Summary
buildah
cockpit-podman
conmon
containernetworking-plugins
containers-common
container-selinux
criu
crun
fuse-overlayfs
libslirp
oci-seccomp-bpf-hook
podman
[2:4.0.2-25.0.1]
- update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
(https://github.com/containers/podman/commit/427a15f)
- Resolves: RHEL-17145
running containers
python-podman
runc
[1:1.1.12-1]
- update to https://github.com/opencontainers/runc/releases/tag/v1.1.12
- Resolves: RHEL-21863
skopeo
slirp4netns
udica
Fixed packages 32
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | aardvark-dns | 2:1.0.1-38.0.1.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | buildah | 1:1.24.6-7.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | buildah-tests | 1:1.24.6-7.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | cockpit-podman | 0:46-1.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | conmon | 2:2.1.4-2.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | container-selinux | 2:2.205.0-3.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | containernetworking-plugins | 1:1.1.1-6.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | containers-common | 2:1-38.0.1.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | crit | 0:3.15-3.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | criu | 0:3.15-3.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | criu-devel | 0:3.15-3.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | criu-libs | 0:3.15-3.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | crun | 0:1.8.7-1.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | fuse-overlayfs | 0:1.9-2.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | libslirp | 0:4.4.0-1.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | libslirp-devel | 0:4.4.0-1.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | netavark | 2:1.0.1-38.0.1.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | oci-seccomp-bpf-hook | 0:1.2.5-2.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | podman | 2:4.0.2-25.0.1.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | podman-catatonit | 2:4.0.2-25.0.1.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | podman-docker | 2:4.0.2-25.0.1.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | podman-gvproxy | 2:4.0.2-25.0.1.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | podman-plugins | 2:4.0.2-25.0.1.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | podman-remote | 2:4.0.2-25.0.1.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | podman-tests | 2:4.0.2-25.0.1.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | python3-criu | 0:3.15-3.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | python3-podman | 0:4.0.0-2.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | runc | 1:1.1.12-1.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | skopeo | 2:1.6.2-9.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | skopeo-tests | 2:1.6.2-9.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | slirp4netns | 0:1.1.8-3.module+el8.9.0+90148+6046e3c3 |
| Oracle Linux · 8 | udica | 0:0.2.6-4.module+el8.9.0+90148+6046e3c3 |
Vulnerabilities 2
-
High 8.6
runc container breakout through process.cwd trickery and leaked fds
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a worki…
-
Unscored —
Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel
Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of…