ALSA-2020:3053

Source
https://errata.almalinux.org/8/ALSA-2020-3053.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2020:3053.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2020:3053
Related
Published
2020-07-21T15:01:40Z
Modified
2020-07-21T15:01:25Z
Summary
Moderate: container-tools:rhel8 security, bug fix, and enhancement update
Details

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • QEMU: slirp: use-after-free in ipreass() function in ipinput.c (CVE-2020-1983)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References

Affected packages

AlmaLinux:8 / python-podman-api

Package

Name
python-podman-api

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.0-0.2.gitd0a45fe.module_el8.5.0+2635+e4386a39

AlmaLinux:8 / python-podman-api

Package

Name
python-podman-api

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.0-0.2.gitd0a45fe.module_el8.5.0+108+00865455

AlmaLinux:8 / runc

Package

Name
runc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.0-66.rc10.module_el8.5.0+2635+e4386a39

AlmaLinux:8 / runc

Package

Name
runc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.0-66.rc10.module_el8.5.0+108+00865455

AlmaLinux:8 / toolbox

Package

Name
toolbox

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.0.7-1.module_el8.5.0+108+00865455

AlmaLinux:8 / toolbox

Package

Name
toolbox

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.0.7-1.module_el8.5.0+2635+e4386a39

AlmaLinux:8 / udica

Package

Name
udica

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.2.1-2.module_el8.5.0+108+00865455

AlmaLinux:8 / udica

Package

Name
udica

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.2.1-2.module_el8.5.0+2635+e4386a39