Red Hat Security Advisory

RHSA-2024:10289

container-tools:rhel8 security update

Released 2024-11-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+22417+2fb00970.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+22417+2fb00970.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+22417+2fb00970.s390x::container-tools:rhel8 +47

Fixes 3 records

TI-2021-12746 CVE-2021-33198 · GHSA-q2pw-fq43-w78v

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent…

LOW 39

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03372 Published 2021-08-02 Partial fix

TI-2024-08977 CVE-2024-9676 · GHSA-wq2p-5pc6-wpgf

Path traversal in containers/storage

LOW 32

A vulnerability was found in Podman, Buildah, and CRI-O.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01325 Published 2024-10-15 Partial fix · 1.55.1, 8100020241101101019.afee755d +181 CWE-22

TI-2021-02915 CVE-2021-4024 · GHSA-3cf2-x423-x582

Information disclosure in podman

LOW 31

A flaw was found in podman.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01137 Published 2021-12-23 Fixed in 3.4.3 CWE-200