RHSA-2024:2077 — Security Advisory
Red Hat Security Advisory: container-tools:rhel8 security and bug fix update
Severity
ImportantRed Hat Product Security
Products
Official CSAF product identity
Published · April 29, 2024
Updated · November 4, 2026
Topic
An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.
Security team has rated the vulnerability impact of the fixed issues as Important.
Description
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.
Security Fix(es):
-
golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags (CVE-2022-32149)
-
podman: Symlink error leads to information disclosure (CVE-2022-4122)
-
buildah: full container escape at build time (CVE-2024-1753)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.