Summary
aardvark-dns
buildah
[1:1.31.5-1]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.31
(https://github.com/containers/buildah/commit/5fd539c)
- Resolves: RHEL-26772
[1:1.31.3-3]
- Make the module buildable again
- Resolves: RHEL-16299
[1:1.31.3-2]
- Rebuild with golang 1.20.10 for CVE-2023-39321
- Related: Jira:RHEL-4512
cockpit-podman
conmon
containernetworking-plugins
containers-common
container-selinux
criu
crun
fuse-overlayfs
libslirp
netavark
oci-seccomp-bpf-hook
podman
python-podman
runc
skopeo
slirp4netns
udica
Fixed packages 32
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | aardvark-dns | 2:1.7.0-1.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | buildah | 1:1.31.5-1.module+el8.9.0+90314+83d0cf83 |
| Oracle Linux · 8 | buildah-tests | 1:1.31.5-1.module+el8.9.0+90314+83d0cf83 |
| Oracle Linux · 8 | cockpit-podman | 0:75-1.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | conmon | 3:2.1.8-1.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | container-selinux | 2:2.229.0-1.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | containernetworking-plugins | 1:1.3.0-8.0.1.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | containers-common | 2:1-71.0.1.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | crit | 0:3.18-4.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | criu | 0:3.18-4.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | criu-devel | 0:3.18-4.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | criu-libs | 0:3.18-4.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | crun | 0:1.8.7-1.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | fuse-overlayfs | 0:1.12-1.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | libslirp | 0:4.4.0-1.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | libslirp-devel | 0:4.4.0-1.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | netavark | 2:1.7.0-2.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | oci-seccomp-bpf-hook | 0:1.2.9-1.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | podman | 3:4.6.1-9.0.1.module+el8.9.0+90314+83d0cf83 |
| Oracle Linux · 8 | podman-catatonit | 3:4.6.1-9.0.1.module+el8.9.0+90314+83d0cf83 |
| Oracle Linux · 8 | podman-docker | 3:4.6.1-9.0.1.module+el8.9.0+90314+83d0cf83 |
| Oracle Linux · 8 | podman-gvproxy | 3:4.6.1-9.0.1.module+el8.9.0+90314+83d0cf83 |
| Oracle Linux · 8 | podman-plugins | 3:4.6.1-9.0.1.module+el8.9.0+90314+83d0cf83 |
| Oracle Linux · 8 | podman-remote | 3:4.6.1-9.0.1.module+el8.9.0+90314+83d0cf83 |
| Oracle Linux · 8 | podman-tests | 3:4.6.1-9.0.1.module+el8.9.0+90314+83d0cf83 |
| Oracle Linux · 8 | python3-criu | 0:3.18-4.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | python3-podman | 0:4.6.0-2.0.1.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | runc | 1:1.1.12-1.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | skopeo | 2:1.13.3-3.0.1.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | skopeo-tests | 2:1.13.3-3.0.1.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | slirp4netns | 0:1.2.1-1.module+el8.9.0+90281+a2e5717b |
| Oracle Linux · 8 | udica | 0:0.2.6-20.module+el8.9.0+90281+a2e5717b |
Vulnerabilities 1
-
High 8.6
Buildah: buildah: container escape via improper bind mount validation
A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mou…