RHSA-2024:3968 — Security Advisory
Red Hat Security Advisory: container-tools:rhel8 bug fix and enhancement update
Severity
ModerateRed Hat Product Security
Products
Official CSAF product identity
Published · June 18, 2024
Updated · November 4, 2026
Topic
An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8.
The security team rated impact of addressed issues as Moderate.
Description
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.
Security Fix(es):
-
podman: jose-go: improper handling of highly compressed data (CVE-2024-28180)
-
buildah: jose-go: improper handling of highly compressed data (CVE-2024-28180)
-
podman: jose-go: resource exhaustion (CVE-2024-28176)
-
buildah: jose-go: resource exhaustion (CVE-2024-28176)
-
skopeo: jose-go: resource exhaustion (CVE-2024-28176)
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8 Release Notes linked from the References section.