Summary
aardvark-dns
buildah
[1:1.31.3-3.0.1]
- Rebuild with newer dependencies
cockpit-podman
conmon
containernetworking-plugins
[1:1.3.0-8.0.1]
- Rebuild with newer dependencies
containers-common
[2:1-70.0.2]
- Rebuild with newer dependencies
container-selinux
criu
crun
fuse-overlayfs
libslirp
netavark
[2:1.7.0-2]
- update to https://github.com/containers/netavark/releases/tag/v1.7.0-rhel
oci-seccomp-bpf-hook
podman
[3:4.6.1-8.0.1]
- update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
python-podman
[4.6.0-2.0.1]
- Rebuild with newer dependencies
runc
[1:1.1.12-1]
- update to https://github.com/opencontainers/runc/releases/tag/v1.1.12
- Related: Jira:RHEL-2110
[1:1.1.11-1]
- update to https://github.com/opencontainers/runc/releases/tag/v1.1.11
- Related: Jira:RHEL-2110
[1:1.1.10-1]
- update to https://github.com/opencontainers/runc/releases/tag/v1.1.10
- require container-selinux >= 2.224.0 for dmz feature
- Related: Jira:RHEL-2110
skopeo
[2:1.13.3-3.0.1]
- Rebuild with newer dependencies
slirp4netns
udica
Fixed packages 32
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | aardvark-dns | 2:1.7.0-1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | buildah | 1:1.31.3-3.0.1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | buildah-tests | 1:1.31.3-3.0.1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | cockpit-podman | 0:75-1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | conmon | 3:2.1.8-1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | container-selinux | 2:2.221.0-1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | containernetworking-plugins | 1:1.3.0-8.0.1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | containers-common | 2:1-70.0.2.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | crit | 0:3.18-4.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | criu | 0:3.18-4.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | criu-devel | 0:3.18-4.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | criu-libs | 0:3.18-4.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | crun | 0:1.8.7-1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | fuse-overlayfs | 0:1.12-1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | libslirp | 0:4.4.0-1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | libslirp-devel | 0:4.4.0-1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | netavark | 2:1.7.0-2.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | oci-seccomp-bpf-hook | 0:1.2.9-1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | podman | 3:4.6.1-8.0.1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | podman-catatonit | 3:4.6.1-8.0.1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | podman-docker | 3:4.6.1-8.0.1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | podman-gvproxy | 3:4.6.1-8.0.1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | podman-plugins | 3:4.6.1-8.0.1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | podman-remote | 3:4.6.1-8.0.1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | podman-tests | 3:4.6.1-8.0.1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | python3-criu | 0:3.18-4.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | python3-podman | 0:4.6.0-2.0.1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | runc | 1:1.1.12-1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | skopeo | 2:1.13.3-3.0.1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | skopeo-tests | 2:1.13.3-3.0.1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | slirp4netns | 0:1.2.1-1.module+el8.9.0+90147+a4870853 |
| Oracle Linux · 8 | udica | 0:0.2.6-20.module+el8.9.0+90147+a4870853 |
Vulnerabilities 1
-
High 8.6
runc container breakout through process.cwd trickery and leaked fds
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a worki…