Linux · Red Hat · Security advisory · November 9, 2021

RHSA-2021:4154: Security update for 32 packages

RHSA-2021:4154, released November 9, 2021, fixes 2 CVEs across 32 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
2
None rated Critical
Exploited
0
None reported
Highest CVSS
6.5
Base score, 0 to 10
Highest EPSS
0.0159
75th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 0 Routine 2

Fixed package versions

ProductReleaseFixed in
buildahRHEL 80:1.22.3-2.module+el8.5.0+12582+56d94c81
buildah-testsRHEL 80:1.22.3-2.module+el8.5.0+12582+56d94c81
cockpit-podmanRHEL 80:33-1.module+el8.5.0+12582+56d94c81
conmonRHEL 82:2.0.29-1.module+el8.5.0+12582+56d94c81
container-selinuxRHEL 82:2.167.0-1.module+el8.5.0+12582+56d94c81
containernetworking-pluginsRHEL 80:1.0.0-1.module+el8.5.0+12582+56d94c81
containers-commonRHEL 82:1-2.module+el8.5.0+12582+56d94c81
critRHEL 80:3.15-3.module+el8.5.0+12582+56d94c81
criuRHEL 80:3.15-3.module+el8.5.0+12582+56d94c81
criu-develRHEL 80:3.15-3.module+el8.5.0+12582+56d94c81
criu-libsRHEL 80:3.15-3.module+el8.5.0+12582+56d94c81
crunRHEL 80:1.0-1.module+el8.5.0+12582+56d94c81
fuse-overlayfsRHEL 80:1.7.1-1.module+el8.5.0+12582+56d94c81
libslirpRHEL 80:4.4.0-1.module+el8.5.0+12582+56d94c81
libslirp-develRHEL 80:4.4.0-1.module+el8.5.0+12582+56d94c81
oci-seccomp-bpf-hookRHEL 80:1.2.3-3.module+el8.5.0+12582+56d94c81
podmanRHEL 80:3.3.1-9.module+el8.5.0+12697+018f24d7
podman-catatonitRHEL 80:3.3.1-9.module+el8.5.0+12697+018f24d7
podman-dockerRHEL 80:3.3.1-9.module+el8.5.0+12697+018f24d7
podman-gvproxyRHEL 80:3.3.1-9.module+el8.5.0+12697+018f24d7
podman-pluginsRHEL 80:3.3.1-9.module+el8.5.0+12697+018f24d7
podman-remoteRHEL 80:3.3.1-9.module+el8.5.0+12697+018f24d7
podman-testsRHEL 80:3.3.1-9.module+el8.5.0+12697+018f24d7
python3-criuRHEL 80:3.15-3.module+el8.5.0+12582+56d94c81
python3-podmanRHEL 80:3.2.0-2.module+el8.5.0+12582+56d94c81
runcRHEL 80:1.0.2-1.module+el8.5.0+12582+56d94c81
skopeoRHEL 81:1.4.2-0.1.module+el8.5.0+12582+56d94c81
skopeo-testsRHEL 81:1.4.2-0.1.module+el8.5.0+12582+56d94c81
slirp4netnsRHEL 80:1.1.8-1.module+el8.5.0+12582+56d94c81
toolboxRHEL 80:0.0.99.3-0.4.module+el8.5.0+12682+a4eeb084
toolbox-testsRHEL 80:0.0.99.3-0.4.module+el8.5.0+12682+a4eeb084
udicaRHEL 80:0.2.5-2.module+el8.5.0+12582+56d94c81

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2021-20291 podman-remote: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...6.5 0.0159 None reported
Routine CVE-2021-3602 containers-common: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...6.5 0.0032 None reported
Showing 1 to 2 of 2 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.