Summary
buildah
[1.16.7-4.0.1]
- Handling redirect from the docker registry [Orabug: 29874238] (Nikita Gerasimov)
[1.16.7-4]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.16
(https://github.com/containers/buildah/commit/aaed66b)
- Related: #1888571
[1.16.7-3]
- revert back to buildah-1.16 for the quarterly release
- Related: #1888571
[1.19.0-2]
- bump version to refrect buildah upgrade
- Related: #1888571
[1.16.7-2]
- bump to release-1.19 branch
- Related: #1888571
[1.16.5-5]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.16
(https://github.com/containers/buildah/commit/56ed75b)
- Related: #1888571
[1.16.5-4]
- simplify spec file
- use short commit ID in tarball name
- Related: #1888571
[1.16.5-3]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.16
(https://github.com/containers/buildah/commit/9e02bf9)
- Related: #1888571
[1.16.5-2]
- use shortcommit ID in branch tarball name
- Related: #1888571
[1.16.5-1]
- synchronize with stream-container-tools-rhel8-rhel-8.4.0
- Related: #1888571
cockpit-podman
[27.1-3]
- run much more tests - patch from Matej Marusak
- Related: #1888571
[27.1-2]
- gating tests - always set VM password
- Related: #1888571
[27.1-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/27.1
- Related: #1888571
[27-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/27
- Related: #1888571
[26-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/26
- Related: #1888571
[25-5]
- remove redundant patch
- Related: #1888571
[25-4]
- replace docker.io with quay.io for gating tests due do
docker.io new pull rate limit requirements
- Related: #1888571
[25-3]
- test: Cleanup images before pulling the ones we need - thanks to Matej Marusak
- Related: #1888571
[25-2]
- remove hack in tests
- add LICENSE
- Related: #1888571
[25-1]
- synchronize with stream-container-tools-rhel8-rhel-8.4.0
- Related: #1888571
conmon
[2:2.0.22-3]
- exclude i686 as golang is not suppoerted there
- Related: #1888571
[2:2.0.22-2]
- add BR: golang, go-md2man
- add man pages
- Related: #1888571
[2:2.0.22-1]
- update to https://github.com/containers/conmon/releases/tag/v2.0.22
- Related: #1888571
[2:2.0.21-3]
- simplify spec
- Related: #1888571
[2:2.0.21-2]
- be sure to harden the linked binary
- compile with debuginfo enabled
- Related: #1888571
[2:2.0.21-1]
- synchronize with stream-container-tools-rhel8-rhel-8.4.0
- Related: #1888571
containernetworking-plugins
[0.9.0-1]
- update to https://github.com/containernetworking/plugins/releases/tag/v0.9.0
- Related: #1888571
container-selinux
[2:2.155.0-1]
- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0
- Related: #1888571
[2:2.154.0-1]
- update to
https://github.com/containers/container-selinux/releases/tag/v2.154.0
- Related: #1888571
[2:2.153.0-1]
- update to
https://github.com/containers/container-selinux/releases/tag/v2.153.0
- Related: #1888571
[2:2.152.0-1]
- update to
https://github.com/containers/container-selinux/releases/tag/v2.152.0
- Related: #1888571
[2:2.151.0-1]
- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0
- Related: #1888571
[2:2.150.0-1]
- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0
- Related: #1888571
[2:2.145.0-1]
- synchronize with stream-container-tools-rhel8-rhel-8.4.0
- Resolves: #1873064
criu
[3.15-1]
- update to https://github.com/checkpoint-restore/criu/releases/tag/v3.15
- Related: #1888571
[3.14-2]
- fix 'Need to fix bugs found by coverity.'
- Related: #1821193
[3.14-1]
- synchronize containter-tools 8.3.0 with 8.2.1
- Related: #1821193
crun
[0.16-2]
- exclude i686 because of build failures
- Related: #1888571
[0.16-1]
- update to https://github.com/containers/crun/releases/tag/0.16
- Related: #1888571
[0.15.1-1]
- update to https://github.com/containers/crun/releases/tag/0.15.1
- Related: #1888571
[0.15-2]
- backport 'exec: check read bytes from sync' (gscrivan@redhat.com)
(https://github.com/containers/crun/issues/511)
- Related: #1888571
[0.15-1]
- synchronize with stream-container-tools-rhel8-rhel-8.4.0
- Related: #1888571
fuse-overlayfs
[1.3.0-2]
- disable openat2 syscall again - still unsupported in current RHEL8 kernel
- Resolves: #1921863
[1.3.0-1]
- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.3.0
- Related: #1888571
[1.2.0-3]
- be sure to harden the linked binary
- Related: #1888571
[1.2.0-2]
- ensure fuse module is loaded
- Related: #1888571
[1.2.0-1]
- synchronize with stream-container-tools-rhel8-rhel-8.4.0
- Related: #1888571
libslirp
oci-seccomp-bpf-hook
[1.2.0-1]
- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.0
- Related: #1888571
podman
[2.2.1-7.0.1]
- Handling redirect from the docker registry [Orabug: 29874238] (Nikita Gerasimov)
[2.2.1-7]
- Resolves: #1925928 - Fix varlink GetVersion()
- Upstream PR: https://github.com/containers/podman/pull/9274
[2.2.1-6]
- update to the latest content of https://github.com/containers/podman/tree/v2.2.1-rhel
(https://github.com/containers/podman/commit/1741f15)
- Related: #1888571
[2.2.1-5]
- update to the latest content of https://github.com/containers/podman/tree/v2.2.1-rhel
(https://github.com/containers/podman/commit/b5bc6a7)
- Related: #1877188
[2.2.1-4]
- add Requires: oci-runtime
- Related: #1888571
[2.2.1-3]
- update to the latest content of https://github.com/containers/podman/tree/v2.2.1-rhel
(https://github.com/containers/podman/commit/14c35f6)
- Related: #1888571
[2.2.1-2]
- update to https://github.com/containers/dnsname/releases/tag/v1.1.1
[2.2.1-1]
- update to the latest content of https://github.com/containers/podman/tree/v2.2.1-rhel
(https://github.com/containers/podman/commit/a0d478e)
- Related: #1888571
[2.2.0-2]
- attempt to fix gatng tests
- Relate
Fixed packages 27
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | buildah | 0:1.16.7-4.0.1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | buildah-tests | 0:1.16.7-4.0.1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | cockpit-podman | 0:27.1-3.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | conmon | 2:2.0.22-3.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | container-selinux | 2:2.155.0-1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | containernetworking-plugins | 0:0.9.0-1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | containers-common | 1:1.2.0-9.0.1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | crit | 0:3.15-1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | criu | 0:3.15-1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | crun | 0:0.16-2.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | fuse-overlayfs | 0:1.3.0-2.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | libslirp | 0:4.3.1-1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | libslirp-devel | 0:4.3.1-1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | oci-seccomp-bpf-hook | 0:1.2.0-1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | podman | 0:2.2.1-7.0.1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | podman-catatonit | 0:2.2.1-7.0.1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | podman-docker | 0:2.2.1-7.0.1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | podman-plugins | 0:2.2.1-7.0.1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | podman-remote | 0:2.2.1-7.0.1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | podman-tests | 0:2.2.1-7.0.1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | python-podman-api | 0:1.2.0-0.2.gitd0a45fe.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | python3-criu | 0:3.15-1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | runc | 0:1.0.0-70.rc92.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | skopeo | 1:1.2.0-9.0.1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | skopeo-tests | 1:1.2.0-9.0.1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | slirp4netns | 0:1.1.8-1.module+el8.3.1+9659+c1901784 |
| Oracle Linux · 8 | udica | 0:0.2.4-1.module+el8.3.1+9659+c1901784 |
Vulnerabilities 1
-
Medium 5.3
Information disclosure in podman
An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible REST API, if multiple containers are created in a short duration, the environment variables from th…