Summary
[4.9.4-3.0.1]
- Add devices on container startup, not on creation
- Backport fast gzip for compression [Orabug: 36420418]
- overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]
[4:4.9.4-3]
- rebuild
- Related: RHEL-28234
[4:4.9.4-2]
- bump Epoch to 4 to preserve upgrade path from rhel 8.10
- bump release tag or else it refuses to build
- Resolves: RHEL-28234
[4:4.9.4-1]
- bump Epoch to 4 to preserve upgrade path from rhel 8.10
- Resolves: RHEL-28234
[3:4.9.4-1]
- update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
(https://github.com/containers/podman/commit/7752c56)
- Resolves: RHEL-28234
[3:4.9.3-3]
- update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
(https://github.com/containers/podman/commit/5f872ae)
- Resolves: RHEL-28234
[3:4.9.3-2]
- update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
(https://github.com/containers/podman/commit/06e4598)
- Resolves: RHEL-28636
[2:4.9.3-1]
- update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
(https://github.com/containers/podman/commit/c82fdc8)
- Resolves: RHEL-28633 RHEL-28629
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | podman | 4:4.9.4-3.0.1.el9_4 |
| Oracle Linux · 9 | podman-docker | 4:4.9.4-3.0.1.el9_4 |
| Oracle Linux · 9 | podman-plugins | 4:4.9.4-3.0.1.el9_4 |
| Oracle Linux · 9 | podman-remote | 4:4.9.4-3.0.1.el9_4 |
| Oracle Linux · 9 | podman-tests | 4:4.9.4-3.0.1.el9_4 |
Vulnerabilities 2
-
High 8.6
Buildah: buildah: container escape via improper bind mount validation
A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mou…
-
High 7.5
Infinite loop in JSON unmarshaling in google.golang.org/protobuf
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown opti…