial fix · 1.11.1 CWE-400
Priority LOW 34
runc is a CLI tool for spawning and running containers according to the OCI specification.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00343 · Published 2023-03-29 · Partial fix · 1.1.5 CWE-281