{"id":"RHSA-2024:2988","summary":"Red Hat Security Advisory: container-tools:rhel8 security update","modified":"2026-04-19T10:06:36Z","published":"2024-10-21T18:50:41Z","related":["GO-2023-1987","GO-2023-2375","GO-2023-2382"],"upstream":["CVE-2018-25091","CVE-2021-33198","CVE-2021-34558","CVE-2022-2879","CVE-2022-2880","CVE-2022-41715","CVE-2023-29409","CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39326","CVE-2023-45287","CVE-2023-45803","CVE-2023-48795","CVE-2024-23650"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2024:2988"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#moderate"},{"type":"ARTICLE","url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1983596"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1989575"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132867"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132868"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132872"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2228743"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237773"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237776"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237777"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237778"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2244340"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2246840"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253193"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253330"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254210"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2262272"},{"type":"ARTICLE","url":"https://issues.redhat.com/browse/RHEL-18150"},{"type":"ARTICLE","url":"https://issues.redhat.com/browse/RHEL-2598"},{"type":"ARTICLE","url":"https://issues.redhat.com/browse/RHEL-26594"},{"type":"ARTICLE","url":"https://issues.redhat.com/browse/RHEL-3088"},{"type":"ARTICLE","url":"https://issues.redhat.com/browse/RHEL-3093"},{"type":"ARTICLE","url":"https://issues.redhat.com/browse/RHEL-3146"},{"type":"ARTICLE","url":"https://issues.redhat.com/browse/RHEL-9836"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2988.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2018-25091"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2018-25091"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-25091"},{"type":"ARTICLE","url":"https://security.snyk.io/vuln/SNYK-PYTHON-URLLIB3-5969479"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2021-33198"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2021-33198"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33198"},{"type":"ARTICLE","url":"https://groups.google.com/g/golang-announce/c/RgCMkAEQjSI"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2021-34558"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2021-34558"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-34558"},{"type":"ARTICLE","url":"https://golang.org/doc/devel/release#go1.15.minor"},{"type":"ARTICLE","url":"https://golang.org/doc/devel/release#go1.16.minor"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2022-2879"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2022-2879"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2879"},{"type":"ARTICLE","url":"https://github.com/golang/go/issues/54853"},{"type":"ARTICLE","url":"https://github.com/vbatts/tar-split/releases/tag/v0.12.1"},{"type":"ARTICLE","url":"https://groups.google.com/g/golang-announce/c/xtuG5faxtaU?pli=1"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2022-2880"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2022-2880"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2880"},{"type":"ARTICLE","url":"https://github.com/golang/go/issues/54663"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2022-41715"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2022-41715"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41715"},{"type":"ARTICLE","url":"https://github.com/golang/go/issues/55949"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2023-29409"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2023-29409"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29409"},{"type":"ARTICLE","url":"https://go.dev/cl/515257"},{"type":"ARTICLE","url":"https://go.dev/issue/61460"},{"type":"ARTICLE","url":"https://groups.google.com/g/golang-announce/c/X0b6CsSAaYI/m/Efv5DbZ9AwAJ"},{"type":"ADVISORY","url":"https://pkg.go.dev/vuln/GO-2023-1987"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2023-39318"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2023-39318"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39318"},{"type":"ARTICLE","url":"https://go.dev/cl/526156"},{"type":"ARTICLE","url":"https://go.dev/issue/62196"},{"type":"ARTICLE","url":"https://groups.google.com/g/golang-dev/c/2C5vbR-UNkI/m/L1hdrPhfBAAJ"},{"type":"ARTICLE","url":"https://vuln.go.dev/ID/GO-2023-2041.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2023-39319"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2023-39319"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39319"},{"type":"ARTICLE","url":"https://go.dev/cl/526157"},{"type":"ARTICLE","url":"https://go.dev/issue/62197"},{"type":"ARTICLE","url":"https://vuln.go.dev/ID/GO-2023-2043.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2023-39321"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2023-39321"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39321"},{"type":"ARTICLE","url":"https://go.dev/cl/523039"},{"type":"ARTICLE","url":"https://go.dev/issue/62266"},{"type":"ARTICLE","url":"https://vuln.go.dev/ID/GO-2023-2044.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2023-39322"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2023-39322"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39322"},{"type":"ARTICLE","url":"https://vuln.go.dev/ID/GO-2023-2045.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2023-39326"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2023-39326"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39326"},{"type":"ADVISORY","url":"https://pkg.go.dev/vuln/GO-2023-2382"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2023-45287"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2023-45287"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45287"},{"type":"ADVISORY","url":"https://pkg.go.dev/vuln/GO-2023-2375"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2023-45803"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2023-45803"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45803"},{"type":"ARTICLE","url":"https://github.com/urllib3/urllib3/commit/4e98d57809dacab1cbe625fddeec1a290c478ea9"},{"type":"ARTICLE","url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-g4mx-q9vg-27p4"},{"type":"ARTICLE","url":"https://www.rfc-editor.org/rfc/rfc9110.html#name-get"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2023-48795"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2023-48795"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-48795"},{"type":"ARTICLE","url":"https://access.redhat.com/solutions/7071748"},{"type":"ARTICLE","url":"https://terrapin-attack.com/"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2024-23650"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2024-23650"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23650"},{"type":"ARTICLE","url":"https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx"}],"affected":[{"package":{"name":"aardvark-dns","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/aardvark-dns"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.module+el8.10.0+21209+52deeb51"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"buildah","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/buildah"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.module+el8.10.0+21371+46937ece"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"buildah-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/buildah-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.module+el8.10.0+21371+46937ece"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"buildah-debugsource","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/buildah-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.module+el8.10.0+21371+46937ece"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"buildah-tests","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/buildah-tests"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.module+el8.10.0+21371+46937ece"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"buildah-tests-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/buildah-tests-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.module+el8.10.0+21371+46937ece"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"cockpit-podman","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/cockpit-podman"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+21373+0d273fdf"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"conmon","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/conmon"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+21077+98b84d8a"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"conmon-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/conmon-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+21077+98b84d8a"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"conmon-debugsource","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/conmon-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+21077+98b84d8a"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"container-selinux","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/container-selinux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+21196+3f0abbca"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"containernetworking-plugins","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/containernetworking-plugins"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-2.module+el8.10.0+21366+f9cb49f8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"containernetworking-plugins-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/containernetworking-plugins-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-2.module+el8.10.0+21366+f9cb49f8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"containernetworking-plugins-debugsource","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/containernetworking-plugins-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-2.module+el8.10.0+21366+f9cb49f8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"containers-common","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/containers-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-81.module+el8.10.0+21340+c6c7475a"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"crit","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/crit"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"criu","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/criu"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"criu-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/criu-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"criu-debugsource","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/criu-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"criu-devel","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/criu-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"criu-libs","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/criu-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"criu-libs-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/criu-libs-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"crun","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/crun"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+21340+c6c7475a"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"crun-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/crun-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+21340+c6c7475a"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"crun-debugsource","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/crun-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+21340+c6c7475a"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"fuse-overlayfs","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/fuse-overlayfs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+20412+95ee28e2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"fuse-overlayfs-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/fuse-overlayfs-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+20412+95ee28e2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"fuse-overlayfs-debugsource","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/fuse-overlayfs-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+20412+95ee28e2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"libslirp","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/libslirp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+20326+387084d0"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"libslirp-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/libslirp-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+20326+387084d0"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"libslirp-debugsource","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/libslirp-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+20326+387084d0"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"libslirp-devel","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/libslirp-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+20326+387084d0"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"netavark","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/netavark"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+21306+6be40ce7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"oci-seccomp-bpf-hook","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/oci-seccomp-bpf-hook"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+20565+a40ba0e5"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"oci-seccomp-bpf-hook-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/oci-seccomp-bpf-hook-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+20565+a40ba0e5"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"oci-seccomp-bpf-hook-debugsource","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/oci-seccomp-bpf-hook-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+20565+a40ba0e5"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"podman","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/podman"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"podman-catatonit","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/podman-catatonit"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"podman-catatonit-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/podman-catatonit-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"podman-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/podman-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"podman-debugsource","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/podman-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"podman-docker","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/podman-docker"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"podman-gvproxy","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/podman-gvproxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"podman-gvproxy-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/podman-gvproxy-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"podman-plugins","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/podman-plugins"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"podman-plugins-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/podman-plugins-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"podman-remote","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/podman-remote"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"podman-remote-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/podman-remote-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"podman-tests","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/podman-tests"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"python-podman","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/python-podman"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-1.module+el8.10.0+21196+3f0abbca"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"python3-criu","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/python3-criu"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"python3-podman","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/python3-podman"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-1.module+el8.10.0+21196+3f0abbca"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"runc","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/runc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-1.module+el8.10.0+21251+62b7388c"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"runc-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/runc-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-1.module+el8.10.0+21251+62b7388c"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"runc-debugsource","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/runc-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-1.module+el8.10.0+21251+62b7388c"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"skopeo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/skopeo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.3-0.1.module+el8.10.0+21251+62b7388c"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"skopeo-tests","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/skopeo-tests"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.3-0.1.module+el8.10.0+21251+62b7388c"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"slirp4netns","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/slirp4netns"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+21306+6be40ce7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"slirp4netns-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/slirp4netns-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+21306+6be40ce7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"slirp4netns-debugsource","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/slirp4netns-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+21306+6be40ce7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"toolbox","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/toolbox"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"toolbox-debuginfo","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/toolbox-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"toolbox-debugsource","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/toolbox-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"toolbox-tests","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/toolbox-tests"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}},{"package":{"name":"udica","ecosystem":"Red Hat:enterprise_linux:8::appstream","purl":"pkg:rpm/redhat/udica"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-20.module+el8.9.0+20326+387084d0"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2024:2988.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}