Summary
[5.2.2-1.0.2]
- Bump epoch to ensure upgrade path [Orabug: 37240207]
[5.2.2-1.0.1]
- Add devices on container startup, not on creation
- overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]
[2:5.2.2-1]
- update to https://github.com/containers/podman/releases/tag/v5.2.2
- Related: RHEL-27608
[2:5.2.1-1]
- update to https://github.com/containers/podman/releases/tag/v5.2.1
- Related: RHEL-27608
[2:5.2.0-2]
- Add PODMAN_TESTING definition
- Related: RHEL-27608
[2:5.2.0-1]
- update to https://github.com/containers/podman/releases/tag/v5.2.0
- Related: RHEL-27608
[2:5.1.2-1]
- update to https://github.com/containers/podman/releases/tag/v5.1.2
- Related: RHEL-27608
[2:5.1.1-1]
- update to https://github.com/containers/podman/releases/tag/v5.1.1
- Related: RHEL-27608
[2:5.1.0-1]
- update to https://github.com/containers/podman/releases/tag/v5.1.0
- Related: RHEL-27608
[2:5.0.3-1]
- update to https://github.com/containers/podman/releases/tag/v5.0.3
- Related: RHEL-27608
[2:5.0.2-1]
- update to https://github.com/containers/podman/releases/tag/v5.0.2
- Related: RHEL-27608
[2:5.0.1-2]
- Add requires to passt
- Related: RHEL-27608
[2:5.0.1-1]
- update to https://github.com/containers/podman/releases/tag/v5.0.1
- Related: RHEL-27608
[2:5.0.0-3]
- Add missing scripts
- Related: RHEL-27608
[2:5.0.0-2]
- update to latest content of https://github.com/containers/podman/releases/tag/5.0.0
(https://github.com/containers/podman/commit/e71ec6f1d94d2d97fb3afe08aae0d8adaf8bddf0)
- Related: RHEL-27608
[2:5.0.0-1]
- update to https://github.com/containers/podman/releases/tag/v5.0.0
- Related: RHEL-27608
[2:4.9.4-0.2]
- update to the latest content of https://github.com/containers/podman/tree/v4.9
(https://github.com/containers/podman/commit/3ae0197)
- Related: RHEL-27608
[2:4.9.4-0.1]
- update to the latest content of https://github.com/containers/podman/tree/v4.9
(https://github.com/containers/podman/commit/4b69d93)
- Related: RHEL-2112
[2:4.9.3-0.1]
- update to the latest content of https://github.com/containers/podman/tree/v4.9
(https://github.com/containers/podman/commit/b8a887c)
- Related: RHEL-2112
[2:4.9.2-1]
- update to the latest content of https://github.com/containers/podman/tree/v4.9
(https://github.com/containers/podman/commit/4c14019)
- Related: RHEL-2112
[2:4.9.1-1]
- switch to v4.9.1-rhel branch
- update dnsname to the latest commit
- Related: Jira:RHEL-2112
[2:4.9.0-1]
- update to https://github.com/containers/podman/releases/tag/v4.9.0
- Related: RHEL-2112
[2:4.8.3-1]
- update to https://github.com/containers/podman/releases/tag/v4.8.3
- Related: RHEL-2112
[2:4.8.2-1]
- update to https://github.com/containers/podman/releases/tag/v4.8.2
- Related: RHEL-2112
[2:4.8.1-1]
- update to latest content of https://github.com/containers/podman/releases/tag/4.8.1
- Related: Jira:RHEL-2112
[2:4.7.2-3]
- Rebuild for following CVEs:
CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322
- Related: Jira:RHEL-2785
[2:4.7.2-2]
- update to latest content of https://github.com/containers/podman/releases/tag/4.7.2
(https://github.com/containers/podman/commit/750b4c3a7c31f6573350f0b3f1b787f26e0fe1e3)
- Related: Jira:RHEL-2112
[2:4.7.2-1]
- update to https://github.com/containers/podman/releases/tag/v4.7.2
- remove gvisor from podman and depend on external one
- Related: Jira:RHEL-2112
[2:4.6.1-6]
- update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
(https://github.com/containers/podman/commit/68e7ae0)
- Related: Jira:RHEL-2112
[2:4.6.1-5]
- update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
(https://github.com/containers/podman/commit/ea33dce)
- Related: #2176063
[2:4.6.1-4]
- amend podmansh provides
- Related: #2176063
[2:4.6.1-3]
- update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
(https://github.com/containers/podman/commit/8bb0204)
- Related: #2176063
[2:4.6.1-2]
- update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
(https://github.com/containers/podman/commit/1b2fadd)
- Resolves: #2232127
[2:4.6.1-1]
- update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
- Related: #2176063
[2:4.6.0-3]
- build podman 4.6.0 off main branch for early testing of zstd compression
- Related: #2176063
[2:4.6.0-2]
- update license token to be SPDX compatible
- Related: #2176063
[2:4.6.0-1]
- update to latest content of https://github.com/containers/podman/releases/tag/4.6.0
(https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae)
[2:4.6.0-0.3]
- rebuild with the new bats
- Related: #2176063
[2:4.6.0-0.2]
- update to 4.6.0-rc2
- Related: #2176063
[2:4.6.0-0.1]
- update to 4.6.0-rc1
- Related: #2176063
[2:4.5.1-5]
- rebuild for following CVEs:
CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
- Resolves: #2175071
- Resolves: #2179950
- Resolves: #2187318
- Resolves: #2187366
- Resolves: #2203681
- Resolves: #2207512
[2:4.5.1-4]
- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.6.1
- Related: #2176063
[2:4.5.1-3]
- rebuild for following CVEs:
CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
- Resolves: #2175074
- Resolves: #2179966
- Resolves: #2187322
- Resolves: #2187383
- Resolves: #2203702
- Resolves: #2207522
[2:4.5.1-2]
- rebuild
- Resolves: #2177611
[2:4.5.1-1]
- update to https://github.com/containers/podman/releases/tag/v4.5.1
- Related: #2176063
[2:4.5.0-1]
- update to 4.5.0
- Related: #2176063
[2:4.4.1-10]
- build and add missing docker man pages
- Resolves: #2187187
[2:4.4.1-9]
- update to the latest content of https://g
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | podman | 4:5.2.2-1.0.2.el9 |
| Oracle Linux · 9 | podman-docker | 4:5.2.2-1.0.2.el9 |
| Oracle Linux · 9 | podman-plugins | 4:5.2.2-1.0.2.el9 |
| Oracle Linux · 9 | podman-remote | 4:5.2.2-1.0.2.el9 |
| Oracle Linux · 9 | podman-tests | 4:5.2.2-1.0.2.el9 |
Vulnerabilities 4
-
High 8.3
Containers/image: digest type does not guarantee valid type
A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.
-
High 7.5
Denial of service due to improper 100-continue handling in net/http
The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next r…
-
Medium 5.3
Buildah (as part of Podman) vulnerable to Link Following
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.
-
Medium 5.3
Mishandling of corrupt central directory record in archive/zip
The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file…