[RHSA-2022:7469-01] Moderate: container-tools:4.0 security and bug fix update

Security announcements for all Red Hat products and services. rhsa-announce at redhat.com
Tue Nov 8 12:59:14 UTC 2022 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

=====================================================================
                   Red Hat Security Advisory

Synopsis:          Moderate: container-tools:4.0 security and bug fix update
Advisory ID:       RHSA-2022:7469-01
Product:           Red Hat Enterprise Linux
Advisory URL:      https://access.redhat.com/errata/RHSA-2022:7469
Issue date:        2022-11-08
CVE Names:         CVE-2022-1708 CVE-2022-27191 CVE-2022-29162 
=====================================================================

1. Summary:

An update for the container-tools:4.0 module is now available for Red Hat
Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64

3. Description:

The container-tools module contains tools for working with containers,
notably podman, buildah, skopeo, and runc.

Security Fix(es):

* cri-o: memory exhaustion on the node when access to the kube api
(CVE-2022-1708)

* golang: crash in a golang.org/x/crypto/ssh server (CVE-2022-27191)

* runc: incorrect handling of inheritable capabilities (CVE-2022-29162)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 8.7 Release Notes linked from the References section.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

5. Bugs fixed (https://bugzilla.redhat.com/):

2064702 - CVE-2022-27191 golang: crash in a golang.org/x/crypto/ssh server
2076617 - Udica crashes when processing inspect file without capabilities
2085361 - CVE-2022-1708 cri-o: memory exhaustion on the node when access to the kube api
2086398 - CVE-2022-29162 runc: incorrect handling of inheritable capabilities

6. Package List:

Red Hat Enterprise Linux AppStream (v. 8):

Source:
buildah-1.24.5-2.module+el8.7.0+16520+2db5507d.src.rpm
cockpit-podman-46-1.module+el8.7.0+16520+2db5507d.src.rpm
conmon-2.1.4-1.module+el8.7.0+16520+2db5507d.src.rpm
container-selinux-2.189.0-1.module+el8.7.0+16520+2db5507d.src.rpm
containernetworking-plugins-1.1.1-2.module+el8.7.0+16520+2db5507d.src.rpm
containers-common-1-35.module+el8.7.0+16520+2db5507d.src.rpm
criu-3.15-3.module+el8.7.0+16520+2db5507d.src.rpm
crun-1.5-1.module+el8.7.0+16520+2db5507d.src.rpm
fuse-overlayfs-1.9-1.module+el8.7.0+16520+2db5507d.src.rpm
libslirp-4.4.0-1.module+el8.7.0+16520+2db5507d.src.rpm
oci-seccomp-bpf-hook-1.2.5-1.module+el8.7.0+16520+2db5507d.src.rpm
podman-4.0.2-8.module+el8.7.0+16520+2db5507d.src.rpm
python-podman-4.0.0-1.module+el8.7.0+16520+2db5507d.src.rpm
runc-1.1.4-1.module+el8.7.0+16520+2db5507d.src.rpm
skopeo-1.6.2-5.module+el8.7.0+16520+2db5507d.src.rpm
slirp4netns-1.1.8-2.module+el8.7.0+16520+2db5507d.src.rpm
toolbox-0.0.99.3-0.5.module+el8.7.0+16520+2db5507d.src.rpm
udica-0.2.6-3.module+el8.7.0+16520+2db5507d.src.rpm

aarch64:
aardvark-dns-1.0.1-35.module+el8.7.0+16520+2db5507d.aarch64.rpm
buildah-1.24.5-2.module+el8.7.0+16520+2db5507d.aarch64.rpm
buildah-debuginfo-1.24.5-2.module+el8.7.0+16520+2db5507d.aarch64.rpm
buildah-debugsource-1.24.5-2.module+el8.7.0+16520+2db5507d.aarch64.rpm
buildah-tests-1.24.5-2.module+el8.7.0+16520+2db5507d.aarch64.rpm
buildah-tests-debuginfo-1.24.5-2.module+el8.7.0+16520+2db5507d.aarch64.rpm
conmon-2.1.4-1.module+el8.7.0+16520+2db5507d.aarch64.rpm
conmon-debuginfo-2.1.4-1.module+el8.7.0+16520+2db5507d.aarch64.rpm
conmon-debugsource-2.1.4-1.module+el8.7.0+16520+2db5507d.aarch64.rpm
containernetworking-plugins-1.1.1-2.module+el8.7.0+16520+2db5507d.aarch64.rpm
containernetworking-plugins-debuginfo-1.1.1-2.module+el8.7.0+16520+2db5507d.aarch64.rpm
containernetworking-plugins-debugsource-1.1.1-2.module+el8.7.0+16520+2db5507d.aarch64.rpm
containers-common-1-35.module+el8.7.0+16520+2db5507d.aarch64.rpm
crit-3.15-3.module+el8.7.0+16520+2db5507d.aarch64.rpm
criu-3.15-3.module+el8.7.0+16520+2db5507d.aarch64.rpm
criu-debuginfo-3.15-3.module+el8.7.0+16520+2db5507d.aarch64.rpm
criu-debugsource-3.15-3.module+el8.7.0+16520+2db5507d.aarch64.rpm
criu-devel-3.15-3.module+el8.7.0+16520+2db5507d.aarch64.rpm
criu-libs-3.15-3.module+el8.7.0+16520+2db5507d.aarch64.rpm
criu-libs-debuginfo-3.15-3.module+el8.7.0+16520+2db5507d.aarch64.rpm
crun-1.5-1.module+el8.7.0+16520+2db5507d.aarch64.rpm
crun-debuginfo-1.5-1.module+el8.7.0+16520+2db5507d.aarch64.rpm
crun-debugsource-1.5-1.module+el8.7.0+16520+2db5507d.aarch64.rpm
fuse-overlayfs-1.9-1.module+el8.7.0+16520+2db5507d.aarch64.rpm
fuse-overlayfs-debuginfo-1.9-1.module+el8.7.0+16520+2db5507d.aarch64.rpm
fuse-overlayfs-debugsource-1.9-1.module+el8.7.0+16520+2db5507d.aarch64.rpm
libslirp-4.4.0-1.module+el8.7.0+16520+2db5507d.aarch64.rpm
libslirp-debuginfo-4.4.0-1.module+el8.7.0+16520+2db5507d.aarch64.rpm
libslirp-debugsource-4.4.0-1.module+el8.7.0+16520+2db5507d.aarch64.rpm
libslirp-devel-4.4.0-1.module+el8.7.0+16520+2db5507d.aarch64.rpm
netavark-1.0.1-35.module+el8.7.0+16520+2db5507d.aarch64.rpm
oci-seccomp-bpf-hook-1.2.5-1.module+el8.7.0+16520+2db5507d.aarch64.rpm
oci-seccomp-bpf-hook-debuginfo-1.2.5-1.module+el8.7.0+16520+2db5507d.aarch64.rpm
oci-seccomp-bpf-hook-debugsource-1.2.5-1.module+el8.7.0+16520+2db5507d.aarch64.rpm
podman-4.0.2-8.module+el8.7.0+16520+2db5507d.aarch64.rpm
podman-catatonit-4.0.2-8.module+el8.7.0+16520+2db5507d.aarch64.rpm
podman-catatonit-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.aarch64.rpm
podman-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.aarch64.rpm
podman-debugsource-4.0.2-8.module+el8.7.0+16520+2db5507d.aarch64.rpm
podman-gvproxy-4.0.2-8.module+el8.7.0+16520+2db5507d.aarch64.rpm
podman-gvproxy-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.aarch64.rpm
podman-plugins-4.0.2-8.module+el8.7.0+16520+2db5507d.aarch64.rpm
podman-plugins-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.aarch64.rpm
podman-remote-4.0.2-8.module+el8.7.0+16520+2db5507d.aarch64.rpm
podman-remote-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.aarch64.rpm
podman-tests-4.0.2-8.module+el8.7.0+16520+2db5507d.aarch64.rpm
python3-criu-3.15-3.module+el8.7.0+16520+2db5507d.aarch64.rpm
runc-1.1.4-1.module+el8.7.0+16520+2db5507d.aarch64.rpm
runc-debuginfo-1.1.4-1.module+el8.7.0+16520+2db5507d.aarch64.rpm
runc-debugsource-1.1.4-1.module+el8.7.0+16520+2db5507d.aarch64.rpm
skopeo-1.6.2-5.module+el8.7.0+16520+2db5507d.aarch64.rpm
skopeo-debuginfo-1.6.2-5.module+el8.7.0+16520+2db5507d.aarch64.rpm
skopeo-debugsource-1.6.2-5.module+el8.7.0+16520+2db5507d.aarch64.rpm
skopeo-tests-1.6.2-5.module+el8.7.0+16520+2db5507d.aarch64.rpm
slirp4netns-1.1.8-2.module+el8.7.0+16520+2db5507d.aarch64.rpm
slirp4netns-debuginfo-1.1.8-2.module+el8.7.0+16520+2db5507d.aarch64.rpm
slirp4netns-debugsource-1.1.8-2.module+el8.7.0+16520+2db5507d.aarch64.rpm
toolbox-0.0.99.3-0.5.module+el8.7.0+16520+2db5507d.aarch64.rpm
toolbox-debuginfo-0.0.99.3-0.5.module+el8.7.0+16520+2db5507d.aarch64.rpm
toolbox-debugsource-0.0.99.3-0.5.module+el8.7.0+16520+2db5507d.aarch64.rpm
toolbox-tests-0.0.99.3-0.5.module+el8.7.0+16520+2db5507d.aarch64.rpm

noarch:
cockpit-podman-46-1.module+el8.7.0+16520+2db5507d.noarch.rpm
container-selinux-2.189.0-1.module+el8.7.0+16520+2db5507d.noarch.rpm
podman-docker-4.0.2-8.module+el8.7.0+16520+2db5507d.noarch.rpm
python3-podman-4.0.0-1.module+el8.7.0+16520+2db5507d.noarch.rpm
udica-0.2.6-3.module+el8.7.0+16520+2db5507d.noarch.rpm

ppc64le:
aardvark-dns-1.0.1-35.module+el8.7.0+16520+2db5507d.ppc64le.rpm
buildah-1.24.5-2.module+el8.7.0+16520+2db5507d.ppc64le.rpm
buildah-debuginfo-1.24.5-2.module+el8.7.0+16520+2db5507d.ppc64le.rpm
buildah-debugsource-1.24.5-2.module+el8.7.0+16520+2db5507d.ppc64le.rpm
buildah-tests-1.24.5-2.module+el8.7.0+16520+2db5507d.ppc64le.rpm
buildah-tests-debuginfo-1.24.5-2.module+el8.7.0+16520+2db5507d.ppc64le.rpm
conmon-2.1.4-1.module+el8.7.0+16520+2db5507d.ppc64le.rpm
conmon-debuginfo-2.1.4-1.module+el8.7.0+16520+2db5507d.ppc64le.rpm
conmon-debugsource-2.1.4-1.module+el8.7.0+16520+2db5507d.ppc64le.rpm
containernetworking-plugins-1.1.1-2.module+el8.7.0+16520+2db5507d.ppc64le.rpm
containernetworking-plugins-debuginfo-1.1.1-2.module+el8.7.0+16520+2db5507d.ppc64le.rpm
containernetworking-plugins-debugsource-1.1.1-2.module+el8.7.0+16520+2db5507d.ppc64le.rpm
containers-common-1-35.module+el8.7.0+16520+2db5507d.ppc64le.rpm
crit-3.15-3.module+el8.7.0+16520+2db5507d.ppc64le.rpm
criu-3.15-3.module+el8.7.0+16520+2db5507d.ppc64le.rpm
criu-debuginfo-3.15-3.module+el8.7.0+16520+2db5507d.ppc64le.rpm
criu-debugsource-3.15-3.module+el8.7.0+16520+2db5507d.ppc64le.rpm
criu-devel-3.15-3.module+el8.7.0+16520+2db5507d.ppc64le.rpm
criu-libs-3.15-3.module+el8.7.0+16520+2db5507d.ppc64le.rpm
criu-libs-debuginfo-3.15-3.module+el8.7.0+16520+2db5507d.ppc64le.rpm
crun-1.5-1.module+el8.7.0+16520+2db5507d.ppc64le.rpm
crun-debuginfo-1.5-1.module+el8.7.0+16520+2db5507d.ppc64le.rpm
crun-debugsource-1.5-1.module+el8.7.0+16520+2db5507d.ppc64le.rpm
fuse-overlayfs-1.9-1.module+el8.7.0+16520+2db5507d.ppc64le.rpm
fuse-overlayfs-debuginfo-1.9-1.module+el8.7.0+16520+2db5507d.ppc64le.rpm
fuse-overlayfs-debugsource-1.9-1.module+el8.7.0+16520+2db5507d.ppc64le.rpm
libslirp-4.4.0-1.module+el8.7.0+16520+2db5507d.ppc64le.rpm
libslirp-debuginfo-4.4.0-1.module+el8.7.0+16520+2db5507d.ppc64le.rpm
libslirp-debugsource-4.4.0-1.module+el8.7.0+16520+2db5507d.ppc64le.rpm
libslirp-devel-4.4.0-1.module+el8.7.0+16520+2db5507d.ppc64le.rpm
netavark-1.0.1-35.module+el8.7.0+16520+2db5507d.ppc64le.rpm
oci-seccomp-bpf-hook-1.2.5-1.module+el8.7.0+16520+2db5507d.ppc64le.rpm
oci-seccomp-bpf-hook-debuginfo-1.2.5-1.module+el8.7.0+16520+2db5507d.ppc64le.rpm
oci-seccomp-bpf-hook-debugsource-1.2.5-1.module+el8.7.0+16520+2db5507d.ppc64le.rpm
podman-4.0.2-8.module+el8.7.0+16520+2db5507d.ppc64le.rpm
podman-catatonit-4.0.2-8.module+el8.7.0+16520+2db5507d.ppc64le.rpm
podman-catatonit-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.ppc64le.rpm
podman-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.ppc64le.rpm
podman-debugsource-4.0.2-8.module+el8.7.0+16520+2db5507d.ppc64le.rpm
podman-gvproxy-4.0.2-8.module+el8.7.0+16520+2db5507d.ppc64le.rpm
podman-gvproxy-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.ppc64le.rpm
podman-plugins-4.0.2-8.module+el8.7.0+16520+2db5507d.ppc64le.rpm
podman-plugins-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.ppc64le.rpm
podman-remote-4.0.2-8.module+el8.7.0+16520+2db5507d.ppc64le.rpm
podman-remote-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.ppc64le.rpm
podman-tests-4.0.2-8.module+el8.7.0+16520+2db5507d.ppc64le.rpm
python3-criu-3.15-3.module+el8.7.0+16520+2db5507d.ppc64le.rpm
runc-1.1.4-1.module+el8.7.0+16520+2db5507d.ppc64le.rpm
runc-debuginfo-1.1.4-1.module+el8.7.0+16520+2db5507d.ppc64le.rpm
runc-debugsource-1.1.4-1.module+el8.7.0+16520+2db5507d.ppc64le.rpm
skopeo-1.6.2-5.module+el8.7.0+16520+2db5507d.ppc64le.rpm
skopeo-debuginfo-1.6.2-5.module+el8.7.0+16520+2db5507d.ppc64le.rpm
skopeo-debugsource-1.6.2-5.module+el8.7.0+16520+2db5507d.ppc64le.rpm
skopeo-tests-1.6.2-5.module+el8.7.0+16520+2db5507d.ppc64le.rpm
slirp4netns-1.1.8-2.module+el8.7.0+16520+2db5507d.ppc64le.rpm
slirp4netns-debuginfo-1.1.8-2.module+el8.7.0+16520+2db5507d.ppc64le.rpm
slirp4netns-debugsource-1.1.8-2.module+el8.7.0+16520+2db5507d.ppc64le.rpm
toolbox-0.0.99.3-0.5.module+el8.7.0+16520+2db5507d.ppc64le.rpm
toolbox-debuginfo-0.0.99.3-0.5.module+el8.7.0+16520+2db5507d.ppc64le.rpm
toolbox-debugsource-0.0.99.3-0.5.module+el8.7.0+16520+2db5507d.ppc64le.rpm
toolbox-tests-0.0.99.3-0.5.module+el8.7.0+16520+2db5507d.ppc64le.rpm

s390x:
aardvark-dns-1.0.1-35.module+el8.7.0+16520+2db5507d.s390x.rpm
buildah-1.24.5-2.module+el8.7.0+16520+2db5507d.s390x.rpm
buildah-debuginfo-1.24.5-2.module+el8.7.0+16520+2db5507d.s390x.rpm
buildah-debugsource-1.24.5-2.module+el8.7.0+16520+2db5507d.s390x.rpm
buildah-tests-1.24.5-2.module+el8.7.0+16520+2db5507d.s390x.rpm
buildah-tests-debuginfo-1.24.5-2.module+el8.7.0+16520+2db5507d.s390x.rpm
conmon-2.1.4-1.module+el8.7.0+16520+2db5507d.s390x.rpm
conmon-debuginfo-2.1.4-1.module+el8.7.0+16520+2db5507d.s390x.rpm
conmon-debugsource-2.1.4-1.module+el8.7.0+16520+2db5507d.s390x.rpm
containernetworking-plugins-1.1.1-2.module+el8.7.0+16520+2db5507d.s390x.rpm
containernetworking-plugins-debuginfo-1.1.1-2.module+el8.7.0+16520+2db5507d.s390x.rpm
containernetworking-plugins-debugsource-1.1.1-2.module+el8.7.0+16520+2db5507d.s390x.rpm
containers-common-1-35.module+el8.7.0+16520+2db5507d.s390x.rpm
crit-3.15-3.module+el8.7.0+16520+2db5507d.s390x.rpm
criu-3.15-3.module+el8.7.0+16520+2db5507d.s390x.rpm
criu-debuginfo-3.15-3.module+el8.7.0+16520+2db5507d.s390x.rpm
criu-debugsource-3.15-3.module+el8.7.0+16520+2db5507d.s390x.rpm
criu-devel-3.15-3.module+el8.7.0+16520+2db5507d.s390x.rpm
criu-libs-3.15-3.module+el8.7.0+16520+2db5507d.s390x.rpm
criu-libs-debuginfo-3.15-3.module+el8.7.0+16520+2db5507d.s390x.rpm
crun-1.5-1.module+el8.7.0+16520+2db5507d.s390x.rpm
crun-debuginfo-1.5-1.module+el8.7.0+16520+2db5507d.s390x.rpm
crun-debugsource-1.5-1.module+el8.7.0+16520+2db5507d.s390x.rpm
fuse-overlayfs-1.9-1.module+el8.7.0+16520+2db5507d.s390x.rpm
fuse-overlayfs-debuginfo-1.9-1.module+el8.7.0+16520+2db5507d.s390x.rpm
fuse-overlayfs-debugsource-1.9-1.module+el8.7.0+16520+2db5507d.s390x.rpm
libslirp-4.4.0-1.module+el8.7.0+16520+2db5507d.s390x.rpm
libslirp-debuginfo-4.4.0-1.module+el8.7.0+16520+2db5507d.s390x.rpm
libslirp-debugsource-4.4.0-1.module+el8.7.0+16520+2db5507d.s390x.rpm
libslirp-devel-4.4.0-1.module+el8.7.0+16520+2db5507d.s390x.rpm
netavark-1.0.1-35.module+el8.7.0+16520+2db5507d.s390x.rpm
oci-seccomp-bpf-hook-1.2.5-1.module+el8.7.0+16520+2db5507d.s390x.rpm
oci-seccomp-bpf-hook-debuginfo-1.2.5-1.module+el8.7.0+16520+2db5507d.s390x.rpm
oci-seccomp-bpf-hook-debugsource-1.2.5-1.module+el8.7.0+16520+2db5507d.s390x.rpm
podman-4.0.2-8.module+el8.7.0+16520+2db5507d.s390x.rpm
podman-catatonit-4.0.2-8.module+el8.7.0+16520+2db5507d.s390x.rpm
podman-catatonit-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.s390x.rpm
podman-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.s390x.rpm
podman-debugsource-4.0.2-8.module+el8.7.0+16520+2db5507d.s390x.rpm
podman-gvproxy-4.0.2-8.module+el8.7.0+16520+2db5507d.s390x.rpm
podman-gvproxy-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.s390x.rpm
podman-plugins-4.0.2-8.module+el8.7.0+16520+2db5507d.s390x.rpm
podman-plugins-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.s390x.rpm
podman-remote-4.0.2-8.module+el8.7.0+16520+2db5507d.s390x.rpm
podman-remote-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.s390x.rpm
podman-tests-4.0.2-8.module+el8.7.0+16520+2db5507d.s390x.rpm
python3-criu-3.15-3.module+el8.7.0+16520+2db5507d.s390x.rpm
runc-1.1.4-1.module+el8.7.0+16520+2db5507d.s390x.rpm
runc-debuginfo-1.1.4-1.module+el8.7.0+16520+2db5507d.s390x.rpm
runc-debugsource-1.1.4-1.module+el8.7.0+16520+2db5507d.s390x.rpm
skopeo-1.6.2-5.module+el8.7.0+16520+2db5507d.s390x.rpm
skopeo-debuginfo-1.6.2-5.module+el8.7.0+16520+2db5507d.s390x.rpm
skopeo-debugsource-1.6.2-5.module+el8.7.0+16520+2db5507d.s390x.rpm
skopeo-tests-1.6.2-5.module+el8.7.0+16520+2db5507d.s390x.rpm
slirp4netns-1.1.8-2.module+el8.7.0+16520+2db5507d.s390x.rpm
slirp4netns-debuginfo-1.1.8-2.module+el8.7.0+16520+2db5507d.s390x.rpm
slirp4netns-debugsource-1.1.8-2.module+el8.7.0+16520+2db5507d.s390x.rpm
toolbox-0.0.99.3-0.5.module+el8.7.0+16520+2db5507d.s390x.rpm
toolbox-debuginfo-0.0.99.3-0.5.module+el8.7.0+16520+2db5507d.s390x.rpm
toolbox-debugsource-0.0.99.3-0.5.module+el8.7.0+16520+2db5507d.s390x.rpm
toolbox-tests-0.0.99.3-0.5.module+el8.7.0+16520+2db5507d.s390x.rpm

x86_64:
aardvark-dns-1.0.1-35.module+el8.7.0+16520+2db5507d.x86_64.rpm
buildah-1.24.5-2.module+el8.7.0+16520+2db5507d.x86_64.rpm
buildah-debuginfo-1.24.5-2.module+el8.7.0+16520+2db5507d.x86_64.rpm
buildah-debugsource-1.24.5-2.module+el8.7.0+16520+2db5507d.x86_64.rpm
buildah-tests-1.24.5-2.module+el8.7.0+16520+2db5507d.x86_64.rpm
buildah-tests-debuginfo-1.24.5-2.module+el8.7.0+16520+2db5507d.x86_64.rpm
conmon-2.1.4-1.module+el8.7.0+16520+2db5507d.x86_64.rpm
conmon-debuginfo-2.1.4-1.module+el8.7.0+16520+2db5507d.x86_64.rpm
conmon-debugsource-2.1.4-1.module+el8.7.0+16520+2db5507d.x86_64.rpm
containernetworking-plugins-1.1.1-2.module+el8.7.0+16520+2db5507d.x86_64.rpm
containernetworking-plugins-debuginfo-1.1.1-2.module+el8.7.0+16520+2db5507d.x86_64.rpm
containernetworking-plugins-debugsource-1.1.1-2.module+el8.7.0+16520+2db5507d.x86_64.rpm
containers-common-1-35.module+el8.7.0+16520+2db5507d.x86_64.rpm
crit-3.15-3.module+el8.7.0+16520+2db5507d.x86_64.rpm
criu-3.15-3.module+el8.7.0+16520+2db5507d.x86_64.rpm
criu-debuginfo-3.15-3.module+el8.7.0+16520+2db5507d.x86_64.rpm
criu-debugsource-3.15-3.module+el8.7.0+16520+2db5507d.x86_64.rpm
criu-devel-3.15-3.module+el8.7.0+16520+2db5507d.x86_64.rpm
criu-libs-3.15-3.module+el8.7.0+16520+2db5507d.x86_64.rpm
criu-libs-debuginfo-3.15-3.module+el8.7.0+16520+2db5507d.x86_64.rpm
crun-1.5-1.module+el8.7.0+16520+2db5507d.x86_64.rpm
crun-debuginfo-1.5-1.module+el8.7.0+16520+2db5507d.x86_64.rpm
crun-debugsource-1.5-1.module+el8.7.0+16520+2db5507d.x86_64.rpm
fuse-overlayfs-1.9-1.module+el8.7.0+16520+2db5507d.x86_64.rpm
fuse-overlayfs-debuginfo-1.9-1.module+el8.7.0+16520+2db5507d.x86_64.rpm
fuse-overlayfs-debugsource-1.9-1.module+el8.7.0+16520+2db5507d.x86_64.rpm
libslirp-4.4.0-1.module+el8.7.0+16520+2db5507d.x86_64.rpm
libslirp-debuginfo-4.4.0-1.module+el8.7.0+16520+2db5507d.x86_64.rpm
libslirp-debugsource-4.4.0-1.module+el8.7.0+16520+2db5507d.x86_64.rpm
libslirp-devel-4.4.0-1.module+el8.7.0+16520+2db5507d.x86_64.rpm
netavark-1.0.1-35.module+el8.7.0+16520+2db5507d.x86_64.rpm
oci-seccomp-bpf-hook-1.2.5-1.module+el8.7.0+16520+2db5507d.x86_64.rpm
oci-seccomp-bpf-hook-debuginfo-1.2.5-1.module+el8.7.0+16520+2db5507d.x86_64.rpm
oci-seccomp-bpf-hook-debugsource-1.2.5-1.module+el8.7.0+16520+2db5507d.x86_64.rpm
podman-4.0.2-8.module+el8.7.0+16520+2db5507d.x86_64.rpm
podman-catatonit-4.0.2-8.module+el8.7.0+16520+2db5507d.x86_64.rpm
podman-catatonit-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.x86_64.rpm
podman-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.x86_64.rpm
podman-debugsource-4.0.2-8.module+el8.7.0+16520+2db5507d.x86_64.rpm
podman-gvproxy-4.0.2-8.module+el8.7.0+16520+2db5507d.x86_64.rpm
podman-gvproxy-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.x86_64.rpm
podman-plugins-4.0.2-8.module+el8.7.0+16520+2db5507d.x86_64.rpm
podman-plugins-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.x86_64.rpm
podman-remote-4.0.2-8.module+el8.7.0+16520+2db5507d.x86_64.rpm
podman-remote-debuginfo-4.0.2-8.module+el8.7.0+16520+2db5507d.x86_64.rpm
podman-tests-4.0.2-8.module+el8.7.0+16520+2db5507d.x86_64.rpm
python3-criu-3.15-3.module+el8.7.0+16520+2db5507d.x86_64.rpm
runc-1.1.4-1.module+el8.7.0+16520+2db5507d.x86_64.rpm
runc-debuginfo-1.1.4-1.module+el8.7.0+16520+2db5507d.x86_64.rpm
runc-debugsource-1.1.4-1.module+el8.7.0+16520+2db5507d.x86_64.rpm
skopeo-1.6.2-5.module+el8.7.0+16520+2db5507d.x86_64.rpm
skopeo-debuginfo-1.6.2-5.module+el8.7.0+16520+2db5507d.x86_64.rpm
skopeo-debugsource-1.6.2-5.module+el8.7.0+16520+2db5507d.x86_64.rpm
skopeo-tests-1.6.2-5.module+el8.7.0+16520+2db5507d.x86_64.rpm
slirp4netns-1.1.8-2.module+el8.7.0+16520+2db5507d.x86_64.rpm
slirp4netns-debuginfo-1.1.8-2.module+el8.7.0+16520+2db5507d.x86_64.rpm
slirp4netns-debugsource-1.1.8-2.module+el8.7.0+16520+2db5507d.x86_64.rpm
toolbox-0.0.99.3-0.5.module+el8.7.0+16520+2db5507d.x86_64.rpm
toolbox-debuginfo-0.0.99.3-0.5.module+el8.7.0+16520+2db5507d.x86_64.rpm
toolbox-debugsource-0.0.99.3-0.5.module+el8.7.0+16520+2db5507d.x86_64.rpm
toolbox-tests-0.0.99.3-0.5.module+el8.7.0+16520+2db5507d.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2022-1708
https://access.redhat.com/security/cve/CVE-2022-27191
https://access.redhat.com/security/cve/CVE-2022-29162
https://access.redhat.com/security/updates/classification/#moderate
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index

8. Contact:

The Red Hat security contact is <secalert at redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2022 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=+FVv
-----END PGP SIGNATURE-----

More information about the RHSA-announce mailing list