Summary
[5.2.2-13.0.1]
- podman: do not set rlimits to the default value [Orabug: 37310981]
- Add devices on container startup, not on creation
- overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]
[4:5.2.2-13]
- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
(https://github.com/containers/podman/commit/173b20b)
- Resolves: RHEL-67606
[4:5.2.2-12]
- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
(https://github.com/containers/podman/commit/76d1690)
- Resolves: RHEL-73592
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | podman | 4:5.2.2-13.0.1.el9_5 |
| Oracle Linux · 9 | podman-docker | 4:5.2.2-13.0.1.el9_5 |
| Oracle Linux · 9 | podman-plugins | 4:5.2.2-13.0.1.el9_5 |
| Oracle Linux · 9 | podman-remote | 4:5.2.2-13.0.1.el9_5 |
| Oracle Linux · 9 | podman-tests | 4:5.2.2-13.0.1.el9_5 |
Vulnerabilities 1
-
High 8.6
Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile
A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enume…