Linux · Oracle Linux · Security advisory · November 16, 2021

ELSA-2021-4154: Security update for 30 packages

ELSA-2021-4154, released November 16, 2021, fixes 2 CVEs across 30 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
2
None rated Critical
Exploited
0
None reported
Highest CVSS
6.5
Base score, 0 to 10
Highest EPSS
0.0159
75th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 0 Routine 2

Fixed package versions

ProductReleaseFixed in
buildahol 80:1.22.3-2.0.1.module+el8.5.0+20416+d687fed7
buildah-testsol 80:1.22.3-2.0.1.module+el8.5.0+20416+d687fed7
cockpit-podmanol 80:33-1.module+el8.5.0+20416+d687fed7
conmonol 82:2.0.29-1.module+el8.5.0+20416+d687fed7
container-selinuxol 82:2.167.0-1.module+el8.5.0+20416+d687fed7
containernetworking-pluginsol 80:1.0.0-1.module+el8.5.0+20416+d687fed7
containers-commonol 82:1-2.0.2.module+el8.5.0+20424+d687fed7
critol 80:3.15-3.module+el8.5.0+20416+d687fed7
criuol 80:3.15-3.module+el8.5.0+20416+d687fed7
criu-develol 80:3.15-3.module+el8.5.0+20416+d687fed7
criu-libsol 80:3.15-3.module+el8.5.0+20416+d687fed7
crunol 80:1.0-1.module+el8.5.0+20416+d687fed7
fuse-overlayfsol 80:1.7.1-1.module+el8.5.0+20416+d687fed7
libslirpol 80:4.4.0-1.module+el8.5.0+20416+d687fed7
libslirp-develol 80:4.4.0-1.module+el8.5.0+20416+d687fed7
oci-seccomp-bpf-hookol 80:1.2.3-3.module+el8.5.0+20416+d687fed7
podmanol 80:3.3.1-9.0.1.module+el8.5.0+20416+d687fed7
podman-catatonitol 80:3.3.1-9.0.1.module+el8.5.0+20416+d687fed7
podman-dockerol 80:3.3.1-9.0.1.module+el8.5.0+20416+d687fed7
podman-gvproxyol 80:3.3.1-9.0.1.module+el8.5.0+20416+d687fed7
podman-pluginsol 80:3.3.1-9.0.1.module+el8.5.0+20416+d687fed7
podman-remoteol 80:3.3.1-9.0.1.module+el8.5.0+20416+d687fed7
podman-testsol 80:3.3.1-9.0.1.module+el8.5.0+20416+d687fed7
python3-criuol 80:3.15-3.module+el8.5.0+20416+d687fed7
python3-podmanol 80:3.2.0-2.module+el8.5.0+20416+d687fed7
runcol 80:1.0.2-1.module+el8.5.0+20416+d687fed7
skopeool 81:1.4.2-0.1.0.1.module+el8.5.0+20416+d687fed7
skopeo-testsol 81:1.4.2-0.1.0.1.module+el8.5.0+20416+d687fed7
slirp4netnsol 80:1.1.8-1.module+el8.5.0+20416+d687fed7
udicaol 80:0.2.5-2.module+el8.5.0+20416+d687fed7

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2021-20291 podman-remote: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...6.5 0.0159 None reported
Routine CVE-2021-3602 containers-common: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...6.5 0.0032 None reported
Showing 1 to 2 of 2 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.