Summary
[4.4.1-3.0.1]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]
[2:4.4.1-3]
- update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
(https://github.com/containers/podman/commit/e1703bb)
- Related: #2124478
[2:4.4.1-2]
- update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
(https://github.com/containers/podman/commit/0b38633)
- Related: #2124478
[2:4.4.1-1]
- update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
(https://github.com/containers/podman/commit/d4e285a)
- Related: #2124478
[2:4.4.1-0.1]
- update to the latest content of https://github.com/containers/podman/tree/v4.4
(https://github.com/containers/podman/commit/f5670f0)
- Related: #2124478
[2:4.4.0-1]
- update to podman-4.4 release
- Related: #2124478
[2:4.4.0-0.10]
- update to the latest content of https://github.com/containers/podman/tree/main
(https://github.com/containers/podman/commit/68bbdc2)
- Related: #2124478
[2:4.4.0-0.9]
- update to the latest content of https://github.com/containers/podman/tree/main
(https://github.com/containers/podman/commit/323b515)
- Related: #2124478
[2:4.4.0-0.8]
- update to the latest content of https://github.com/containers/podman/tree/main
(https://github.com/containers/podman/commit/c35e74f)
- Related: #2124478
[2:4.4.0-0.7]
- update to the latest content of https://github.com/containers/podman/tree/main
(https://github.com/containers/podman/commit/ce504bb)
- Related: #2124478
[2:4.4.0-0.6]
- add quadlet to tests
- Related: #2124478
[2:4.4.0-0.5]
- obsolete podman-catatonit in order to not to file conflict with catatonit
- Related: #2124478
[2:4.4.0-0.4]
- build v4.4.0-rc2
- Related: #2124478
[2:4.4.0-0.3]
- remove podman-machine-cni, it is now part of podman 4.0 or newer
- Related: #2124478
[2:4.4.0-0.2]
- update to the latest content of https://github.com/containers/podman/tree/main
(https://github.com/containers/podman/commit/07ba51d)
- update gvisor-tap-vsock to 0.5.0
- Related: #2124478
[2:4.4.0-0.1]
- podman-4.4.0-rc1
- update to the latest content of https://github.com/containers/podman/tree/main
(https://github.com/containers/podman/commit/f1af5b3)
- Related: #2124478
[2:4.3.1-4]
- podman shouldn't provide and file conflict with catatonit in CRB
- Resolves: #2151322
[2:4.3.1-3]
- fix 'podman manifest add' is not concurrent safe
- Resolves: #2105173
[2:4.3.1-2]
- properly obsolete catatonit
- Resolves: #2123319
[2:4.3.1-1]
- update to https://github.com/containers/podman/releases/tag/v4.3.1
- Related: #2124478
[2:4.3.0-2]
- rebuild to fix CVE-2022-30629
- Related: #2102994
[2:4.3.0-1]
- update to https://github.com/containers/podman/releases/tag/v4.3.0
- Related: #2124478
[2:4.2.0-3]
- fix dependency in test subpackage
- Related: #2061316
[2:4.2.0-2]
- readd catatonit
- Related: #2061316
[2:4.2.0-1]
- update to latest content of https://github.com/containers/podman/releases/tag/4.2.0
(https://github.com/containers/podman/commit/7fe5a419cfd2880df2028ad3d7fd9378a88a04f4)
- Related: #2061316
[2:4.2.0-0.3rc3]
- require catatonit for gating tests
- Related: #2061316
[2:4.2.0-0.2rc3]
- update to 4.2.0-rc3
- Related: #2061316
[2:4.2.0-0.1rc2]
- update to 4.2.0-rc2
- Related: #2061316
[2:4.1.1-6]
- convert catatonit dependency to soft dep as catatonit is
no longer in Appstream but in CRB
- Related: #2061316
[2:4.1.1-5]
- rebuild for combined gating with catatonit
- Related: #2097694
[2:4.1.1-4]
- catatonit is now a standalone package
- Related: #2097694
[2:4.1.1-3]
- update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
(https://github.com/containers/podman/commit/fa692a6)
- Related: #2097694
[2:4.1.1-2]
- be sure podman services/sockets are stopped upon package removal
- Related: #2061316
[2:4.1.1-1]
- update to https://github.com/containers/podman/releases/tag/v4.1.1
- Related: #2061316
[2:4.1.0-4]
- don't require runc and Recommends: crun
- Related: #2061316
[2:4.1.0-3]
- Re-enable LTO and debuginfo
- Related: #2061316
[2:4.1.0-2]
- update gvisor-tap-vsock to 0.2.0 to fix compilation with golang 1.18
- Related: #2061316
[2:4.1.0-1]
- update to https://github.com/containers/podman/releases/tag/v4.1.0
- Related: #2061316
[2:4.0.3-2]
- require netavark and move CNI to soft dependencies
- Related: #2061316
[2:4.0.3-1]
- update to https://github.com/containers/podman/releases/tag/v4.0.3
- Related: #2061316
[2:4.0.2-3]
- bump minimal libseccomp version requirement
- Related: #2061316
[2:4.0.2-2]
- rebuilt with golang >= 1.17.5 (CVE-2021-44716, CVE-2021-44717)
- Related: #2061316
[2:4.0.2-1]
- update to https://github.com/containers/podman/releases/tag/v4.0.2
- Related: #2059681
[2:4.0.1-1]
- update to https://github.com/containers/podman/releases/tag/v4.0.1
- Related: #2000051
[2:4.0.0-6]
- set catatonit cflags after configure step, don't explicitly set ldflags
- Related: #2054115
[2:4.0.0-5]
- revert previous change and run set_build_flags before the build process
- Related: #2054115
[2:4.0.0-4]
- add -D_FORTIFY_SOURCE=2 for podman-catatonit
- Related: #2054115
[2:4.0.0-3]
- depend on containers-common >= 2:1-28
- Related: #2000051
[2:4.0.0-2]
- use correct commit 49f8da72 for podman, previous commit said 4.0.1-dev
- Related: #2000051
[2:4.0.0-1]
- update to podman-4.0.0 release
- Related: #2000051
[2:4.0.0-0.32]
- update to the latest content of https://github.com/containers/podman/tree/v4.0
(https://github.com/containers/podman/commit/a34f279)
- Related: #2000051
[2:4.0.0-0.31]
- update to the latest content of https://github.com/containers/podman/tree/v4.0
(https://github.com/containers/podman/commit/ab3e566)
- Related: #2000051
[2:4.0.0-0.30]
- fix linker flags to assure -D_FORTIFY_SOURCE=2 is present at the command line
- Related: #2000051
[2:4.0.0-0.29]
- update to the latest content of https://github.com/containers/podman/tree/v4.0
(https://github.com/container
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | podman | 2:4.4.1-3.0.1.el9 |
| Oracle Linux · 9 | podman-docker | 2:4.4.1-3.0.1.el9 |
| Oracle Linux · 9 | podman-gvproxy | 2:4.4.1-3.0.1.el9 |
| Oracle Linux · 9 | podman-plugins | 2:4.4.1-3.0.1.el9 |
| Oracle Linux · 9 | podman-remote | 2:4.4.1-3.0.1.el9 |
| Oracle Linux · 9 | podman-tests | 2:4.4.1-3.0.1.el9 |
Vulnerabilities 2
-
Medium 5.3CVE-2022-41717 Public exploit
Excessive memory growth in net/http and golang.org/x/net/http2
An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large…
-
Low 3.1
Session tickets lack random ticket_age_add in crypto/tls
Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.