RHSA-2024:0758: Important: container-tools:2.0 security update
Published Feb 8, 2024
·Updated
Important: container-tools:2.0 security update
Other sources
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.<br>Security Fix(es):<br><li> runc: file descriptor leak (CVE-2024-21626)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
92 affected componentsFixes available
redhat/buildah<1.11.6-8.module+el8.2.0+21264+96602818
1.11.6-8.module+el8.2.0+21264+96602818
redhat/cockpit-podman<11-1.module+el8.2.0+21264+96602818
11-1.module+el8.2.0+21264+96602818
redhat/conmon<2.0.6-1.module+el8.2.0+21264+96602818
2.0.6-1.module+el8.2.0+21264+96602818
redhat/container-selinux<2.124.0-1.module+el8.2.0+21264+96602818
2.124.0-1.module+el8.2.0+21264+96602818
redhat/containernetworking-plugins<0.8.3-4.module+el8.2.0+21264+96602818
0.8.3-4.module+el8.2.0+21264+96602818
redhat/criu<3.12-9.module+el8.2.0+21264+96602818
3.12-9.module+el8.2.0+21264+96602818
redhat/fuse-overlayfs<0.7.2-5.module+el8.2.0+21264+96602818
0.7.2-5.module+el8.2.0+21264+96602818
redhat/podman<1.6.4-24.module+el8.2.0+21264+96602818
1.6.4-24.module+el8.2.0+21264+96602818
redhat/python-podman-api<1.2.0-0.2.gitd0a45fe.module+el8.2.0+21264+96602818
1.2.0-0.2.gitd0a45fe.module+el8.2.0+21264+96602818
redhat/runc<1.0.0-66.rc10.module+el8.2.0+21264+96602818
1.0.0-66.rc10.module+el8.2.0+21264+96602818
redhat/skopeo<0.1.40-9.module+el8.2.0+21264+96602818
0.1.40-9.module+el8.2.0+21264+96602818
redhat/slirp4netns<0.4.2-3.git21fdece.module+el8.2.0+21264+96602818
0.4.2-3.git21fdece.module+el8.2.0+21264+96602818
redhat/toolbox<0.0.7-1.module+el8.2.0+21264+96602818
0.0.7-1.module+el8.2.0+21264+96602818
redhat/udica<0.2.1-2.module+el8.2.0+21264+96602818
0.2.1-2.module+el8.2.0+21264+96602818
redhat/buildah<1.11.6-8.module+el8.2.0+21264+96602818
1.11.6-8.module+el8.2.0+21264+96602818
redhat/buildah-debuginfo<1.11.6-8.module+el8.2.0+21264+96602818
1.11.6-8.module+el8.2.0+21264+96602818
redhat/buildah-debugsource<1.11.6-8.module+el8.2.0+21264+96602818
1.11.6-8.module+el8.2.0+21264+96602818
redhat/buildah-tests<1.11.6-8.module+el8.2.0+21264+96602818
1.11.6-8.module+el8.2.0+21264+96602818
redhat/buildah-tests-debuginfo<1.11.6-8.module+el8.2.0+21264+96602818
1.11.6-8.module+el8.2.0+21264+96602818
redhat/cockpit-podman<11-1.module+el8.2.0+21264+96602818
11-1.module+el8.2.0+21264+96602818
redhat/conmon<2.0.6-1.module+el8.2.0+21264+96602818
2.0.6-1.module+el8.2.0+21264+96602818
redhat/container-selinux<2.124.0-1.module+el8.2.0+21264+96602818
2.124.0-1.module+el8.2.0+21264+96602818
redhat/containernetworking-plugins<0.8.3-4.module+el8.2.0+21264+96602818
0.8.3-4.module+el8.2.0+21264+96602818
redhat/containernetworking-plugins-debuginfo<0.8.3-4.module+el8.2.0+21264+96602818
0.8.3-4.module+el8.2.0+21264+96602818
redhat/containernetworking-plugins-debugsource<0.8.3-4.module+el8.2.0+21264+96602818
0.8.3-4.module+el8.2.0+21264+96602818
redhat/containers-common<0.1.40-9.module+el8.2.0+21264+96602818
0.1.40-9.module+el8.2.0+21264+96602818
redhat/crit<3.12-9.module+el8.2.0+21264+96602818
3.12-9.module+el8.2.0+21264+96602818
redhat/criu<3.12-9.module+el8.2.0+21264+96602818
3.12-9.module+el8.2.0+21264+96602818
redhat/criu-debuginfo<3.12-9.module+el8.2.0+21264+96602818
3.12-9.module+el8.2.0+21264+96602818
redhat/criu-debugsource<3.12-9.module+el8.2.0+21264+96602818
3.12-9.module+el8.2.0+21264+96602818
redhat/fuse-overlayfs<0.7.2-5.module+el8.2.0+21264+96602818
0.7.2-5.module+el8.2.0+21264+96602818
redhat/fuse-overlayfs-debuginfo<0.7.2-5.module+el8.2.0+21264+96602818
0.7.2-5.module+el8.2.0+21264+96602818
redhat/fuse-overlayfs-debugsource<0.7.2-5.module+el8.2.0+21264+96602818
0.7.2-5.module+el8.2.0+21264+96602818
redhat/podman<1.6.4-24.module+el8.2.0+21264+96602818
1.6.4-24.module+el8.2.0+21264+96602818
redhat/podman-debuginfo<1.6.4-24.module+el8.2.0+21264+96602818
1.6.4-24.module+el8.2.0+21264+96602818
redhat/podman-debugsource<1.6.4-24.module+el8.2.0+21264+96602818
1.6.4-24.module+el8.2.0+21264+96602818
redhat/podman-docker<1.6.4-24.module+el8.2.0+21264+96602818
1.6.4-24.module+el8.2.0+21264+96602818
redhat/podman-remote<1.6.4-24.module+el8.2.0+21264+96602818
1.6.4-24.module+el8.2.0+21264+96602818
redhat/podman-remote-debuginfo<1.6.4-24.module+el8.2.0+21264+96602818
1.6.4-24.module+el8.2.0+21264+96602818
redhat/podman-tests<1.6.4-24.module+el8.2.0+21264+96602818
1.6.4-24.module+el8.2.0+21264+96602818
redhat/python-podman-api<1.2.0-0.2.gitd0a45fe.module+el8.2.0+21264+96602818
1.2.0-0.2.gitd0a45fe.module+el8.2.0+21264+96602818
redhat/python3-criu<3.12-9.module+el8.2.0+21264+96602818
3.12-9.module+el8.2.0+21264+96602818
redhat/runc<1.0.0-66.rc10.module+el8.2.0+21264+96602818
1.0.0-66.rc10.module+el8.2.0+21264+96602818
redhat/runc-debuginfo<1.0.0-66.rc10.module+el8.2.0+21264+96602818
1.0.0-66.rc10.module+el8.2.0+21264+96602818
redhat/runc-debugsource<1.0.0-66.rc10.module+el8.2.0+21264+96602818
1.0.0-66.rc10.module+el8.2.0+21264+96602818
redhat/skopeo<0.1.40-9.module+el8.2.0+21264+96602818
0.1.40-9.module+el8.2.0+21264+96602818
redhat/skopeo-debuginfo<0.1.40-9.module+el8.2.0+21264+96602818
0.1.40-9.module+el8.2.0+21264+96602818
redhat/skopeo-debugsource<0.1.40-9.module+el8.2.0+21264+96602818
0.1.40-9.module+el8.2.0+21264+96602818
redhat/skopeo-tests<0.1.40-9.module+el8.2.0+21264+96602818
0.1.40-9.module+el8.2.0+21264+96602818
redhat/slirp4netns<0.4.2-3.git21fdece.module+el8.2.0+21264+96602818
0.4.2-3.git21fdece.module+el8.2.0+21264+96602818
redhat/slirp4netns-debuginfo<0.4.2-3.git21fdece.module+el8.2.0+21264+96602818
0.4.2-3.git21fdece.module+el8.2.0+21264+96602818
redhat/slirp4netns-debugsource<0.4.2-3.git21fdece.module+el8.2.0+21264+96602818
0.4.2-3.git21fdece.module+el8.2.0+21264+96602818
redhat/toolbox<0.0.7-1.module+el8.2.0+21264+96602818
0.0.7-1.module+el8.2.0+21264+96602818
redhat/udica<0.2.1-2.module+el8.2.0+21264+96602818
0.2.1-2.module+el8.2.0+21264+96602818
redhat/buildah<1.11.6-8.module+el8.2.0+21264+96602818
1.11.6-8.module+el8.2.0+21264+96602818
redhat/buildah-debuginfo<1.11.6-8.module+el8.2.0+21264+96602818
1.11.6-8.module+el8.2.0+21264+96602818
redhat/buildah-debugsource<1.11.6-8.module+el8.2.0+21264+96602818
1.11.6-8.module+el8.2.0+21264+96602818
redhat/buildah-tests<1.11.6-8.module+el8.2.0+21264+96602818
1.11.6-8.module+el8.2.0+21264+96602818
redhat/buildah-tests-debuginfo<1.11.6-8.module+el8.2.0+21264+96602818
1.11.6-8.module+el8.2.0+21264+96602818
redhat/conmon<2.0.6-1.module+el8.2.0+21264+96602818
2.0.6-1.module+el8.2.0+21264+96602818
redhat/containernetworking-plugins<0.8.3-4.module+el8.2.0+21264+96602818
0.8.3-4.module+el8.2.0+21264+96602818
redhat/containernetworking-plugins-debuginfo<0.8.3-4.module+el8.2.0+21264+96602818
0.8.3-4.module+el8.2.0+21264+96602818
redhat/containernetworking-plugins-debugsource<0.8.3-4.module+el8.2.0+21264+96602818
0.8.3-4.module+el8.2.0+21264+96602818
redhat/containers-common<0.1.40-9.module+el8.2.0+21264+96602818
0.1.40-9.module+el8.2.0+21264+96602818
redhat/crit<3.12-9.module+el8.2.0+21264+96602818
3.12-9.module+el8.2.0+21264+96602818
redhat/criu<3.12-9.module+el8.2.0+21264+96602818
3.12-9.module+el8.2.0+21264+96602818
redhat/criu-debuginfo<3.12-9.module+el8.2.0+21264+96602818
3.12-9.module+el8.2.0+21264+96602818
redhat/criu-debugsource<3.12-9.module+el8.2.0+21264+96602818
3.12-9.module+el8.2.0+21264+96602818
redhat/fuse-overlayfs<0.7.2-5.module+el8.2.0+21264+96602818
0.7.2-5.module+el8.2.0+21264+96602818
redhat/fuse-overlayfs-debuginfo<0.7.2-5.module+el8.2.0+21264+96602818
0.7.2-5.module+el8.2.0+21264+96602818
redhat/fuse-overlayfs-debugsource<0.7.2-5.module+el8.2.0+21264+96602818
0.7.2-5.module+el8.2.0+21264+96602818
redhat/podman<1.6.4-24.module+el8.2.0+21264+96602818
1.6.4-24.module+el8.2.0+21264+96602818
redhat/podman-debuginfo<1.6.4-24.module+el8.2.0+21264+96602818
1.6.4-24.module+el8.2.0+21264+96602818
redhat/podman-debugsource<1.6.4-24.module+el8.2.0+21264+96602818
1.6.4-24.module+el8.2.0+21264+96602818
redhat/podman-remote<1.6.4-24.module+el8.2.0+21264+96602818
1.6.4-24.module+el8.2.0+21264+96602818
redhat/podman-remote-debuginfo<1.6.4-24.module+el8.2.0+21264+96602818
1.6.4-24.module+el8.2.0+21264+96602818
redhat/podman-tests<1.6.4-24.module+el8.2.0+21264+96602818
1.6.4-24.module+el8.2.0+21264+96602818
redhat/python3-criu<3.12-9.module+el8.2.0+21264+96602818
3.12-9.module+el8.2.0+21264+96602818
redhat/runc<1.0.0-66.rc10.module+el8.2.0+21264+96602818
1.0.0-66.rc10.module+el8.2.0+21264+96602818
redhat/runc-debuginfo<1.0.0-66.rc10.module+el8.2.0+21264+96602818
1.0.0-66.rc10.module+el8.2.0+21264+96602818
redhat/runc-debugsource<1.0.0-66.rc10.module+el8.2.0+21264+96602818
1.0.0-66.rc10.module+el8.2.0+21264+96602818
redhat/skopeo<0.1.40-9.module+el8.2.0+21264+96602818
0.1.40-9.module+el8.2.0+21264+96602818
redhat/skopeo-debuginfo<0.1.40-9.module+el8.2.0+21264+96602818
0.1.40-9.module+el8.2.0+21264+96602818
redhat/skopeo-debugsource<0.1.40-9.module+el8.2.0+21264+96602818
0.1.40-9.module+el8.2.0+21264+96602818
redhat/skopeo-tests<0.1.40-9.module+el8.2.0+21264+96602818
0.1.40-9.module+el8.2.0+21264+96602818
redhat/slirp4netns<0.4.2-3.git21fdece.module+el8.2.0+21264+96602818
0.4.2-3.git21fdece.module+el8.2.0+21264+96602818
redhat/slirp4netns-debuginfo<0.4.2-3.git21fdece.module+el8.2.0+21264+96602818
0.4.2-3.git21fdece.module+el8.2.0+21264+96602818
redhat/slirp4netns-debugsource<0.4.2-3.git21fdece.module+el8.2.0+21264+96602818
0.4.2-3.git21fdece.module+el8.2.0+21264+96602818
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - TUS
Remediation
Event History
Feb 8, 2024
Advisory Published
via Red Hat·05:23 PM
Mar 19, 2024
Advisory Published
via Red Hat·06:26 PM
Frequently Asked Questions
1
What is the severity of RHSA-2024:0758?
The severity of RHSA-2024:0758 is classified as important.
2
How do I fix RHSA-2024:0758?
To fix RHSA-2024:0758, update the affected container-tools packages to the specified remedial versions.
3
Which packages are affected by RHSA-2024:0758?
RHSA-2024:0758 affects multiple packages including buildah, podman, runc, and skopeo among others.
4
What vulnerability does RHSA-2024:0758 address?
RHSA-2024:0758 addresses a file descriptor leak vulnerability identified as CVE-2024-21626.
5
Is RHSA-2024:0758 applicable to all Red Hat environments?
RHSA-2024:0758 is applicable to specific Red Hat Enterprise Linux environments including EL8.