Linux · Oracle Linux · Security advisory · May 5, 2020

ELSA-2020-1650: Security update for 21 packages

ELSA-2020-1650, released May 5, 2020, fixes 3 CVEs across 21 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Highest CVSS
7.0
Base score, 0 to 10
Highest EPSS
0.0153
74th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 1 Routine 2

Fixed package versions

ProductReleaseFixed in
buildahol 80:1.11.6-7.0.1.module+el8.2.0+5584+b2b2d3fb
buildah-testsol 80:1.11.6-7.0.1.module+el8.2.0+5584+b2b2d3fb
cockpit-podmanol 80:12-1.module+el8.2.0+5584+b2b2d3fb
conmonol 82:2.0.6-1.0.1.module+el8.2.0+5584+b2b2d3fb
container-selinuxol 82:2.124.0-1.module+el8.2.0+5584+b2b2d3fb
containernetworking-pluginsol 80:0.8.3-5.0.1.module+el8.2.0+5584+b2b2d3fb
containers-commonol 81:0.1.40-10.0.1.module+el8.2.0+5584+b2b2d3fb
critol 80:3.12-9.module+el8.2.0+5584+b2b2d3fb
criuol 80:3.12-9.module+el8.2.0+5584+b2b2d3fb
fuse-overlayfsol 80:0.7.2-5.module+el8.2.0+5584+b2b2d3fb
podmanol 80:1.6.4-10.0.1.module+el8.2.0+5584+b2b2d3fb
podman-dockerol 80:1.6.4-10.0.1.module+el8.2.0+5584+b2b2d3fb
podman-remoteol 80:1.6.4-10.0.1.module+el8.2.0+5584+b2b2d3fb
podman-testsol 80:1.6.4-10.0.1.module+el8.2.0+5584+b2b2d3fb
python-podman-apiol 80:1.2.0-0.2.gitd0a45fe.module+el8.2.0+5584+b2b2d3fb
python3-criuol 80:3.12-9.module+el8.2.0+5584+b2b2d3fb
runcol 80:1.0.0-65.rc10.module+el8.2.0+5584+b2b2d3fb
skopeool 81:0.1.40-10.0.1.module+el8.2.0+5584+b2b2d3fb
skopeo-testsol 81:0.1.40-10.0.1.module+el8.2.0+5584+b2b2d3fb
slirp4netnsol 80:0.4.2-3.git21fdece.module+el8.2.0+5584+b2b2d3fb
udicaol 80:0.2.1-2.module+el8.2.0+5584+b2b2d3fb

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2019-19921 container-selinux: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...7.0 0.0043 None reported
Routine CVE-2020-1726 buildah: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...5.9 0.0153 None reported
Routine CVE-2020-1702 toolbox: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...3.5 0.0069 None reported
Showing 1 to 3 of 3 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.