RHSA-2022:5622: Important: container-tools:rhel8 security and bug fix update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.Security Fix(es): psgo: Privilege escalation in 'podman top' (CVE-2022-1227) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): ubi9-beta/ubi-minimal has a broken microdnf (gsystemthreadnew fatal error) (BZ#2095808)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/buildahto a version that resolves this vulnerability.Fixed in 1.21.4-3.module+el8.4.0+15741+47bb6bfe - Upgrade
Upgrade
redhat/cockpit-podmanto a version that resolves this vulnerability.Fixed in 32-2.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/conmonto a version that resolves this vulnerability.Fixed in 2.0.29-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/container-selinuxto a version that resolves this vulnerability.Fixed in 2.167.0-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/containernetworking-pluginsto a version that resolves this vulnerability.Fixed in 0.9.1-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/criuto a version that resolves this vulnerability.Fixed in 3.15-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/crunto a version that resolves this vulnerability.Fixed in 0.20.1-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/fuse-overlayfsto a version that resolves this vulnerability.Fixed in 1.6-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/libslirpto a version that resolves this vulnerability.Fixed in 4.3.1-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/oci-seccomp-bpf-hookto a version that resolves this vulnerability.Fixed in 1.2.3-2.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/podmanto a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/runcto a version that resolves this vulnerability.Fixed in 1.0.0-74.rc95.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/skopeoto a version that resolves this vulnerability.Fixed in 1.3.1-7.module+el8.4.0+15741+47bb6bfe - Upgrade
Upgrade
redhat/slirp4netnsto a version that resolves this vulnerability.Fixed in 1.1.8-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/toolboxto a version that resolves this vulnerability.Fixed in 0.0.8-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/udicato a version that resolves this vulnerability.Fixed in 0.2.4-2.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/podman-dockerto a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/buildah-debuginfoto a version that resolves this vulnerability.Fixed in 1.21.4-3.module+el8.4.0+15741+47bb6bfe - Upgrade
Upgrade
redhat/buildah-debugsourceto a version that resolves this vulnerability.Fixed in 1.21.4-3.module+el8.4.0+15741+47bb6bfe - Upgrade
Upgrade
redhat/buildah-teststo a version that resolves this vulnerability.Fixed in 1.21.4-3.module+el8.4.0+15741+47bb6bfe - Upgrade
Upgrade
redhat/buildah-tests-debuginfoto a version that resolves this vulnerability.Fixed in 1.21.4-3.module+el8.4.0+15741+47bb6bfe - Upgrade
Upgrade
redhat/conmon-debuginfoto a version that resolves this vulnerability.Fixed in 2.0.29-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/conmon-debugsourceto a version that resolves this vulnerability.Fixed in 2.0.29-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/containernetworking-plugins-debuginfoto a version that resolves this vulnerability.Fixed in 0.9.1-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/containernetworking-plugins-debugsourceto a version that resolves this vulnerability.Fixed in 0.9.1-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/containers-commonto a version that resolves this vulnerability.Fixed in 1.3.1-7.module+el8.4.0+15741+47bb6bfe - Upgrade
Upgrade
redhat/critto a version that resolves this vulnerability.Fixed in 3.15-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/criu-debuginfoto a version that resolves this vulnerability.Fixed in 3.15-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/criu-debugsourceto a version that resolves this vulnerability.Fixed in 3.15-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/crun-debuginfoto a version that resolves this vulnerability.Fixed in 0.20.1-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/crun-debugsourceto a version that resolves this vulnerability.Fixed in 0.20.1-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/fuse-overlayfs-debuginfoto a version that resolves this vulnerability.Fixed in 1.6-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/fuse-overlayfs-debugsourceto a version that resolves this vulnerability.Fixed in 1.6-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/libslirp-debuginfoto a version that resolves this vulnerability.Fixed in 4.3.1-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/libslirp-debugsourceto a version that resolves this vulnerability.Fixed in 4.3.1-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/libslirp-develto a version that resolves this vulnerability.Fixed in 4.3.1-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/oci-seccomp-bpf-hook-debuginfoto a version that resolves this vulnerability.Fixed in 1.2.3-2.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/oci-seccomp-bpf-hook-debugsourceto a version that resolves this vulnerability.Fixed in 1.2.3-2.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/podman-catatonitto a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/podman-catatonit-debuginfoto a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/podman-debuginfoto a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/podman-debugsourceto a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/podman-pluginsto a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/podman-plugins-debuginfoto a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/podman-remoteto a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/podman-remote-debuginfoto a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/podman-teststo a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/python3-criuto a version that resolves this vulnerability.Fixed in 3.15-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/runc-debuginfoto a version that resolves this vulnerability.Fixed in 1.0.0-74.rc95.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/runc-debugsourceto a version that resolves this vulnerability.Fixed in 1.0.0-74.rc95.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/skopeo-debuginfoto a version that resolves this vulnerability.Fixed in 1.3.1-7.module+el8.4.0+15741+47bb6bfe - Upgrade
Upgrade
redhat/skopeo-debugsourceto a version that resolves this vulnerability.Fixed in 1.3.1-7.module+el8.4.0+15741+47bb6bfe - Upgrade
Upgrade
redhat/skopeo-teststo a version that resolves this vulnerability.Fixed in 1.3.1-7.module+el8.4.0+15741+47bb6bfe - Upgrade
Upgrade
redhat/slirp4netns-debuginfoto a version that resolves this vulnerability.Fixed in 1.1.8-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/slirp4netns-debugsourceto a version that resolves this vulnerability.Fixed in 1.1.8-1.module+el8.4.0+14908+81312c48 - Upgrade
Upgrade
redhat/buildahto a version that resolves this vulnerability.Fixed in 1.21.4-3.module+el8.4.0+15741+47bb6bfe.aa - Upgrade
Upgrade
redhat/buildah-debuginfoto a version that resolves this vulnerability.Fixed in 1.21.4-3.module+el8.4.0+15741+47bb6bfe.aa - Upgrade
Upgrade
redhat/buildah-debugsourceto a version that resolves this vulnerability.Fixed in 1.21.4-3.module+el8.4.0+15741+47bb6bfe.aa - Upgrade
Upgrade
redhat/buildah-teststo a version that resolves this vulnerability.Fixed in 1.21.4-3.module+el8.4.0+15741+47bb6bfe.aa - Upgrade
Upgrade
redhat/buildah-tests-debuginfoto a version that resolves this vulnerability.Fixed in 1.21.4-3.module+el8.4.0+15741+47bb6bfe.aa - Upgrade
Upgrade
redhat/conmonto a version that resolves this vulnerability.Fixed in 2.0.29-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/conmon-debuginfoto a version that resolves this vulnerability.Fixed in 2.0.29-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/conmon-debugsourceto a version that resolves this vulnerability.Fixed in 2.0.29-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/containernetworking-pluginsto a version that resolves this vulnerability.Fixed in 0.9.1-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/containernetworking-plugins-debuginfoto a version that resolves this vulnerability.Fixed in 0.9.1-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/containernetworking-plugins-debugsourceto a version that resolves this vulnerability.Fixed in 0.9.1-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/containers-commonto a version that resolves this vulnerability.Fixed in 1.3.1-7.module+el8.4.0+15741+47bb6bfe.aa - Upgrade
Upgrade
redhat/critto a version that resolves this vulnerability.Fixed in 3.15-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/criuto a version that resolves this vulnerability.Fixed in 3.15-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/criu-debuginfoto a version that resolves this vulnerability.Fixed in 3.15-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/criu-debugsourceto a version that resolves this vulnerability.Fixed in 3.15-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/crunto a version that resolves this vulnerability.Fixed in 0.20.1-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/crun-debuginfoto a version that resolves this vulnerability.Fixed in 0.20.1-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/crun-debugsourceto a version that resolves this vulnerability.Fixed in 0.20.1-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/fuse-overlayfsto a version that resolves this vulnerability.Fixed in 1.6-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/fuse-overlayfs-debuginfoto a version that resolves this vulnerability.Fixed in 1.6-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/fuse-overlayfs-debugsourceto a version that resolves this vulnerability.Fixed in 1.6-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/libslirpto a version that resolves this vulnerability.Fixed in 4.3.1-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/libslirp-debuginfoto a version that resolves this vulnerability.Fixed in 4.3.1-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/libslirp-debugsourceto a version that resolves this vulnerability.Fixed in 4.3.1-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/libslirp-develto a version that resolves this vulnerability.Fixed in 4.3.1-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/oci-seccomp-bpf-hookto a version that resolves this vulnerability.Fixed in 1.2.3-2.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/oci-seccomp-bpf-hook-debuginfoto a version that resolves this vulnerability.Fixed in 1.2.3-2.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/oci-seccomp-bpf-hook-debugsourceto a version that resolves this vulnerability.Fixed in 1.2.3-2.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/podmanto a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/podman-catatonitto a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/podman-catatonit-debuginfoto a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/podman-debuginfoto a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/podman-debugsourceto a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/podman-pluginsto a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/podman-plugins-debuginfoto a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/podman-remoteto a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/podman-remote-debuginfoto a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/podman-teststo a version that resolves this vulnerability.Fixed in 3.2.3-0.12.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/python3-criuto a version that resolves this vulnerability.Fixed in 3.15-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/runcto a version that resolves this vulnerability.Fixed in 1.0.0-74.rc95.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/runc-debuginfoto a version that resolves this vulnerability.Fixed in 1.0.0-74.rc95.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/runc-debugsourceto a version that resolves this vulnerability.Fixed in 1.0.0-74.rc95.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/skopeoto a version that resolves this vulnerability.Fixed in 1.3.1-7.module+el8.4.0+15741+47bb6bfe.aa - Upgrade
Upgrade
redhat/skopeo-debuginfoto a version that resolves this vulnerability.Fixed in 1.3.1-7.module+el8.4.0+15741+47bb6bfe.aa - Upgrade
Upgrade
redhat/skopeo-debugsourceto a version that resolves this vulnerability.Fixed in 1.3.1-7.module+el8.4.0+15741+47bb6bfe.aa - Upgrade
Upgrade
redhat/skopeo-teststo a version that resolves this vulnerability.Fixed in 1.3.1-7.module+el8.4.0+15741+47bb6bfe.aa - Upgrade
Upgrade
redhat/slirp4netnsto a version that resolves this vulnerability.Fixed in 1.1.8-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/slirp4netns-debuginfoto a version that resolves this vulnerability.Fixed in 1.1.8-1.module+el8.4.0+14908+81312c48.aa - Upgrade
Upgrade
redhat/slirp4netns-debugsourceto a version that resolves this vulnerability.Fixed in 1.1.8-1.module+el8.4.0+14908+81312c48.aa
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:5622?
The severity of RHSA-2022:5622 is classified as important.
How do I fix RHSA-2022:5622?
To fix RHSA-2022:5622, update the affected containers-tools packages to the versions specified in the advisory.
What vulnerabilities are addressed in RHSA-2022:5622?
RHSA-2022:5622 addresses a privilege escalation vulnerability in 'podman top' identified as CVE-2022-1227.
Which packages are affected by RHSA-2022:5622?
Packages affected by RHSA-2022:5622 include podman, buildah, skopeo, and several other container-related tools.
Is there a workaround for RHSA-2022:5622?
There are no recommended workarounds for RHSA-2022:5622; applying the updates is the advised course of action.