Summary
buildah
[1.9.0-5.0.1]
- Fixes troubles with oracle registry login [Orabug: 29937283]
[1.9.0-5]
- Use autosetup macro again.
[1.9.0-4]
- Fix CVE-2019-10214 (#1734653).
[1.9.0-3]
- Resolves: #1721247 - enable fips mode
[1.9.0-2]
- Resolves: #1720654 - tests subpackage depends on golang explicitly
[1.9.0-1]
- Resolves: #1720654 - rebase to v1.9.0
cockpit-podman
[4-1]
- Fix regression in container commit
- Fix AppStream ID rhbz#1734809
[3-1]
- Enable Commit button for running containers
- Fix race condition with container deletion
- Stop fetching all containers/images for each container/image event
[2-2]
- Fix podman dependency
[2-1]
- Update to upstream 2 release
- Support podman API 1.3
- Support running commands with arguments
- Show the default command coming from image
- Implement filtering of images and containers
containernetworking-plugins
[0.8.1-3.0.1]
- Disable debuginfo
[0.8.1-3]
- rebuild to address CVE-2019-9514 and CVE-2019-9512
- Resolves: #1766318, #1766217
container-selinux
[2:2.123.0-1]
- update to 2.123.0
- Related: #1774382
fuse-overlayfs
[0.4.1-1]
- Resolves: #1720654 - rebase to v0.4.1
[0.3-2]
- rebase
- Resolves:#1666510
podman
[1.4.2-6.0.1]
- Ensure patch for Oracle docker registry is applied [Orabug: 30533101]
- delivering fix for [Orabug: 29874238] by Nikita Gerasimov <nikita.gerasimov@oracle.com>
[1.4.2-6]
- update to 1.4.2-stable3
- Resolves: #1770176
python-podman-api
[1.2.0-0.1.gitd0a45fe]
- Initial package
runc
[1.0.0-61.rc8]
- backport patches for CVE-2019-16884 from upstream
- Resolves: #1764182
skopeo
[1:0.1.37-6.0.1]
- Ensure patch for Oracle docker registry is applied [Orabug: 30533101]
- Add oracle registry into the conf file [Orabug: 29845934]
- Fix oracle registry login issues [Orabug: 29937192]
[1:0.1.37-6]
- rebuild because of CVE-2019-9512 and CVE-2019-9514
- Resolves: #1772136, #1772131
slirp4netns
[0.3.0-4]
- Fix CVE-2019-14378 (#1755595).
[0.3.0-3]
- Resolves: #1683217 - BR: glib2-devel
[0.3.0-2]
- Resolves: #1683217 - bump slirp4netns to v0.3.0
[0.3.0-1.alpha.2.git30883b5]
- bump to v0.3.0-alpha.2
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | buildah | 0:1.9.0-5.0.1.module+el8.1.0+5440+994fc847 |
| Oracle Linux · 8 | buildah-tests | 0:1.9.0-5.0.1.module+el8.1.0+5440+994fc847 |
| Oracle Linux · 8 | cockpit-podman | 0:4-1.module+el8.1.0+5440+994fc847 |
| Oracle Linux · 8 | container-selinux | 2:2.123.0-2.module+el8.1.0+5460+5d763c32 |
| Oracle Linux · 8 | containernetworking-plugins | 0:0.8.1-3.0.1.module+el8.1.0+5460+5d763c32 |
| Oracle Linux · 8 | containers-common | 1:0.1.37-6.0.1.module+el8.1.0+5460+5d763c32 |
| Oracle Linux · 8 | fuse-overlayfs | 0:0.4.1-1.module+el8.1.0+5440+994fc847 |
| Oracle Linux · 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module+el8.1.0+5440+994fc847 |
| Oracle Linux · 8 | oci-umount | 2:2.3.4-2.git87f9237.module+el8.1.0+5440+994fc847 |
| Oracle Linux · 8 | podman | 0:1.4.2-6.0.1.module+el8.1.0+5460+5d763c32 |
| Oracle Linux · 8 | podman-docker | 0:1.4.2-6.0.1.module+el8.1.0+5460+5d763c32 |
| Oracle Linux · 8 | podman-manpages | 0:1.4.2-6.0.1.module+el8.1.0+5460+5d763c32 |
| Oracle Linux · 8 | podman-remote | 0:1.4.2-6.0.1.module+el8.1.0+5460+5d763c32 |
| Oracle Linux · 8 | podman-tests | 0:1.4.2-6.0.1.module+el8.1.0+5460+5d763c32 |
| Oracle Linux · 8 | python-podman-api | 0:1.2.0-0.1.gitd0a45fe.module+el8.1.0+5440+994fc847 |
| Oracle Linux · 8 | runc | 0:1.0.0-61.rc8.module+el8.1.0+5460+5d763c32 |
| Oracle Linux · 8 | skopeo | 1:0.1.37-6.0.1.module+el8.1.0+5460+5d763c32 |
| Oracle Linux · 8 | skopeo-tests | 1:0.1.37-6.0.1.module+el8.1.0+5460+5d763c32 |
| Oracle Linux · 8 | slirp4netns | 0:0.3.0-4.module+el8.1.0+5440+994fc847 |
Vulnerabilities 3
-
High 7.5
Incorrect Authorization in runc
runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory.
-
High 7.5CVE-2019-9512 EPSS 83%
Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service
Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is qu…
-
High 7.5CVE-2019-9514 EPSS 83%
Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service
Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depe…