ALSA-2021:0531

See a problem?
Source
https://errata.almalinux.org/8/ALSA-2021-0531.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:0531.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2021:0531
Related
Published
2021-02-16T07:31:27Z
Modified
2021-02-16T13:02:13Z
Summary
Moderate: container-tools:rhel8 security, bug fix, and enhancement update
Details

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • podman: environment variables leak between containers when started via Varlink or Docker-compatible REST API (CVE-2020-14370)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References

Affected packages

AlmaLinux:8 / crit

Package

Name
crit

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.15-1.module_el8.6.0+2876+9ed4eae2

AlmaLinux:8 / criu

Package

Name
criu

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.15-1.module_el8.6.0+2876+9ed4eae2

AlmaLinux:8 / libslirp

Package

Name
libslirp

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3.1-1.module_el8.6.0+2876+9ed4eae2

AlmaLinux:8 / libslirp-devel

Package

Name
libslirp-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3.1-1.module_el8.6.0+2876+9ed4eae2

AlmaLinux:8 / python-podman-api

Package

Name
python-podman-api

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.0-0.2.gitd0a45fe.module_el8.5.0+2635+e4386a39

AlmaLinux:8 / python-podman-api

Package

Name
python-podman-api

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.0-0.2.gitd0a45fe.module_el8.5.0+108+00865455

AlmaLinux:8 / python3-criu

Package

Name
python3-criu

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.15-1.module_el8.6.0+2876+9ed4eae2

AlmaLinux:8 / slirp4netns

Package

Name
slirp4netns

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.8-1.module_el8.6.0+2876+9ed4eae2

AlmaLinux:8 / udica

Package

Name
udica

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.2.4-1.module_el8.6.0+2876+9ed4eae2