RHSA-2023:2758: Moderate: container-tools:rhel8 security, bug fix, and enhancement update

Published May 16, 2023
·
Updated

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.Security Fix(es): golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705) golang: go/parser: stack exhaustion in all Parse functions (CVE-2022-1962) golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664) golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131) golang: io/fs: stack exhaustion in Glob (CVE-2022-30630) golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631) golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632) golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633) golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635) golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148) golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) podman: symlink exchange attack in podman export volume (CVE-2023-0778) golang: crypto/tls: session tickets lack random ticketageadd (CVE-2022-30629) golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section.

Affected Software

245 affected componentsFixes available
redhat/aardvark-dns<1.5.0-2.module+el8.8.0+18060+3f21f2cc
1.5.0-2.module+el8.8.0+18060+3f21f2cc
redhat/buildah<1.29.1-1.module+el8.8.0+18195+471da4bb
1.29.1-1.module+el8.8.0+18195+471da4bb
redhat/cockpit-podman<63.1-1.module+el8.8.0+18286+cd236dce
63.1-1.module+el8.8.0+18286+cd236dce
redhat/conmon<2.1.6-1.module+el8.8.0+18098+9b44df5f
2.1.6-1.module+el8.8.0+18098+9b44df5f
redhat/container-selinux<2.205.0-2.module+el8.8.0+18438+15d3aa65
2.205.0-2.module+el8.8.0+18438+15d3aa65
redhat/containernetworking-plugins<1.2.0-1.module+el8.8.0+18060+3f21f2cc
1.2.0-1.module+el8.8.0+18060+3f21f2cc
redhat/containers-common<1-63.module+el8.8.0+18438+15d3aa65
1-63.module+el8.8.0+18438+15d3aa65
redhat/criu<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/crun<1.8.1-2.module+el8.8.0+18418+f0e540fe
1.8.1-2.module+el8.8.0+18418+f0e540fe
redhat/fuse-overlayfs<1.10-1.module+el8.8.0+18060+3f21f2cc
1.10-1.module+el8.8.0+18060+3f21f2cc
redhat/libslirp<4.4.0-1.module+el8.8.0+18060+3f21f2cc
4.4.0-1.module+el8.8.0+18060+3f21f2cc
redhat/netavark<1.5.0-4.module+el8.8.0+18060+3f21f2cc
1.5.0-4.module+el8.8.0+18060+3f21f2cc
redhat/oci-seccomp-bpf-hook<1.2.8-1.module+el8.8.0+18060+3f21f2cc
1.2.8-1.module+el8.8.0+18060+3f21f2cc
redhat/podman<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/python-podman<4.4.1-1.module+el8.8.0+18275+3a56cc62
4.4.1-1.module+el8.8.0+18275+3a56cc62
redhat/runc<1.1.4-1.module+el8.8.0+18060+3f21f2cc
1.1.4-1.module+el8.8.0+18060+3f21f2cc
redhat/skopeo<1.11.2-0.2.module+el8.8.0+18251+ad5b274c
1.11.2-0.2.module+el8.8.0+18251+ad5b274c
redhat/slirp4netns<1.2.0-2.module+el8.8.0+18060+3f21f2cc
1.2.0-2.module+el8.8.0+18060+3f21f2cc
redhat/toolbox<0.0.99.3-7.module+el8.8.0+18119+e3deee03
0.0.99.3-7.module+el8.8.0+18119+e3deee03
redhat/udica<0.2.6-20.module+el8.8.0+18060+3f21f2cc
0.2.6-20.module+el8.8.0+18060+3f21f2cc
redhat/cockpit-podman<63.1-1.module+el8.8.0+18286+cd236dce
63.1-1.module+el8.8.0+18286+cd236dce
redhat/container-selinux<2.205.0-2.module+el8.8.0+18438+15d3aa65
2.205.0-2.module+el8.8.0+18438+15d3aa65
redhat/podman-docker<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/python3-podman<4.4.1-1.module+el8.8.0+18275+3a56cc62
4.4.1-1.module+el8.8.0+18275+3a56cc62
redhat/udica<0.2.6-20.module+el8.8.0+18060+3f21f2cc
0.2.6-20.module+el8.8.0+18060+3f21f2cc
redhat/aardvark-dns<1.5.0-2.module+el8.8.0+18060+3f21f2cc
1.5.0-2.module+el8.8.0+18060+3f21f2cc
redhat/buildah<1.29.1-1.module+el8.8.0+18195+471da4bb
1.29.1-1.module+el8.8.0+18195+471da4bb
redhat/buildah-debuginfo<1.29.1-1.module+el8.8.0+18195+471da4bb
1.29.1-1.module+el8.8.0+18195+471da4bb
redhat/buildah-debugsource<1.29.1-1.module+el8.8.0+18195+471da4bb
1.29.1-1.module+el8.8.0+18195+471da4bb
redhat/buildah-tests<1.29.1-1.module+el8.8.0+18195+471da4bb
1.29.1-1.module+el8.8.0+18195+471da4bb
redhat/buildah-tests-debuginfo<1.29.1-1.module+el8.8.0+18195+471da4bb
1.29.1-1.module+el8.8.0+18195+471da4bb
redhat/conmon<2.1.6-1.module+el8.8.0+18098+9b44df5f
2.1.6-1.module+el8.8.0+18098+9b44df5f
redhat/conmon-debuginfo<2.1.6-1.module+el8.8.0+18098+9b44df5f
2.1.6-1.module+el8.8.0+18098+9b44df5f
redhat/conmon-debugsource<2.1.6-1.module+el8.8.0+18098+9b44df5f
2.1.6-1.module+el8.8.0+18098+9b44df5f
redhat/containernetworking-plugins<1.2.0-1.module+el8.8.0+18060+3f21f2cc
1.2.0-1.module+el8.8.0+18060+3f21f2cc
redhat/containernetworking-plugins-debuginfo<1.2.0-1.module+el8.8.0+18060+3f21f2cc
1.2.0-1.module+el8.8.0+18060+3f21f2cc
redhat/containernetworking-plugins-debugsource<1.2.0-1.module+el8.8.0+18060+3f21f2cc
1.2.0-1.module+el8.8.0+18060+3f21f2cc
redhat/containers-common<1-63.module+el8.8.0+18438+15d3aa65
1-63.module+el8.8.0+18438+15d3aa65
redhat/crit<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/criu<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/criu-debuginfo<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/criu-debugsource<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/criu-devel<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/criu-libs<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/criu-libs-debuginfo<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/crun<1.8.1-2.module+el8.8.0+18418+f0e540fe
1.8.1-2.module+el8.8.0+18418+f0e540fe
redhat/crun-debuginfo<1.8.1-2.module+el8.8.0+18418+f0e540fe
1.8.1-2.module+el8.8.0+18418+f0e540fe
redhat/crun-debugsource<1.8.1-2.module+el8.8.0+18418+f0e540fe
1.8.1-2.module+el8.8.0+18418+f0e540fe
redhat/fuse-overlayfs<1.10-1.module+el8.8.0+18060+3f21f2cc
1.10-1.module+el8.8.0+18060+3f21f2cc
redhat/fuse-overlayfs-debuginfo<1.10-1.module+el8.8.0+18060+3f21f2cc
1.10-1.module+el8.8.0+18060+3f21f2cc
redhat/fuse-overlayfs-debugsource<1.10-1.module+el8.8.0+18060+3f21f2cc
1.10-1.module+el8.8.0+18060+3f21f2cc
redhat/libslirp<4.4.0-1.module+el8.8.0+18060+3f21f2cc
4.4.0-1.module+el8.8.0+18060+3f21f2cc
redhat/libslirp-debuginfo<4.4.0-1.module+el8.8.0+18060+3f21f2cc
4.4.0-1.module+el8.8.0+18060+3f21f2cc
redhat/libslirp-debugsource<4.4.0-1.module+el8.8.0+18060+3f21f2cc
4.4.0-1.module+el8.8.0+18060+3f21f2cc
redhat/libslirp-devel<4.4.0-1.module+el8.8.0+18060+3f21f2cc
4.4.0-1.module+el8.8.0+18060+3f21f2cc
redhat/netavark<1.5.0-4.module+el8.8.0+18060+3f21f2cc
1.5.0-4.module+el8.8.0+18060+3f21f2cc
redhat/oci-seccomp-bpf-hook<1.2.8-1.module+el8.8.0+18060+3f21f2cc
1.2.8-1.module+el8.8.0+18060+3f21f2cc
redhat/oci-seccomp-bpf-hook-debuginfo<1.2.8-1.module+el8.8.0+18060+3f21f2cc
1.2.8-1.module+el8.8.0+18060+3f21f2cc
redhat/oci-seccomp-bpf-hook-debugsource<1.2.8-1.module+el8.8.0+18060+3f21f2cc
1.2.8-1.module+el8.8.0+18060+3f21f2cc
redhat/podman<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-catatonit<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-catatonit-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-debugsource<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-gvproxy<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-gvproxy-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-plugins<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-plugins-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-remote<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-remote-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-tests<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/python3-criu<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/runc<1.1.4-1.module+el8.8.0+18060+3f21f2cc
1.1.4-1.module+el8.8.0+18060+3f21f2cc
redhat/runc-debuginfo<1.1.4-1.module+el8.8.0+18060+3f21f2cc
1.1.4-1.module+el8.8.0+18060+3f21f2cc
redhat/runc-debugsource<1.1.4-1.module+el8.8.0+18060+3f21f2cc
1.1.4-1.module+el8.8.0+18060+3f21f2cc
redhat/skopeo<1.11.2-0.2.module+el8.8.0+18251+ad5b274c
1.11.2-0.2.module+el8.8.0+18251+ad5b274c
redhat/skopeo-tests<1.11.2-0.2.module+el8.8.0+18251+ad5b274c
1.11.2-0.2.module+el8.8.0+18251+ad5b274c
redhat/slirp4netns<1.2.0-2.module+el8.8.0+18060+3f21f2cc
1.2.0-2.module+el8.8.0+18060+3f21f2cc
redhat/slirp4netns-debuginfo<1.2.0-2.module+el8.8.0+18060+3f21f2cc
1.2.0-2.module+el8.8.0+18060+3f21f2cc
redhat/slirp4netns-debugsource<1.2.0-2.module+el8.8.0+18060+3f21f2cc
1.2.0-2.module+el8.8.0+18060+3f21f2cc
redhat/toolbox<0.0.99.3-7.module+el8.8.0+18119+e3deee03
0.0.99.3-7.module+el8.8.0+18119+e3deee03
redhat/toolbox-debuginfo<0.0.99.3-7.module+el8.8.0+18119+e3deee03
0.0.99.3-7.module+el8.8.0+18119+e3deee03
redhat/toolbox-debugsource<0.0.99.3-7.module+el8.8.0+18119+e3deee03
0.0.99.3-7.module+el8.8.0+18119+e3deee03
redhat/toolbox-tests<0.0.99.3-7.module+el8.8.0+18119+e3deee03
0.0.99.3-7.module+el8.8.0+18119+e3deee03
redhat/buildah-debuginfo<1.29.1-1.module+el8.8.0+18195+471da4bb
1.29.1-1.module+el8.8.0+18195+471da4bb
redhat/buildah-debugsource<1.29.1-1.module+el8.8.0+18195+471da4bb
1.29.1-1.module+el8.8.0+18195+471da4bb
redhat/buildah-tests<1.29.1-1.module+el8.8.0+18195+471da4bb
1.29.1-1.module+el8.8.0+18195+471da4bb
redhat/buildah-tests-debuginfo<1.29.1-1.module+el8.8.0+18195+471da4bb
1.29.1-1.module+el8.8.0+18195+471da4bb
redhat/conmon-debuginfo<2.1.6-1.module+el8.8.0+18098+9b44df5f
2.1.6-1.module+el8.8.0+18098+9b44df5f
redhat/conmon-debugsource<2.1.6-1.module+el8.8.0+18098+9b44df5f
2.1.6-1.module+el8.8.0+18098+9b44df5f
redhat/containernetworking-plugins-debuginfo<1.2.0-1.module+el8.8.0+18060+3f21f2cc
1.2.0-1.module+el8.8.0+18060+3f21f2cc
redhat/containernetworking-plugins-debugsource<1.2.0-1.module+el8.8.0+18060+3f21f2cc
1.2.0-1.module+el8.8.0+18060+3f21f2cc
redhat/crit<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/criu-debuginfo<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/criu-debugsource<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/criu-devel<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/criu-libs<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/criu-libs-debuginfo<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/crun-debuginfo<1.8.1-2.module+el8.8.0+18418+f0e540fe
1.8.1-2.module+el8.8.0+18418+f0e540fe
redhat/crun-debugsource<1.8.1-2.module+el8.8.0+18418+f0e540fe
1.8.1-2.module+el8.8.0+18418+f0e540fe
redhat/fuse-overlayfs-debuginfo<1.10-1.module+el8.8.0+18060+3f21f2cc
1.10-1.module+el8.8.0+18060+3f21f2cc
redhat/fuse-overlayfs-debugsource<1.10-1.module+el8.8.0+18060+3f21f2cc
1.10-1.module+el8.8.0+18060+3f21f2cc
redhat/libslirp-debuginfo<4.4.0-1.module+el8.8.0+18060+3f21f2cc
4.4.0-1.module+el8.8.0+18060+3f21f2cc
redhat/libslirp-debugsource<4.4.0-1.module+el8.8.0+18060+3f21f2cc
4.4.0-1.module+el8.8.0+18060+3f21f2cc
redhat/libslirp-devel<4.4.0-1.module+el8.8.0+18060+3f21f2cc
4.4.0-1.module+el8.8.0+18060+3f21f2cc
redhat/oci-seccomp-bpf-hook-debuginfo<1.2.8-1.module+el8.8.0+18060+3f21f2cc
1.2.8-1.module+el8.8.0+18060+3f21f2cc
redhat/oci-seccomp-bpf-hook-debugsource<1.2.8-1.module+el8.8.0+18060+3f21f2cc
1.2.8-1.module+el8.8.0+18060+3f21f2cc
redhat/podman-catatonit<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-catatonit-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-debugsource<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-gvproxy<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-gvproxy-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-plugins<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-plugins-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-remote<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-remote-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-tests<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/python3-criu<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/runc-debuginfo<1.1.4-1.module+el8.8.0+18060+3f21f2cc
1.1.4-1.module+el8.8.0+18060+3f21f2cc
redhat/runc-debugsource<1.1.4-1.module+el8.8.0+18060+3f21f2cc
1.1.4-1.module+el8.8.0+18060+3f21f2cc
redhat/skopeo-tests<1.11.2-0.2.module+el8.8.0+18251+ad5b274c
1.11.2-0.2.module+el8.8.0+18251+ad5b274c
redhat/slirp4netns-debuginfo<1.2.0-2.module+el8.8.0+18060+3f21f2cc
1.2.0-2.module+el8.8.0+18060+3f21f2cc
redhat/slirp4netns-debugsource<1.2.0-2.module+el8.8.0+18060+3f21f2cc
1.2.0-2.module+el8.8.0+18060+3f21f2cc
redhat/toolbox-debuginfo<0.0.99.3-7.module+el8.8.0+18119+e3deee03
0.0.99.3-7.module+el8.8.0+18119+e3deee03
redhat/toolbox-debugsource<0.0.99.3-7.module+el8.8.0+18119+e3deee03
0.0.99.3-7.module+el8.8.0+18119+e3deee03
redhat/toolbox-tests<0.0.99.3-7.module+el8.8.0+18119+e3deee03
0.0.99.3-7.module+el8.8.0+18119+e3deee03
redhat/aardvark-dns<1.5.0-2.module+el8.8.0+18060+3f21f2cc
1.5.0-2.module+el8.8.0+18060+3f21f2cc
redhat/buildah<1.29.1-1.module+el8.8.0+18195+471da4bb
1.29.1-1.module+el8.8.0+18195+471da4bb
redhat/buildah-debuginfo<1.29.1-1.module+el8.8.0+18195+471da4bb
1.29.1-1.module+el8.8.0+18195+471da4bb
redhat/buildah-debugsource<1.29.1-1.module+el8.8.0+18195+471da4bb
1.29.1-1.module+el8.8.0+18195+471da4bb
redhat/buildah-tests<1.29.1-1.module+el8.8.0+18195+471da4bb
1.29.1-1.module+el8.8.0+18195+471da4bb
redhat/buildah-tests-debuginfo<1.29.1-1.module+el8.8.0+18195+471da4bb
1.29.1-1.module+el8.8.0+18195+471da4bb
redhat/conmon<2.1.6-1.module+el8.8.0+18098+9b44df5f
2.1.6-1.module+el8.8.0+18098+9b44df5f
redhat/conmon-debuginfo<2.1.6-1.module+el8.8.0+18098+9b44df5f
2.1.6-1.module+el8.8.0+18098+9b44df5f
redhat/conmon-debugsource<2.1.6-1.module+el8.8.0+18098+9b44df5f
2.1.6-1.module+el8.8.0+18098+9b44df5f
redhat/containernetworking-plugins<1.2.0-1.module+el8.8.0+18060+3f21f2cc
1.2.0-1.module+el8.8.0+18060+3f21f2cc
redhat/containernetworking-plugins-debuginfo<1.2.0-1.module+el8.8.0+18060+3f21f2cc
1.2.0-1.module+el8.8.0+18060+3f21f2cc
redhat/containernetworking-plugins-debugsource<1.2.0-1.module+el8.8.0+18060+3f21f2cc
1.2.0-1.module+el8.8.0+18060+3f21f2cc
redhat/containers-common<1-63.module+el8.8.0+18438+15d3aa65
1-63.module+el8.8.0+18438+15d3aa65
redhat/crit<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/criu<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/criu-debuginfo<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/criu-debugsource<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/criu-devel<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/criu-libs<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/criu-libs-debuginfo<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/crun<1.8.1-2.module+el8.8.0+18418+f0e540fe
1.8.1-2.module+el8.8.0+18418+f0e540fe
redhat/crun-debuginfo<1.8.1-2.module+el8.8.0+18418+f0e540fe
1.8.1-2.module+el8.8.0+18418+f0e540fe
redhat/crun-debugsource<1.8.1-2.module+el8.8.0+18418+f0e540fe
1.8.1-2.module+el8.8.0+18418+f0e540fe
redhat/fuse-overlayfs<1.10-1.module+el8.8.0+18060+3f21f2cc
1.10-1.module+el8.8.0+18060+3f21f2cc
redhat/fuse-overlayfs-debuginfo<1.10-1.module+el8.8.0+18060+3f21f2cc
1.10-1.module+el8.8.0+18060+3f21f2cc
redhat/fuse-overlayfs-debugsource<1.10-1.module+el8.8.0+18060+3f21f2cc
1.10-1.module+el8.8.0+18060+3f21f2cc
redhat/libslirp<4.4.0-1.module+el8.8.0+18060+3f21f2cc
4.4.0-1.module+el8.8.0+18060+3f21f2cc
redhat/libslirp-debuginfo<4.4.0-1.module+el8.8.0+18060+3f21f2cc
4.4.0-1.module+el8.8.0+18060+3f21f2cc
redhat/libslirp-debugsource<4.4.0-1.module+el8.8.0+18060+3f21f2cc
4.4.0-1.module+el8.8.0+18060+3f21f2cc
redhat/libslirp-devel<4.4.0-1.module+el8.8.0+18060+3f21f2cc
4.4.0-1.module+el8.8.0+18060+3f21f2cc
redhat/netavark<1.5.0-4.module+el8.8.0+18060+3f21f2cc
1.5.0-4.module+el8.8.0+18060+3f21f2cc
redhat/oci-seccomp-bpf-hook<1.2.8-1.module+el8.8.0+18060+3f21f2cc
1.2.8-1.module+el8.8.0+18060+3f21f2cc
redhat/oci-seccomp-bpf-hook-debuginfo<1.2.8-1.module+el8.8.0+18060+3f21f2cc
1.2.8-1.module+el8.8.0+18060+3f21f2cc
redhat/oci-seccomp-bpf-hook-debugsource<1.2.8-1.module+el8.8.0+18060+3f21f2cc
1.2.8-1.module+el8.8.0+18060+3f21f2cc
redhat/podman<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-catatonit<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-catatonit-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-debugsource<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-gvproxy<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-gvproxy-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-plugins<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-plugins-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-remote<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-remote-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/podman-tests<4.4.1-8.module+el8.8.0+18438+15d3aa65
4.4.1-8.module+el8.8.0+18438+15d3aa65
redhat/python3-criu<3.15-3.module+el8.8.0+18060+3f21f2cc
3.15-3.module+el8.8.0+18060+3f21f2cc
redhat/runc<1.1.4-1.module+el8.8.0+18060+3f21f2cc
1.1.4-1.module+el8.8.0+18060+3f21f2cc
redhat/runc-debuginfo<1.1.4-1.module+el8.8.0+18060+3f21f2cc
1.1.4-1.module+el8.8.0+18060+3f21f2cc
redhat/runc-debugsource<1.1.4-1.module+el8.8.0+18060+3f21f2cc
1.1.4-1.module+el8.8.0+18060+3f21f2cc
redhat/skopeo<1.11.2-0.2.module+el8.8.0+18251+ad5b274c
1.11.2-0.2.module+el8.8.0+18251+ad5b274c
redhat/skopeo-tests<1.11.2-0.2.module+el8.8.0+18251+ad5b274c
1.11.2-0.2.module+el8.8.0+18251+ad5b274c
redhat/slirp4netns<1.2.0-2.module+el8.8.0+18060+3f21f2cc
1.2.0-2.module+el8.8.0+18060+3f21f2cc
redhat/slirp4netns-debuginfo<1.2.0-2.module+el8.8.0+18060+3f21f2cc
1.2.0-2.module+el8.8.0+18060+3f21f2cc
redhat/slirp4netns-debugsource<1.2.0-2.module+el8.8.0+18060+3f21f2cc
1.2.0-2.module+el8.8.0+18060+3f21f2cc
redhat/toolbox<0.0.99.3-7.module+el8.8.0+18119+e3deee03
0.0.99.3-7.module+el8.8.0+18119+e3deee03
redhat/toolbox-debuginfo<0.0.99.3-7.module+el8.8.0+18119+e3deee03
0.0.99.3-7.module+el8.8.0+18119+e3deee03
redhat/toolbox-debugsource<0.0.99.3-7.module+el8.8.0+18119+e3deee03
0.0.99.3-7.module+el8.8.0+18119+e3deee03
redhat/toolbox-tests<0.0.99.3-7.module+el8.8.0+18119+e3deee03
0.0.99.3-7.module+el8.8.0+18119+e3deee03
redhat/aardvark-dns<1.5.0-2.module+el8.8.0+18060+3f21f2cc.aa
1.5.0-2.module+el8.8.0+18060+3f21f2cc.aa
redhat/buildah<1.29.1-1.module+el8.8.0+18195+471da4bb.aa
1.29.1-1.module+el8.8.0+18195+471da4bb.aa
redhat/buildah-debuginfo<1.29.1-1.module+el8.8.0+18195+471da4bb.aa
1.29.1-1.module+el8.8.0+18195+471da4bb.aa
redhat/buildah-debugsource<1.29.1-1.module+el8.8.0+18195+471da4bb.aa
1.29.1-1.module+el8.8.0+18195+471da4bb.aa
redhat/buildah-tests<1.29.1-1.module+el8.8.0+18195+471da4bb.aa
1.29.1-1.module+el8.8.0+18195+471da4bb.aa
redhat/buildah-tests-debuginfo<1.29.1-1.module+el8.8.0+18195+471da4bb.aa
1.29.1-1.module+el8.8.0+18195+471da4bb.aa
redhat/conmon<2.1.6-1.module+el8.8.0+18098+9b44df5f.aa
2.1.6-1.module+el8.8.0+18098+9b44df5f.aa
redhat/conmon-debuginfo<2.1.6-1.module+el8.8.0+18098+9b44df5f.aa
2.1.6-1.module+el8.8.0+18098+9b44df5f.aa
redhat/conmon-debugsource<2.1.6-1.module+el8.8.0+18098+9b44df5f.aa
2.1.6-1.module+el8.8.0+18098+9b44df5f.aa
redhat/containernetworking-plugins<1.2.0-1.module+el8.8.0+18060+3f21f2cc.aa
1.2.0-1.module+el8.8.0+18060+3f21f2cc.aa
redhat/containernetworking-plugins-debuginfo<1.2.0-1.module+el8.8.0+18060+3f21f2cc.aa
1.2.0-1.module+el8.8.0+18060+3f21f2cc.aa
redhat/containernetworking-plugins-debugsource<1.2.0-1.module+el8.8.0+18060+3f21f2cc.aa
1.2.0-1.module+el8.8.0+18060+3f21f2cc.aa
redhat/containers-common<1-63.module+el8.8.0+18438+15d3aa65.aa
1-63.module+el8.8.0+18438+15d3aa65.aa
redhat/crit<3.15-3.module+el8.8.0+18060+3f21f2cc.aa
3.15-3.module+el8.8.0+18060+3f21f2cc.aa
redhat/criu<3.15-3.module+el8.8.0+18060+3f21f2cc.aa
3.15-3.module+el8.8.0+18060+3f21f2cc.aa
redhat/criu-debuginfo<3.15-3.module+el8.8.0+18060+3f21f2cc.aa
3.15-3.module+el8.8.0+18060+3f21f2cc.aa
redhat/criu-debugsource<3.15-3.module+el8.8.0+18060+3f21f2cc.aa
3.15-3.module+el8.8.0+18060+3f21f2cc.aa
redhat/criu-devel<3.15-3.module+el8.8.0+18060+3f21f2cc.aa
3.15-3.module+el8.8.0+18060+3f21f2cc.aa
redhat/criu-libs<3.15-3.module+el8.8.0+18060+3f21f2cc.aa
3.15-3.module+el8.8.0+18060+3f21f2cc.aa
redhat/criu-libs-debuginfo<3.15-3.module+el8.8.0+18060+3f21f2cc.aa
3.15-3.module+el8.8.0+18060+3f21f2cc.aa
redhat/crun<1.8.1-2.module+el8.8.0+18418+f0e540fe.aa
1.8.1-2.module+el8.8.0+18418+f0e540fe.aa
redhat/crun-debuginfo<1.8.1-2.module+el8.8.0+18418+f0e540fe.aa
1.8.1-2.module+el8.8.0+18418+f0e540fe.aa
redhat/crun-debugsource<1.8.1-2.module+el8.8.0+18418+f0e540fe.aa
1.8.1-2.module+el8.8.0+18418+f0e540fe.aa
redhat/fuse-overlayfs<1.10-1.module+el8.8.0+18060+3f21f2cc.aa
1.10-1.module+el8.8.0+18060+3f21f2cc.aa
redhat/fuse-overlayfs-debuginfo<1.10-1.module+el8.8.0+18060+3f21f2cc.aa
1.10-1.module+el8.8.0+18060+3f21f2cc.aa
redhat/fuse-overlayfs-debugsource<1.10-1.module+el8.8.0+18060+3f21f2cc.aa
1.10-1.module+el8.8.0+18060+3f21f2cc.aa
redhat/libslirp<4.4.0-1.module+el8.8.0+18060+3f21f2cc.aa
4.4.0-1.module+el8.8.0+18060+3f21f2cc.aa
redhat/libslirp-debuginfo<4.4.0-1.module+el8.8.0+18060+3f21f2cc.aa
4.4.0-1.module+el8.8.0+18060+3f21f2cc.aa
redhat/libslirp-debugsource<4.4.0-1.module+el8.8.0+18060+3f21f2cc.aa
4.4.0-1.module+el8.8.0+18060+3f21f2cc.aa
redhat/libslirp-devel<4.4.0-1.module+el8.8.0+18060+3f21f2cc.aa
4.4.0-1.module+el8.8.0+18060+3f21f2cc.aa
redhat/netavark<1.5.0-4.module+el8.8.0+18060+3f21f2cc.aa
1.5.0-4.module+el8.8.0+18060+3f21f2cc.aa
redhat/oci-seccomp-bpf-hook<1.2.8-1.module+el8.8.0+18060+3f21f2cc.aa
1.2.8-1.module+el8.8.0+18060+3f21f2cc.aa
redhat/oci-seccomp-bpf-hook-debuginfo<1.2.8-1.module+el8.8.0+18060+3f21f2cc.aa
1.2.8-1.module+el8.8.0+18060+3f21f2cc.aa
redhat/oci-seccomp-bpf-hook-debugsource<1.2.8-1.module+el8.8.0+18060+3f21f2cc.aa
1.2.8-1.module+el8.8.0+18060+3f21f2cc.aa
redhat/podman<4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
redhat/podman-catatonit<4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
redhat/podman-catatonit-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
redhat/podman-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
redhat/podman-debugsource<4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
redhat/podman-gvproxy<4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
redhat/podman-gvproxy-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
redhat/podman-plugins<4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
redhat/podman-plugins-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
redhat/podman-remote<4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
redhat/podman-remote-debuginfo<4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
redhat/podman-tests<4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
4.4.1-8.module+el8.8.0+18438+15d3aa65.aa
redhat/python3-criu<3.15-3.module+el8.8.0+18060+3f21f2cc.aa
3.15-3.module+el8.8.0+18060+3f21f2cc.aa
redhat/runc<1.1.4-1.module+el8.8.0+18060+3f21f2cc.aa
1.1.4-1.module+el8.8.0+18060+3f21f2cc.aa
redhat/runc-debuginfo<1.1.4-1.module+el8.8.0+18060+3f21f2cc.aa
1.1.4-1.module+el8.8.0+18060+3f21f2cc.aa
redhat/runc-debugsource<1.1.4-1.module+el8.8.0+18060+3f21f2cc.aa
1.1.4-1.module+el8.8.0+18060+3f21f2cc.aa
redhat/skopeo<1.11.2-0.2.module+el8.8.0+18251+ad5b274c.aa
1.11.2-0.2.module+el8.8.0+18251+ad5b274c.aa
redhat/skopeo-tests<1.11.2-0.2.module+el8.8.0+18251+ad5b274c.aa
1.11.2-0.2.module+el8.8.0+18251+ad5b274c.aa
redhat/slirp4netns<1.2.0-2.module+el8.8.0+18060+3f21f2cc.aa
1.2.0-2.module+el8.8.0+18060+3f21f2cc.aa
redhat/slirp4netns-debuginfo<1.2.0-2.module+el8.8.0+18060+3f21f2cc.aa
1.2.0-2.module+el8.8.0+18060+3f21f2cc.aa
redhat/slirp4netns-debugsource<1.2.0-2.module+el8.8.0+18060+3f21f2cc.aa
1.2.0-2.module+el8.8.0+18060+3f21f2cc.aa
redhat/toolbox<0.0.99.3-7.module+el8.8.0+18119+e3deee03.aa
0.0.99.3-7.module+el8.8.0+18119+e3deee03.aa
redhat/toolbox-debuginfo<0.0.99.3-7.module+el8.8.0+18119+e3deee03.aa
0.0.99.3-7.module+el8.8.0+18119+e3deee03.aa
redhat/toolbox-debugsource<0.0.99.3-7.module+el8.8.0+18119+e3deee03.aa
0.0.99.3-7.module+el8.8.0+18119+e3deee03.aa
redhat/toolbox-tests<0.0.99.3-7.module+el8.8.0+18119+e3deee03.aa
0.0.99.3-7.module+el8.8.0+18119+e3deee03.aa

Remediation

Event History

Jul 30, 2025
Advisory Published
via Red Hat·06:51 AM
Data Sourced
via Red Hat·06:51 AM
RemedyDescriptionAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of RHSA-2023:2758?

The severity of RHSA-2023:2758 is Critical.

2

How do I fix RHSA-2023:2758?

To fix RHSA-2023:2758, update the affected packages to their patched versions as mentioned in the advisory.

3

Which packages are affected by RHSA-2023:2758?

Affected packages include podman, buildah, skopeo, runc, and various related container tools.

4

What types of vulnerabilities are addressed in RHSA-2023:2758?

RHSA-2023:2758 addresses vulnerabilities related to improper sanitization of headers and other security defects.

5

Is updating required for all systems using the affected packages in RHSA-2023:2758?

Yes, updating is required for all systems using the affected packages to mitigate potential security risks.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203
RHSA-2023:2758 - Moderate: container-tools:rhel8 security, bug fix, and enhancement update - SecAlerts