RLSA-2022:7457
- Import Source
- https://storage.googleapis.com/resf-osv-data/RLSA-2022:7457.json
- Related
-
- CVE-2021-36221
- CVE-2021-41190
- CVE-2022-1708
- CVE-2022-27191
- CVE-2022-29162
- CVE-2022-2990
- Published
- 2022-11-08T06:20:07Z
- Modified
- 2023-02-02T13:49:03.212891Z
- Details
-
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.
Security Fix(es):
golang: net/http/httputil: panic due to racy read of persistConn after handler panic (CVE-2021-36221)
cri-o: memory exhaustion on the node when access to the kube api (CVE-2022-1708)
golang: crash in a golang.org/x/crypto/ssh server (CVE-2022-27191)
opencontainers: OCI manifest and index parsing confusion (CVE-2021-41190)
buildah: possible information disclosure and modification (CVE-2022-2990)
runc: incorrect handling of inheritable capabilities (CVE-2022-29162)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.
- References
-
- https://errata.rockylinux.org/RLSA-2022:7457
- https://bugzilla.redhat.com/show_bug.cgi?id=1820551
- https://bugzilla.redhat.com/show_bug.cgi?id=1941727
- https://bugzilla.redhat.com/show_bug.cgi?id=1945929
- https://bugzilla.redhat.com/show_bug.cgi?id=1974423
- https://bugzilla.redhat.com/show_bug.cgi?id=1995656
- https://bugzilla.redhat.com/show_bug.cgi?id=1996050
- https://bugzilla.redhat.com/show_bug.cgi?id=2005866
- https://bugzilla.redhat.com/show_bug.cgi?id=2009264
- https://bugzilla.redhat.com/show_bug.cgi?id=2009346
- https://bugzilla.redhat.com/show_bug.cgi?id=2024938
- https://bugzilla.redhat.com/show_bug.cgi?id=2027662
- https://bugzilla.redhat.com/show_bug.cgi?id=2028408
- https://bugzilla.redhat.com/show_bug.cgi?id=2030195
- https://bugzilla.redhat.com/show_bug.cgi?id=2039045
- https://bugzilla.redhat.com/show_bug.cgi?id=2052697
- https://bugzilla.redhat.com/show_bug.cgi?id=2053990
- https://bugzilla.redhat.com/show_bug.cgi?id=2055313
- https://bugzilla.redhat.com/show_bug.cgi?id=2059666
- https://bugzilla.redhat.com/show_bug.cgi?id=2062697
- https://bugzilla.redhat.com/show_bug.cgi?id=2064702
- https://bugzilla.redhat.com/show_bug.cgi?id=2066145
- https://bugzilla.redhat.com/show_bug.cgi?id=2068006
- https://bugzilla.redhat.com/show_bug.cgi?id=2072452
- https://bugzilla.redhat.com/show_bug.cgi?id=2073958
- https://bugzilla.redhat.com/show_bug.cgi?id=2078925
- https://bugzilla.redhat.com/show_bug.cgi?id=2079759
- https://bugzilla.redhat.com/show_bug.cgi?id=2079761
- https://bugzilla.redhat.com/show_bug.cgi?id=2081836
- https://bugzilla.redhat.com/show_bug.cgi?id=2083570
- https://bugzilla.redhat.com/show_bug.cgi?id=2083997
- https://bugzilla.redhat.com/show_bug.cgi?id=2085361
- https://bugzilla.redhat.com/show_bug.cgi?id=2086398
- https://bugzilla.redhat.com/show_bug.cgi?id=2086757
- https://bugzilla.redhat.com/show_bug.cgi?id=2090609
- https://bugzilla.redhat.com/show_bug.cgi?id=2090920
- https://bugzilla.redhat.com/show_bug.cgi?id=2093079
- https://bugzilla.redhat.com/show_bug.cgi?id=2094610
- https://bugzilla.redhat.com/show_bug.cgi?id=2094875
- https://bugzilla.redhat.com/show_bug.cgi?id=2095097
- https://bugzilla.redhat.com/show_bug.cgi?id=2096264
- https://bugzilla.redhat.com/show_bug.cgi?id=2097865
- https://bugzilla.redhat.com/show_bug.cgi?id=2100740
- https://bugzilla.redhat.com/show_bug.cgi?id=2102140
- https://bugzilla.redhat.com/show_bug.cgi?id=2102361
- https://bugzilla.redhat.com/show_bug.cgi?id=2102381
- https://bugzilla.redhat.com/show_bug.cgi?id=2113941
- https://bugzilla.redhat.com/show_bug.cgi?id=2117699
- https://bugzilla.redhat.com/show_bug.cgi?id=2117928
- https://bugzilla.redhat.com/show_bug.cgi?id=2118231
- https://bugzilla.redhat.com/show_bug.cgi?id=2119072
- https://bugzilla.redhat.com/show_bug.cgi?id=2120651
- https://bugzilla.redhat.com/show_bug.cgi?id=2121453
Affected packages
Rocky Linux:8 / cockpit-podman
Package
- Name
- cockpit-podman
Rocky Linux:8 / conmon
Package
- Name
- conmon
Rocky Linux:8 / containernetworking-plugins
Package
Rocky Linux:8 / containernetworking-plugins
Package
Rocky Linux:8 / container-selinux
Package
Rocky Linux:8 / container-selinux
Package
Rocky Linux:8 / criu
Package
- Name
- criu
Rocky Linux:8 / criu
Package
- Name
- criu
Rocky Linux:8 / criu
Package
- Name
- criu
Rocky Linux:8 / crun
Package
- Name
- crun
Rocky Linux:8 / crun
Package
- Name
- crun
Rocky Linux:8 / fuse-overlayfs
Package
- Name
- fuse-overlayfs
Rocky Linux:8 / fuse-overlayfs
Package
- Name
- fuse-overlayfs
Rocky Linux:8 / libslirp
Package
- Name
- libslirp
Rocky Linux:8 / libslirp
Package
- Name
- libslirp
Rocky Linux:8 / libslirp
Package
- Name
- libslirp
Rocky Linux:8 / oci-seccomp-bpf-hook
Package
Rocky Linux:8 / oci-seccomp-bpf-hook
Package
Rocky Linux:8 / runc
Package
- Name
- runc
Rocky Linux:8 / slirp4netns
Package
- Name
- slirp4netns
Rocky Linux:8 / slirp4netns
Package
- Name
- slirp4netns
Rocky Linux:8 / toolbox
Package
- Name
- toolbox
Rocky Linux:8 / toolbox
Package
- Name
- toolbox
Rocky Linux:8 / udica
Package
- Name
- udica
Rocky Linux:8 / udica
Package
- Name
- udica