-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: container-tools:rhel8 security, bug fix, and enhancement update Advisory ID: RHSA-2021:1796-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:1796 Issue date: 2021-05-18 CVE Names: CVE-2020-29652 CVE-2021-20199 ==================================================================== 1. Summary: An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference (CVE-2020-29652) * podman: Remote traffic to rootless containers is seen as orginating from localhost (CVE-2021-20199) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1707078 - Image signature only has one docker registry reference, would like the ability to have two hostnames sign them. 1724946 - Can not verify signed image signature in OCP 4 1726442 - SIGTERM from systemd to containers|conmon on shutdown causes unexpected results 1763007 - --log-opt for podman run does not work as expected 1770037 - (podman sign) does not handle multi-arch images 1798278 - subscription-manager recommends drags in too much into RHCOS 1811773 - [RFE] cockpit-podman ability to set selinux contexts for volumes 1838233 - address coverity warnings 1841485 - podman exec is fragile in the presence of signals 1844199 - [RFE] Add remapIdentity suggestion to simplify policy configuration 1853455 - podman ignores infra_command option from containers.conf 1860176 - OCI Runtime kata-runtime is in use by a container, but is not available 1867892 - running containerized buildah leads to error 1881894 - podman-remote: dial unix ///run/podman/podman.sock: connect: no such file or directory 1897282 - podman-wait requiring units for interval when it is documented as optional 1897594 - update description and summary for container-tools module for 8.3.0 1902979 - podman run fails to update /etc/hosts when --uidmap is provided 1903813 - [RFE] Ship preconfigured /etc/containers/registries.d/ files with containers-common 1904549 - POST to /networks/create with docker compatible API results in panic 1908883 - CVE-2020-29652 golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference 1915383 - Podman "--format" does not support "join" 1918554 - error bind mounting /dev from host into mount namespace: mkdir /var/tmp/buildah396339746/mnt/rootfs/dev: operation not permitted 1919050 - CVE-2021-20199 podman: Remote traffic to rootless containers is seen as orginating from localhost 1921128 - [gss][podman]Getting the error while starting container "Error: readlink /var/lib/containers/storage/overlay/l/XXX no such file or directory" 1923986 - podman: Installation instructions for rootless podman do not work 1924146 - RFE Bind mounting host volume using Podman REST API 1931545 - podman 3.0.1 ships with a v2 go module 1931785 - shortname for ubi8-minimal leads to "Repo not found" error 1932083 - Podman will pull image for rootless CNI 1935376 - Regression: Overlay mounts is broken on existing directories. 1935922 - Unable to run multi-stage builds with rootless buildah container 1936927 - regressions cp command in Podman v3.0 1937487 - Podman socket failing to connect with long uid 1938234 - Variety of errors during rootless container image creation 6. Package List: Red Hat Enterprise Linux AppStream (v. 8): Source: buildah-1.19.7-1.module+el8.4.0+10607+f4da7515.src.rpm cockpit-podman-29-2.module+el8.4.0+10607+f4da7515.src.rpm conmon-2.0.26-1.module+el8.4.0+10607+f4da7515.src.rpm container-selinux-2.158.0-1.module+el8.4.0+10607+f4da7515.src.rpm containernetworking-plugins-0.9.1-1.module+el8.4.0+10607+f4da7515.src.rpm criu-3.15-1.module+el8.4.0+10607+f4da7515.src.rpm crun-0.18-1.module+el8.4.0+10607+f4da7515.src.rpm fuse-overlayfs-1.4.0-2.module+el8.4.0+10607+f4da7515.src.rpm libslirp-4.3.1-1.module+el8.4.0+10607+f4da7515.src.rpm oci-seccomp-bpf-hook-1.2.0-2.module+el8.4.0+10607+f4da7515.src.rpm podman-3.0.1-6.module+el8.4.0+10607+f4da7515.src.rpm runc-1.0.0-70.rc92.module+el8.4.0+10607+f4da7515.src.rpm skopeo-1.2.2-8.module+el8.4.0+10607+f4da7515.src.rpm slirp4netns-1.1.8-1.module+el8.4.0+10607+f4da7515.src.rpm toolbox-0.0.8-1.module+el8.4.0+10607+f4da7515.src.rpm udica-0.2.4-1.module+el8.4.0+10607+f4da7515.src.rpm aarch64: buildah-1.19.7-1.module+el8.4.0+10607+f4da7515.aarch64.rpm buildah-debuginfo-1.19.7-1.module+el8.4.0+10607+f4da7515.aarch64.rpm buildah-debugsource-1.19.7-1.module+el8.4.0+10607+f4da7515.aarch64.rpm buildah-tests-1.19.7-1.module+el8.4.0+10607+f4da7515.aarch64.rpm buildah-tests-debuginfo-1.19.7-1.module+el8.4.0+10607+f4da7515.aarch64.rpm conmon-2.0.26-1.module+el8.4.0+10607+f4da7515.aarch64.rpm conmon-debuginfo-2.0.26-1.module+el8.4.0+10607+f4da7515.aarch64.rpm conmon-debugsource-2.0.26-1.module+el8.4.0+10607+f4da7515.aarch64.rpm containernetworking-plugins-0.9.1-1.module+el8.4.0+10607+f4da7515.aarch64.rpm containernetworking-plugins-debuginfo-0.9.1-1.module+el8.4.0+10607+f4da7515.aarch64.rpm containernetworking-plugins-debugsource-0.9.1-1.module+el8.4.0+10607+f4da7515.aarch64.rpm containers-common-1.2.2-8.module+el8.4.0+10607+f4da7515.aarch64.rpm crit-3.15-1.module+el8.4.0+10607+f4da7515.aarch64.rpm criu-3.15-1.module+el8.4.0+10607+f4da7515.aarch64.rpm criu-debuginfo-3.15-1.module+el8.4.0+10607+f4da7515.aarch64.rpm criu-debugsource-3.15-1.module+el8.4.0+10607+f4da7515.aarch64.rpm crun-0.18-1.module+el8.4.0+10607+f4da7515.aarch64.rpm crun-debuginfo-0.18-1.module+el8.4.0+10607+f4da7515.aarch64.rpm crun-debugsource-0.18-1.module+el8.4.0+10607+f4da7515.aarch64.rpm fuse-overlayfs-1.4.0-2.module+el8.4.0+10607+f4da7515.aarch64.rpm fuse-overlayfs-debuginfo-1.4.0-2.module+el8.4.0+10607+f4da7515.aarch64.rpm fuse-overlayfs-debugsource-1.4.0-2.module+el8.4.0+10607+f4da7515.aarch64.rpm libslirp-4.3.1-1.module+el8.4.0+10607+f4da7515.aarch64.rpm libslirp-debuginfo-4.3.1-1.module+el8.4.0+10607+f4da7515.aarch64.rpm libslirp-debugsource-4.3.1-1.module+el8.4.0+10607+f4da7515.aarch64.rpm libslirp-devel-4.3.1-1.module+el8.4.0+10607+f4da7515.aarch64.rpm oci-seccomp-bpf-hook-1.2.0-2.module+el8.4.0+10607+f4da7515.aarch64.rpm oci-seccomp-bpf-hook-debuginfo-1.2.0-2.module+el8.4.0+10607+f4da7515.aarch64.rpm oci-seccomp-bpf-hook-debugsource-1.2.0-2.module+el8.4.0+10607+f4da7515.aarch64.rpm podman-3.0.1-6.module+el8.4.0+10607+f4da7515.aarch64.rpm podman-catatonit-3.0.1-6.module+el8.4.0+10607+f4da7515.aarch64.rpm podman-catatonit-debuginfo-3.0.1-6.module+el8.4.0+10607+f4da7515.aarch64.rpm podman-debuginfo-3.0.1-6.module+el8.4.0+10607+f4da7515.aarch64.rpm podman-debugsource-3.0.1-6.module+el8.4.0+10607+f4da7515.aarch64.rpm podman-plugins-3.0.1-6.module+el8.4.0+10607+f4da7515.aarch64.rpm podman-plugins-debuginfo-3.0.1-6.module+el8.4.0+10607+f4da7515.aarch64.rpm podman-remote-3.0.1-6.module+el8.4.0+10607+f4da7515.aarch64.rpm podman-remote-debuginfo-3.0.1-6.module+el8.4.0+10607+f4da7515.aarch64.rpm podman-tests-3.0.1-6.module+el8.4.0+10607+f4da7515.aarch64.rpm python3-criu-3.15-1.module+el8.4.0+10607+f4da7515.aarch64.rpm runc-1.0.0-70.rc92.module+el8.4.0+10607+f4da7515.aarch64.rpm runc-debuginfo-1.0.0-70.rc92.module+el8.4.0+10607+f4da7515.aarch64.rpm runc-debugsource-1.0.0-70.rc92.module+el8.4.0+10607+f4da7515.aarch64.rpm skopeo-1.2.2-8.module+el8.4.0+10607+f4da7515.aarch64.rpm skopeo-debuginfo-1.2.2-8.module+el8.4.0+10607+f4da7515.aarch64.rpm skopeo-debugsource-1.2.2-8.module+el8.4.0+10607+f4da7515.aarch64.rpm skopeo-tests-1.2.2-8.module+el8.4.0+10607+f4da7515.aarch64.rpm slirp4netns-1.1.8-1.module+el8.4.0+10607+f4da7515.aarch64.rpm slirp4netns-debuginfo-1.1.8-1.module+el8.4.0+10607+f4da7515.aarch64.rpm slirp4netns-debugsource-1.1.8-1.module+el8.4.0+10607+f4da7515.aarch64.rpm noarch: cockpit-podman-29-2.module+el8.4.0+10607+f4da7515.noarch.rpm container-selinux-2.158.0-1.module+el8.4.0+10607+f4da7515.noarch.rpm podman-docker-3.0.1-6.module+el8.4.0+10607+f4da7515.noarch.rpm toolbox-0.0.8-1.module+el8.4.0+10607+f4da7515.noarch.rpm udica-0.2.4-1.module+el8.4.0+10607+f4da7515.noarch.rpm ppc64le: buildah-1.19.7-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm buildah-debuginfo-1.19.7-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm buildah-debugsource-1.19.7-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm buildah-tests-1.19.7-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm buildah-tests-debuginfo-1.19.7-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm conmon-2.0.26-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm conmon-debuginfo-2.0.26-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm conmon-debugsource-2.0.26-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm containernetworking-plugins-0.9.1-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm containernetworking-plugins-debuginfo-0.9.1-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm containernetworking-plugins-debugsource-0.9.1-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm containers-common-1.2.2-8.module+el8.4.0+10607+f4da7515.ppc64le.rpm crit-3.15-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm criu-3.15-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm criu-debuginfo-3.15-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm criu-debugsource-3.15-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm crun-0.18-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm crun-debuginfo-0.18-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm crun-debugsource-0.18-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm fuse-overlayfs-1.4.0-2.module+el8.4.0+10607+f4da7515.ppc64le.rpm fuse-overlayfs-debuginfo-1.4.0-2.module+el8.4.0+10607+f4da7515.ppc64le.rpm fuse-overlayfs-debugsource-1.4.0-2.module+el8.4.0+10607+f4da7515.ppc64le.rpm libslirp-4.3.1-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm libslirp-debuginfo-4.3.1-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm libslirp-debugsource-4.3.1-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm libslirp-devel-4.3.1-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm oci-seccomp-bpf-hook-1.2.0-2.module+el8.4.0+10607+f4da7515.ppc64le.rpm oci-seccomp-bpf-hook-debuginfo-1.2.0-2.module+el8.4.0+10607+f4da7515.ppc64le.rpm oci-seccomp-bpf-hook-debugsource-1.2.0-2.module+el8.4.0+10607+f4da7515.ppc64le.rpm podman-3.0.1-6.module+el8.4.0+10607+f4da7515.ppc64le.rpm podman-catatonit-3.0.1-6.module+el8.4.0+10607+f4da7515.ppc64le.rpm podman-catatonit-debuginfo-3.0.1-6.module+el8.4.0+10607+f4da7515.ppc64le.rpm podman-debuginfo-3.0.1-6.module+el8.4.0+10607+f4da7515.ppc64le.rpm podman-debugsource-3.0.1-6.module+el8.4.0+10607+f4da7515.ppc64le.rpm podman-plugins-3.0.1-6.module+el8.4.0+10607+f4da7515.ppc64le.rpm podman-plugins-debuginfo-3.0.1-6.module+el8.4.0+10607+f4da7515.ppc64le.rpm podman-remote-3.0.1-6.module+el8.4.0+10607+f4da7515.ppc64le.rpm podman-remote-debuginfo-3.0.1-6.module+el8.4.0+10607+f4da7515.ppc64le.rpm podman-tests-3.0.1-6.module+el8.4.0+10607+f4da7515.ppc64le.rpm python3-criu-3.15-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm runc-1.0.0-70.rc92.module+el8.4.0+10607+f4da7515.ppc64le.rpm runc-debuginfo-1.0.0-70.rc92.module+el8.4.0+10607+f4da7515.ppc64le.rpm runc-debugsource-1.0.0-70.rc92.module+el8.4.0+10607+f4da7515.ppc64le.rpm skopeo-1.2.2-8.module+el8.4.0+10607+f4da7515.ppc64le.rpm skopeo-debuginfo-1.2.2-8.module+el8.4.0+10607+f4da7515.ppc64le.rpm skopeo-debugsource-1.2.2-8.module+el8.4.0+10607+f4da7515.ppc64le.rpm skopeo-tests-1.2.2-8.module+el8.4.0+10607+f4da7515.ppc64le.rpm slirp4netns-1.1.8-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm slirp4netns-debuginfo-1.1.8-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm slirp4netns-debugsource-1.1.8-1.module+el8.4.0+10607+f4da7515.ppc64le.rpm s390x: buildah-1.19.7-1.module+el8.4.0+10607+f4da7515.s390x.rpm buildah-debuginfo-1.19.7-1.module+el8.4.0+10607+f4da7515.s390x.rpm buildah-debugsource-1.19.7-1.module+el8.4.0+10607+f4da7515.s390x.rpm buildah-tests-1.19.7-1.module+el8.4.0+10607+f4da7515.s390x.rpm buildah-tests-debuginfo-1.19.7-1.module+el8.4.0+10607+f4da7515.s390x.rpm conmon-2.0.26-1.module+el8.4.0+10607+f4da7515.s390x.rpm conmon-debuginfo-2.0.26-1.module+el8.4.0+10607+f4da7515.s390x.rpm conmon-debugsource-2.0.26-1.module+el8.4.0+10607+f4da7515.s390x.rpm containernetworking-plugins-0.9.1-1.module+el8.4.0+10607+f4da7515.s390x.rpm containernetworking-plugins-debuginfo-0.9.1-1.module+el8.4.0+10607+f4da7515.s390x.rpm containernetworking-plugins-debugsource-0.9.1-1.module+el8.4.0+10607+f4da7515.s390x.rpm containers-common-1.2.2-8.module+el8.4.0+10607+f4da7515.s390x.rpm crit-3.15-1.module+el8.4.0+10607+f4da7515.s390x.rpm criu-3.15-1.module+el8.4.0+10607+f4da7515.s390x.rpm criu-debuginfo-3.15-1.module+el8.4.0+10607+f4da7515.s390x.rpm criu-debugsource-3.15-1.module+el8.4.0+10607+f4da7515.s390x.rpm crun-0.18-1.module+el8.4.0+10607+f4da7515.s390x.rpm crun-debuginfo-0.18-1.module+el8.4.0+10607+f4da7515.s390x.rpm crun-debugsource-0.18-1.module+el8.4.0+10607+f4da7515.s390x.rpm fuse-overlayfs-1.4.0-2.module+el8.4.0+10607+f4da7515.s390x.rpm fuse-overlayfs-debuginfo-1.4.0-2.module+el8.4.0+10607+f4da7515.s390x.rpm fuse-overlayfs-debugsource-1.4.0-2.module+el8.4.0+10607+f4da7515.s390x.rpm libslirp-4.3.1-1.module+el8.4.0+10607+f4da7515.s390x.rpm libslirp-debuginfo-4.3.1-1.module+el8.4.0+10607+f4da7515.s390x.rpm libslirp-debugsource-4.3.1-1.module+el8.4.0+10607+f4da7515.s390x.rpm libslirp-devel-4.3.1-1.module+el8.4.0+10607+f4da7515.s390x.rpm oci-seccomp-bpf-hook-1.2.0-2.module+el8.4.0+10607+f4da7515.s390x.rpm oci-seccomp-bpf-hook-debuginfo-1.2.0-2.module+el8.4.0+10607+f4da7515.s390x.rpm oci-seccomp-bpf-hook-debugsource-1.2.0-2.module+el8.4.0+10607+f4da7515.s390x.rpm podman-3.0.1-6.module+el8.4.0+10607+f4da7515.s390x.rpm podman-catatonit-3.0.1-6.module+el8.4.0+10607+f4da7515.s390x.rpm podman-catatonit-debuginfo-3.0.1-6.module+el8.4.0+10607+f4da7515.s390x.rpm podman-debuginfo-3.0.1-6.module+el8.4.0+10607+f4da7515.s390x.rpm podman-debugsource-3.0.1-6.module+el8.4.0+10607+f4da7515.s390x.rpm podman-plugins-3.0.1-6.module+el8.4.0+10607+f4da7515.s390x.rpm podman-plugins-debuginfo-3.0.1-6.module+el8.4.0+10607+f4da7515.s390x.rpm podman-remote-3.0.1-6.module+el8.4.0+10607+f4da7515.s390x.rpm podman-remote-debuginfo-3.0.1-6.module+el8.4.0+10607+f4da7515.s390x.rpm podman-tests-3.0.1-6.module+el8.4.0+10607+f4da7515.s390x.rpm python3-criu-3.15-1.module+el8.4.0+10607+f4da7515.s390x.rpm runc-1.0.0-70.rc92.module+el8.4.0+10607+f4da7515.s390x.rpm runc-debuginfo-1.0.0-70.rc92.module+el8.4.0+10607+f4da7515.s390x.rpm runc-debugsource-1.0.0-70.rc92.module+el8.4.0+10607+f4da7515.s390x.rpm skopeo-1.2.2-8.module+el8.4.0+10607+f4da7515.s390x.rpm skopeo-debuginfo-1.2.2-8.module+el8.4.0+10607+f4da7515.s390x.rpm skopeo-debugsource-1.2.2-8.module+el8.4.0+10607+f4da7515.s390x.rpm skopeo-tests-1.2.2-8.module+el8.4.0+10607+f4da7515.s390x.rpm slirp4netns-1.1.8-1.module+el8.4.0+10607+f4da7515.s390x.rpm slirp4netns-debuginfo-1.1.8-1.module+el8.4.0+10607+f4da7515.s390x.rpm slirp4netns-debugsource-1.1.8-1.module+el8.4.0+10607+f4da7515.s390x.rpm x86_64: buildah-1.19.7-1.module+el8.4.0+10607+f4da7515.x86_64.rpm buildah-debuginfo-1.19.7-1.module+el8.4.0+10607+f4da7515.x86_64.rpm buildah-debugsource-1.19.7-1.module+el8.4.0+10607+f4da7515.x86_64.rpm buildah-tests-1.19.7-1.module+el8.4.0+10607+f4da7515.x86_64.rpm buildah-tests-debuginfo-1.19.7-1.module+el8.4.0+10607+f4da7515.x86_64.rpm conmon-2.0.26-1.module+el8.4.0+10607+f4da7515.x86_64.rpm conmon-debuginfo-2.0.26-1.module+el8.4.0+10607+f4da7515.x86_64.rpm conmon-debugsource-2.0.26-1.module+el8.4.0+10607+f4da7515.x86_64.rpm containernetworking-plugins-0.9.1-1.module+el8.4.0+10607+f4da7515.x86_64.rpm containernetworking-plugins-debuginfo-0.9.1-1.module+el8.4.0+10607+f4da7515.x86_64.rpm containernetworking-plugins-debugsource-0.9.1-1.module+el8.4.0+10607+f4da7515.x86_64.rpm containers-common-1.2.2-8.module+el8.4.0+10607+f4da7515.x86_64.rpm crit-3.15-1.module+el8.4.0+10607+f4da7515.x86_64.rpm criu-3.15-1.module+el8.4.0+10607+f4da7515.x86_64.rpm criu-debuginfo-3.15-1.module+el8.4.0+10607+f4da7515.x86_64.rpm criu-debugsource-3.15-1.module+el8.4.0+10607+f4da7515.x86_64.rpm crun-0.18-1.module+el8.4.0+10607+f4da7515.x86_64.rpm crun-debuginfo-0.18-1.module+el8.4.0+10607+f4da7515.x86_64.rpm crun-debugsource-0.18-1.module+el8.4.0+10607+f4da7515.x86_64.rpm fuse-overlayfs-1.4.0-2.module+el8.4.0+10607+f4da7515.x86_64.rpm fuse-overlayfs-debuginfo-1.4.0-2.module+el8.4.0+10607+f4da7515.x86_64.rpm fuse-overlayfs-debugsource-1.4.0-2.module+el8.4.0+10607+f4da7515.x86_64.rpm libslirp-4.3.1-1.module+el8.4.0+10607+f4da7515.x86_64.rpm libslirp-debuginfo-4.3.1-1.module+el8.4.0+10607+f4da7515.x86_64.rpm libslirp-debugsource-4.3.1-1.module+el8.4.0+10607+f4da7515.x86_64.rpm libslirp-devel-4.3.1-1.module+el8.4.0+10607+f4da7515.x86_64.rpm oci-seccomp-bpf-hook-1.2.0-2.module+el8.4.0+10607+f4da7515.x86_64.rpm oci-seccomp-bpf-hook-debuginfo-1.2.0-2.module+el8.4.0+10607+f4da7515.x86_64.rpm oci-seccomp-bpf-hook-debugsource-1.2.0-2.module+el8.4.0+10607+f4da7515.x86_64.rpm podman-3.0.1-6.module+el8.4.0+10607+f4da7515.x86_64.rpm podman-catatonit-3.0.1-6.module+el8.4.0+10607+f4da7515.x86_64.rpm podman-catatonit-debuginfo-3.0.1-6.module+el8.4.0+10607+f4da7515.x86_64.rpm podman-debuginfo-3.0.1-6.module+el8.4.0+10607+f4da7515.x86_64.rpm podman-debugsource-3.0.1-6.module+el8.4.0+10607+f4da7515.x86_64.rpm podman-plugins-3.0.1-6.module+el8.4.0+10607+f4da7515.x86_64.rpm podman-plugins-debuginfo-3.0.1-6.module+el8.4.0+10607+f4da7515.x86_64.rpm podman-remote-3.0.1-6.module+el8.4.0+10607+f4da7515.x86_64.rpm podman-remote-debuginfo-3.0.1-6.module+el8.4.0+10607+f4da7515.x86_64.rpm podman-tests-3.0.1-6.module+el8.4.0+10607+f4da7515.x86_64.rpm python3-criu-3.15-1.module+el8.4.0+10607+f4da7515.x86_64.rpm runc-1.0.0-70.rc92.module+el8.4.0+10607+f4da7515.x86_64.rpm runc-debuginfo-1.0.0-70.rc92.module+el8.4.0+10607+f4da7515.x86_64.rpm runc-debugsource-1.0.0-70.rc92.module+el8.4.0+10607+f4da7515.x86_64.rpm skopeo-1.2.2-8.module+el8.4.0+10607+f4da7515.x86_64.rpm skopeo-debuginfo-1.2.2-8.module+el8.4.0+10607+f4da7515.x86_64.rpm skopeo-debugsource-1.2.2-8.module+el8.4.0+10607+f4da7515.x86_64.rpm skopeo-tests-1.2.2-8.module+el8.4.0+10607+f4da7515.x86_64.rpm slirp4netns-1.1.8-1.module+el8.4.0+10607+f4da7515.x86_64.rpm slirp4netns-debuginfo-1.1.8-1.module+el8.4.0+10607+f4da7515.x86_64.rpm slirp4netns-debugsource-1.1.8-1.module+el8.4.0+10607+f4da7515.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2020-29652 https://access.redhat.com/security/cve/CVE-2021-20199 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/ 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYKPyw9zjgjWX9erEAQj2mxAAppOmbu4edSrVlb4Giu4uvL22L5EJ86mv 3gp/ITASzeSKySGzYwkPOHgKM1xfOCih9SWC99Yk5/AVLzx5umE9RlnpTKM1zOQl 1YVyqthbDtdxWEq3aMAyWIaLi2XoUm6EQZJAY51TIfPHk8qfZv6yUX8zjVKp8J3v kYK24Rm1+uLQPvXtntv0/bRCAwQ0ATvgZuM25bmncNFP+i4aayBGAzHt1zzDtk7L ubj+cMQeS0eGwpm/cup6S6XAIhFYcEdKO1BHnoYCJD3QOKrhl7K07txk05CRPXf8 kGGGqe9FuxNmeE+aFX0uDa2fGw+l0/HjOwxEd0y87q0TUZ9w+2C6EdrUxL0FxAt7 Ediyvi8zGOsqwvT2x9daKH9sVhvEwUcL7Ime6FsG4+jpt/J9l59VxaTYJeXB+xmw +U/MOszmrxPuIWZaTSg06lcgTz5VXewb6NsaPxafqKGBka+dXN3vb8S7N/tbgKqw YTJYJxXiMDem+2j29E+z5EIiyLqYfT2IGdc2yKoc1li9q25yBv1LtAyqpVE7DIXS aai27AxMc0NhkDYvTtuA0M7uzXLFGfdSRfKQt11pBn6WpfvwRW3ZVjoeVT7420KC trxb4gGsDQvmc8W8Be+EUQHlKqBT7abAJLDC+6aUUBXXXOFU/ulEFlttoFA3RMYV 1U0RwQTLjYY=wKpw -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://listman.redhat.com/mailman/listinfo/rhsa-announce