{"id":"RLSA-2019:3403","summary":"Important: container-tools:rhel8 security, bug fix, and enhancement update","details":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* QEMU: slirp: heap buffer overflow during packet reassembly (CVE-2019-14378)\n\n* containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure (CVE-2019-10214)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","modified":"2026-02-05T11:00:04.438068Z","published":"2019-11-05T17:41:57Z","upstream":["CVE-2019-10214","CVE-2019-14378","CVE-2019-9946"],"references":[{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2019:3403"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1655211"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1661597"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1671023"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672581"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1674519"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1677251"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1677264"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1689255"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690514"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691543"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692513"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693154"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693424"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707220"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1719626"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1719994"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720646"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720654"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1721247"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1721638"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1723879"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728700"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730281"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1731117"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732508"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1734745"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1734809"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1737077"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1739961"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1740079"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1741157"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1743685"}],"affected":[{"package":{"name":"oci-systemd-hook","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/oci-systemd-hook?distro=rocky-linux-8&epoch=1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2019:3403.json"}},{"package":{"name":"oci-umount","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/oci-umount?distro=rocky-linux-8&epoch=2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f"}],"database_specific":{"yum_repository":"AppStream"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2019:3403.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H"}],"credits":[{"name":"Rocky Enterprise Software Foundation"},{"name":"Red Hat"}]}