Summary
aardvark-dns
buildah
cockpit-podman
conmon
containernetworking-plugins
containers-common
container-selinux
criu
crun
fuse-overlayfs
libslirp
netavark
oci-seccomp-bpf-hook
podman
[4.9.4-13.0.1]
- Fixes issue of container created in cgroupv2 not start in cgroupv1 [Orabug: 36136813]
- Fixes container memory limit not set after host is rebooted with cgroupv2 [Orabug: 36136802]
- Fixes issue of podman execvp error while using podmansh [Orabug: 36756665]
[4:4.9.4-13]
- update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
(https://github.com/containers/podman/commit/e3221b5)
- Resolves: RHEL-56326
python-podman
runc
skopeo
slirp4netns
udica
Fixed packages 32
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | aardvark-dns | 2:1.10.0-1.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | buildah | 2:1.33.8-4.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | buildah-tests | 2:1.33.8-4.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | cockpit-podman | 0:84.1-1.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | conmon | 3:2.1.10-1.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | containernetworking-plugins | 1:1.4.0-5.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | containers-common | 2:1-82.0.1.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | crit | 0:3.18-5.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | criu | 0:3.18-5.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | criu-devel | 0:3.18-5.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | criu-libs | 0:3.18-5.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | crun | 0:1.14.3-2.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | libslirp | 0:4.4.0-2.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | libslirp-devel | 0:4.4.0-2.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | netavark | 2:1.10.3-1.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | podman | 4:4.9.4-13.0.1.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | podman-catatonit | 4:4.9.4-13.0.1.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | podman-docker | 4:4.9.4-13.0.1.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | podman-gvproxy | 4:4.9.4-13.0.1.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | podman-plugins | 4:4.9.4-13.0.1.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | podman-remote | 4:4.9.4-13.0.1.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | podman-tests | 4:4.9.4-13.0.1.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | python3-criu | 0:3.18-5.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | python3-podman | 0:4.9.0-2.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | runc | 1:1.1.12-4.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | skopeo | 2:1.14.5-3.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | skopeo-tests | 2:1.14.5-3.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | slirp4netns | 0:1.2.3-1.module+el8.10.0+90412+9b361f34 |
| Oracle Linux · 8 | udica | 0:0.2.6-21.module+el8.10.0+90412+9b361f34 |
Vulnerabilities 5
-
High 7.5
Comments in display names are incorrectly handled in net/mail
The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions being made by programs using different parsers.
-
High 7.5
Denial of service due to improper 100-continue handling in net/http
The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next r…
-
Medium 6.5
Memory exhaustion in multipart form parsing in net/textproto and net/http
When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to the memory consumed while readi…
-
Medium 5.9
Verify panics on certificates with an unknown public key algorithm in crypto/x509
Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyC…
-
Medium 5.9
Malformed DNS message can cause infinite loop in net
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.