RHBA-2024:7198MediumCVSS 7.0
Red Hat Bug Fix Advisory: updated rhel8/go-toolset container image
🔗 CVE IDs covered (2)
📋 Description
CVE-2022-50072 — kernel: NFSv4/pnfs: Fix a use-after-free bug in open CVE-2023-54269 — kernel: SUNRPC: double free xprt_ctxt while still in use
🎯 Affected products9
- Red Hat Enterprise Linux AppStream (v. 8)
- rhel8/go-toolset@sha256:04240c4c5650932e050695bda1aeb3ed47b219f62ecddb3f5d02fd03c25680ea_arm64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
- rhel8/go-toolset@sha256:09a49fc33f45e53b3233b6816e5b39ddb9eddd3238ff117d29915547523e6646_amd64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
- rhel8/go-toolset@sha256:d7d99eec4679c9e42f7120a12c083e276e2e5156b8dfcb319d58e6ab09493983_ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
- rhel8/go-toolset@sha256:db74c69140188f8d6400bf4d5f3fdfb4fbb22dcc1cd4e6576ec52e250725428a_s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
- ubi8/go-toolset@sha256:04240c4c5650932e050695bda1aeb3ed47b219f62ecddb3f5d02fd03c25680ea_arm64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
- ubi8/go-toolset@sha256:09a49fc33f45e53b3233b6816e5b39ddb9eddd3238ff117d29915547523e6646_amd64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
- ubi8/go-toolset@sha256:d7d99eec4679c9e42f7120a12c083e276e2e5156b8dfcb319d58e6ab09493983_ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
- ubi8/go-toolset@sha256:db74c69140188f8d6400bf4d5f3fdfb4fbb22dcc1cd4e6576ec52e250725428a_s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
✅ Remediation
The Red Hat Enterprise Linux 8 container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog (see References). Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally. Workaround: To mitigate this issue, prevent module sunrpc from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.
🔗 References (142)
- selfhttps://access.redhat.com/errata/RHBA-2024:7198
- externalhttps://access.redhat.com/errata/RHSA-2024:7000
- externalhttps://catalog.redhat.com/software/containers/registry/registry.access.redhat.com/repository/rhel8/go-toolset
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2258012
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2258013
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2260038
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2265799
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2265838
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2266358
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2266750
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2267036
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2267041
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2267795
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2267916
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2267925
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2268295
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2270103
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2271648
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2271796
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2272793
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2273141
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2273148
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2273180
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2275558
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2275661
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2275690
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2275742
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2277171
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2278220
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2278270
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2278447
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2281217
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2281317
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2281704
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2281720
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2281807
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2281847
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282324
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282345
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282354
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282355
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282356
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282357
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282366
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282401
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282422
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282440
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282508
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282511
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282648
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282669
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282676
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282757
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282764
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282851
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282890
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282903
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2282918
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2283389
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2283424
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2284271
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2284511
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2284515
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2284545
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2284596
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2284628
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2284630
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2284634
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2293247
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2293270
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2293273
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2293304
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2293377
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2293408
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2293414
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2293423
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2293440
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2293441
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2293658
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2294313
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297471
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297473
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297478
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297488
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297495
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297496
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297513
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297515
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297525
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297538
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297542
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297543
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297544
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297556
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297561
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297562
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297572
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297573
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297579
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297581
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297582
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297589
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297706
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2297909
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2298079
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2298140
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2298177
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2298640
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2299240
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2299336
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2299452
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300296
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300297
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300381
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300402
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300407
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300408
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300409
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300410
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300414
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300429
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300430
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300434
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300439
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300440
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300448
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300453
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300492
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300533
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300552
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300709
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2300713
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2301477
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2301489
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2301496
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2301519
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2301522
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2301543
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2301544
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2303077
- externalhttps://issues.redhat.com/browse/RHEL-31515
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2024/rhba-2024_7198.json