Summary
slirp4netns
[1.2.3-1]
- update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3
- Related: Jira:RHEL-2110
[1.2.2-1]
- update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2
- Related: Jira:RHEL-2110
[1.2.1-1]
- update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.1
- Related: #2176055
[1.2.0-3]
- BuildRequires: /usr/bin/go-md2man
- Related: #2176055
[1.2.0-2]
- BuildRequires: /usr/bin/go-md2man
- Related: #2061390
[1.2.0-1]
- update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.0
- Related: #2061390
[1.1.8-2]
- fix gating - don't use insecure functions - thanks to Marc-Andre Lureau
- Related: #2001445
[1.1.8-1]
- update to
https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
- Related: #1883490
[1.1.7-2]
- exclude i686 because of build failures
- Related: #1883490
[1.1.7-1]
- update to
https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
- Related: #1883490
udica
[0.2.6-21]
- bump release to preserve update path
- Resolves: RHEL-32671
[0.2.6-20]
- bump release to preserve update path
- Related: #2139052
[0.2.6-4]
- Bump release to match latest release available in rhel-8.6.1
- Resolves: #2139052
[0.2.6-3]
- Make sure each section of the inspect exists before accessing (#2027662)
[0.2.6-2]
- Require container-selinux shipping policy templates (#2005866)
[0.2.6-1]
- update to https://github.com/containers/udica/releases/tag/v0.2.6
- Related: #2001445
[0.2.5-2]
- New rebase https://github.com/containers/udica/releases/tag/v0.2.5 (#1995041)
- Replace capability dictionary with str.lower()
- Enable udica to generate policies with fifo class
- Sort container inspect data before processing
- Update templates to work properly with new cil parser
- Related: #1934415
[0.2.5-1]
- update to https://github.com/containers/udica/releases/tag/v0.2.5
- Related: #1934415
[0.2.4-2]
- remove %check again and all related BRs
- Related: #1934415
[0.2.4-1]
- update to https://github.com/containers/udica/releases/tag/v0.2.4
- Related: #1883490
Fixed packages 32
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | buildah | 2:1.33.12-2.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | buildah-tests | 2:1.33.12-2.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | cockpit-podman | 0:84.1-1.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | conmon | 3:2.1.10-1.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | containernetworking-plugins | 1:1.4.0-6.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | containers-common | 2:1-82.0.1.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | crit | 0:3.18-5.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | criu | 0:3.18-5.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | criu-devel | 0:3.18-5.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | criu-libs | 0:3.18-5.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | crun | 0:1.14.3-2.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | libslirp | 0:4.4.0-2.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | libslirp-devel | 0:4.4.0-2.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | netavark | 2:1.10.3-1.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | podman | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | podman-catatonit | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | podman-docker | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | podman-gvproxy | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | podman-plugins | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | podman-remote | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | podman-tests | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | python3-criu | 0:3.18-5.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | python3-podman | 0:4.9.0-3.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | runc | 4:1.2.5-2.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | skopeo | 2:1.14.5-4.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | skopeo-tests | 2:1.14.5-4.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | slirp4netns | 0:1.2.3-1.module+el8.10.0+90704+e5ea1250 |
| Oracle Linux · 8 | udica | 0:0.2.6-21.module+el8.10.0+90704+e5ea1250 |
Vulnerabilities 3
-
High 8.4
container escape due to /dev/console mount and related races
runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0-rc.2, due to insufficient checks when bind-mounting `/dev/pts/$n` to `/dev/cons…
-
High 7.3CVE-2025-31133 Public exploit
runc container escape via "masked path" abuse due to mount race conditions
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount…
-
High 7.3CVE-2025-52881 Public exploit
runc: LSM labels can be bypassed with malicious config using dummy procfs files
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a racing container with s…