RLSA-2020:1650

Import Source

https://storage.googleapis.com/resf-osv-data/RLSA-2020:1650.json

Related

• CVE-2019-19921
• CVE-2020-1702
• CVE-2020-1726

Published

2020-04-28T09:01:00Z

Modified

2023-02-02T13:04:25.645962Z

Details

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

• runc: volume mount race condition with shared mounts leads to information leak/integrity manipulation (CVE-2019-19921)

• containers/image: Container images read entire image manifest into memory (CVE-2020-1702)

• podman: incorrectly allows existing files in volumes to be overwritten by a container when it is created (CVE-2020-1726)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.

References

• https://errata.rockylinux.org/RLSA-2020:1650
• https://bugzilla.redhat.com/show_bug.cgi?id=1703245
• https://bugzilla.redhat.com/show_bug.cgi?id=1717357
• https://bugzilla.redhat.com/show_bug.cgi?id=1731107
• https://bugzilla.redhat.com/show_bug.cgi?id=1732704
• https://bugzilla.redhat.com/show_bug.cgi?id=1732713
• https://bugzilla.redhat.com/show_bug.cgi?id=1748519
• https://bugzilla.redhat.com/show_bug.cgi?id=1749999
• https://bugzilla.redhat.com/show_bug.cgi?id=1754744
• https://bugzilla.redhat.com/show_bug.cgi?id=1754763
• https://bugzilla.redhat.com/show_bug.cgi?id=1755119
• https://bugzilla.redhat.com/show_bug.cgi?id=1756919
• https://bugzilla.redhat.com/show_bug.cgi?id=1757693
• https://bugzilla.redhat.com/show_bug.cgi?id=1757845
• https://bugzilla.redhat.com/show_bug.cgi?id=1763454
• https://bugzilla.redhat.com/show_bug.cgi?id=1766774
• https://bugzilla.redhat.com/show_bug.cgi?id=1768930
• https://bugzilla.redhat.com/show_bug.cgi?id=1769469
• https://bugzilla.redhat.com/show_bug.cgi?id=1771990
• https://bugzilla.redhat.com/show_bug.cgi?id=1774755
• https://bugzilla.redhat.com/show_bug.cgi?id=1775307
• https://bugzilla.redhat.com/show_bug.cgi?id=1776112
• https://bugzilla.redhat.com/show_bug.cgi?id=1779834
• https://bugzilla.redhat.com/show_bug.cgi?id=1783267
• https://bugzilla.redhat.com/show_bug.cgi?id=1783268
• https://bugzilla.redhat.com/show_bug.cgi?id=1783270
• https://bugzilla.redhat.com/show_bug.cgi?id=1783272
• https://bugzilla.redhat.com/show_bug.cgi?id=1783274
• https://bugzilla.redhat.com/show_bug.cgi?id=1784267
• https://bugzilla.redhat.com/show_bug.cgi?id=1784952
• https://bugzilla.redhat.com/show_bug.cgi?id=1788539
• https://bugzilla.redhat.com/show_bug.cgi?id=1792796
• https://bugzilla.redhat.com/show_bug.cgi?id=1793084
• https://bugzilla.redhat.com/show_bug.cgi?id=1793598
• https://bugzilla.redhat.com/show_bug.cgi?id=1796107
• https://bugzilla.redhat.com/show_bug.cgi?id=1801152
• https://bugzilla.redhat.com/show_bug.cgi?id=1802907
• https://bugzilla.redhat.com/show_bug.cgi?id=1803496
• https://bugzilla.redhat.com/show_bug.cgi?id=1804849
• https://bugzilla.redhat.com/show_bug.cgi?id=1805017
• https://bugzilla.redhat.com/show_bug.cgi?id=1805212
• https://bugzilla.redhat.com/show_bug.cgi?id=1806901
• https://bugzilla.redhat.com/show_bug.cgi?id=1808707
• https://bugzilla.redhat.com/show_bug.cgi?id=1810053
• https://bugzilla.redhat.com/show_bug.cgi?id=1811514
• https://bugzilla.redhat.com/show_bug.cgi?id=1813295