RHSA-2020:4694MediumCVSS 7.5

Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

Published
November 4, 2020
Last Modified
August 15, 2026

🔗 CVE IDs covered (3)

CVE-2020-10749 →CVE-2020-10756 →CVE-2020-14040 →

📋 Description

CVE-2020-10749 — containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters CVE-2020-10756 — QEMU: slirp: networking out-of-bounds read information disclosure vulnerability CVE-2020-14040 — golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash

🎯 Affected products200

  • Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-0:1.15.1-2.module+el8.3.0+8221+97165c3f.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-0:1.15.1-2.module+el8.3.0+8221+97165c3f.ppc64le (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-0:1.15.1-2.module+el8.3.0+8221+97165c3f.s390x (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-0:1.15.1-2.module+el8.3.0+8221+97165c3f.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-0:1.15.1-2.module+el8.3.0+8221+97165c3f.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debuginfo-0:1.15.1-2.module+el8.3.0+8221+97165c3f.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debuginfo-0:1.15.1-2.module+el8.3.0+8221+97165c3f.ppc64le (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debuginfo-0:1.15.1-2.module+el8.3.0+8221+97165c3f.s390x (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debuginfo-0:1.15.1-2.module+el8.3.0+8221+97165c3f.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debugsource-0:1.15.1-2.module+el8.3.0+8221+97165c3f.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debugsource-0:1.15.1-2.module+el8.3.0+8221+97165c3f.ppc64le (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debugsource-0:1.15.1-2.module+el8.3.0+8221+97165c3f.s390x (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debugsource-0:1.15.1-2.module+el8.3.0+8221+97165c3f.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-tests-0:1.15.1-2.module+el8.3.0+8221+97165c3f.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-tests-0:1.15.1-2.module+el8.3.0+8221+97165c3f.ppc64le (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-tests-0:1.15.1-2.module+el8.3.0+8221+97165c3f.s390x (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-tests-0:1.15.1-2.module+el8.3.0+8221+97165c3f.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-tests-debuginfo-0:1.15.1-2.module+el8.3.0+8221+97165c3f.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-tests-debuginfo-0:1.15.1-2.module+el8.3.0+8221+97165c3f.ppc64le (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-tests-debuginfo-0:1.15.1-2.module+el8.3.0+8221+97165c3f.s390x (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-tests-debuginfo-0:1.15.1-2.module+el8.3.0+8221+97165c3f.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • cockpit-podman-0:18.1-2.module+el8.3.0+8221+97165c3f.noarch (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • cockpit-podman-0:18.1-2.module+el8.3.0+8221+97165c3f.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • conmon-2:2.0.20-2.module+el8.3.0+8221+97165c3f.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • conmon-2:2.0.20-2.module+el8.3.0+8221+97165c3f.ppc64le (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • conmon-2:2.0.20-2.module+el8.3.0+8221+97165c3f.s390x (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • conmon-2:2.0.20-2.module+el8.3.0+8221+97165c3f.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • conmon-2:2.0.20-2.module+el8.3.0+8221+97165c3f.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • container-selinux-2:2.144.0-1.module+el8.3.0+8221+97165c3f.noarch (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Prevent untrusted, non-privileged containers from running with CAP_NET_RAW.

🔗 References (36)