An update for the container-tools:rhel8 module is now available for Red Hat
 Enterprise Linux 8.8 Extended Update Support.

Security team has rated the vulnerability impact of the fixed issues as
 Important.

The container-tools module contains tools for working with containers, notably
 podman, buildah, skopeo, and runc.

Security Fix(es):

* golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to
 parse complex tags (CVE-2022-32149)

* podman: Symlink error leads to information disclosure (CVE-2022-4122)

* buildah: full container escape at build time (CVE-2024-1753)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
 listed in the References section.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2022-4122: Improper Link Resolution Before File Access ('Link
 Following') (CWE-59)
CVE-2022-32149: Inefficient Algorithmic Complexity (CWE-407)
CVE-2024-1753: Improper Privilege Management (CWE-269)