Skip to content
OpenAdvisories
Medium ELSA-2024-9102 4 CVEs

Moderate: podman security update (Oracle Linux 9)

Published Nov 14, 2024 · Updated Nov 14, 2024

Summary

[5.2.2-1.0.2]
- Bump epoch to ensure upgrade path [Orabug: 37240207]

[5.2.2-1.0.1]
- Add devices on container startup, not on creation
- overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]

[2:5.2.2-1]
- update to https://github.com/containers/podman/releases/tag/v5.2.2
- Related: RHEL-27608

[2:5.2.1-1]
- update to https://github.com/containers/podman/releases/tag/v5.2.1
- Related: RHEL-27608

[2:5.2.0-2]
- Add PODMAN_TESTING definition
- Related: RHEL-27608

[2:5.2.0-1]
- update to https://github.com/containers/podman/releases/tag/v5.2.0
- Related: RHEL-27608

[2:5.1.2-1]
- update to https://github.com/containers/podman/releases/tag/v5.1.2
- Related: RHEL-27608

[2:5.1.1-1]
- update to https://github.com/containers/podman/releases/tag/v5.1.1
- Related: RHEL-27608

[2:5.1.0-1]
- update to https://github.com/containers/podman/releases/tag/v5.1.0
- Related: RHEL-27608

[2:5.0.3-1]
- update to https://github.com/containers/podman/releases/tag/v5.0.3
- Related: RHEL-27608

[2:5.0.2-1]
- update to https://github.com/containers/podman/releases/tag/v5.0.2
- Related: RHEL-27608

[2:5.0.1-2]
- Add requires to passt
- Related: RHEL-27608

[2:5.0.1-1]
- update to https://github.com/containers/podman/releases/tag/v5.0.1
- Related: RHEL-27608

[2:5.0.0-3]
- Add missing scripts
- Related: RHEL-27608

[2:5.0.0-2]
- update to latest content of https://github.com/containers/podman/releases/tag/5.0.0
(https://github.com/containers/podman/commit/e71ec6f1d94d2d97fb3afe08aae0d8adaf8bddf0)
- Related: RHEL-27608

[2:5.0.0-1]
- update to https://github.com/containers/podman/releases/tag/v5.0.0
- Related: RHEL-27608

[2:4.9.4-0.2]
- update to the latest content of https://github.com/containers/podman/tree/v4.9
(https://github.com/containers/podman/commit/3ae0197)
- Related: RHEL-27608

[2:4.9.4-0.1]
- update to the latest content of https://github.com/containers/podman/tree/v4.9
(https://github.com/containers/podman/commit/4b69d93)
- Related: RHEL-2112

[2:4.9.3-0.1]
- update to the latest content of https://github.com/containers/podman/tree/v4.9
(https://github.com/containers/podman/commit/b8a887c)
- Related: RHEL-2112

[2:4.9.2-1]
- update to the latest content of https://github.com/containers/podman/tree/v4.9
(https://github.com/containers/podman/commit/4c14019)
- Related: RHEL-2112

[2:4.9.1-1]
- switch to v4.9.1-rhel branch
- update dnsname to the latest commit
- Related: Jira:RHEL-2112

[2:4.9.0-1]
- update to https://github.com/containers/podman/releases/tag/v4.9.0
- Related: RHEL-2112

[2:4.8.3-1]
- update to https://github.com/containers/podman/releases/tag/v4.8.3
- Related: RHEL-2112

[2:4.8.2-1]
- update to https://github.com/containers/podman/releases/tag/v4.8.2
- Related: RHEL-2112

[2:4.8.1-1]
- update to latest content of https://github.com/containers/podman/releases/tag/4.8.1
- Related: Jira:RHEL-2112

[2:4.7.2-3]
- Rebuild for following CVEs:
CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322
- Related: Jira:RHEL-2785

[2:4.7.2-2]
- update to latest content of https://github.com/containers/podman/releases/tag/4.7.2
(https://github.com/containers/podman/commit/750b4c3a7c31f6573350f0b3f1b787f26e0fe1e3)
- Related: Jira:RHEL-2112

[2:4.7.2-1]
- update to https://github.com/containers/podman/releases/tag/v4.7.2
- remove gvisor from podman and depend on external one
- Related: Jira:RHEL-2112

[2:4.6.1-6]
- update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
(https://github.com/containers/podman/commit/68e7ae0)
- Related: Jira:RHEL-2112

[2:4.6.1-5]
- update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
(https://github.com/containers/podman/commit/ea33dce)
- Related: #2176063

[2:4.6.1-4]
- amend podmansh provides
- Related: #2176063

[2:4.6.1-3]
- update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
(https://github.com/containers/podman/commit/8bb0204)
- Related: #2176063

[2:4.6.1-2]
- update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
(https://github.com/containers/podman/commit/1b2fadd)
- Resolves: #2232127

[2:4.6.1-1]
- update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
- Related: #2176063

[2:4.6.0-3]
- build podman 4.6.0 off main branch for early testing of zstd compression
- Related: #2176063

[2:4.6.0-2]
- update license token to be SPDX compatible
- Related: #2176063

[2:4.6.0-1]
- update to latest content of https://github.com/containers/podman/releases/tag/4.6.0
(https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae)

[2:4.6.0-0.3]
- rebuild with the new bats
- Related: #2176063

[2:4.6.0-0.2]
- update to 4.6.0-rc2
- Related: #2176063

[2:4.6.0-0.1]
- update to 4.6.0-rc1
- Related: #2176063

[2:4.5.1-5]
- rebuild for following CVEs:
CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
- Resolves: #2175071
- Resolves: #2179950
- Resolves: #2187318
- Resolves: #2187366
- Resolves: #2203681
- Resolves: #2207512

[2:4.5.1-4]
- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.6.1
- Related: #2176063

[2:4.5.1-3]
- rebuild for following CVEs:
CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
- Resolves: #2175074
- Resolves: #2179966
- Resolves: #2187322
- Resolves: #2187383
- Resolves: #2203702
- Resolves: #2207522

[2:4.5.1-2]
- rebuild
- Resolves: #2177611

[2:4.5.1-1]
- update to https://github.com/containers/podman/releases/tag/v4.5.1
- Related: #2176063

[2:4.5.0-1]
- update to 4.5.0
- Related: #2176063

[2:4.4.1-10]
- build and add missing docker man pages
- Resolves: #2187187

[2:4.4.1-9]
- update to the latest content of https://g

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 9 podman 4:5.2.2-1.0.2.el9
Oracle Linux · 9 podman-docker 4:5.2.2-1.0.2.el9
Oracle Linux · 9 podman-plugins 4:5.2.2-1.0.2.el9
Oracle Linux · 9 podman-remote 4:5.2.2-1.0.2.el9
Oracle Linux · 9 podman-tests 4:5.2.2-1.0.2.el9

Vulnerabilities 4