ALBA-2019:1956 container-tools:rhel8 bug fix update

Not scored Published

Bug fixes for container tools address resource leaks and performance issues, potentially preventing local denial of service.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is ALBA-2019:1956?

ALBA-2019:1956 is a vulnerability in oci-systemd-hook, published on 30 Jul 2019. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Bug Fix(es):

  • podman exec rc-code needs to distinguish between stopped containers and non existing ones (BZ#1723470)

  • Performance Problems with Podman on systems with IO load (BZ#1724522)

  • podman exec leaks an exec_pid_<hash> file for every exec in tmpfs (BZ#1731270)

Which versions are affected by ALBA-2019:1956?

Linux distribution packages (6)
oci-systemd-hook AlmaLinux:8All versions1:0.1.15-2.git2d0b8a3.module_el8.3.0+2044+12421f43
oci-systemd-hook AlmaLinux:8All versions1:0.1.15-2.git2d0b8a3.module_el8.4.0+2496+12421f43
oci-systemd-hook AlmaLinux:8All versions1:0.1.15-2.git2d0b8a3.module_el8.5.0+119+9a9ec082
oci-umount AlmaLinux:8All versions2:2.3.4-2.git87f9237.module_el8.3.0+2044+12421f43
oci-umount AlmaLinux:8All versions2:2.3.4-2.git87f9237.module_el8.4.0+2496+12421f43
oci-umount AlmaLinux:8All versions2:2.3.4-2.git87f9237.module_el8.5.0+119+9a9ec082

How do I fix ALBA-2019:1956?

Upgrade to a fixed version.

Is ALBA-2019:1956 being exploited?

There is no known exploitation of ALBA-2019:1956 in the wild and no public exploit code.

Sources

Is ALBA-2019:1956 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free