Summary
[5.2.2-15.0.1]
- podman: do not set rlimits to the default value [Orabug: 37310981]
- Add devices on container startup, not on creation
- overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]
[4:5.2.2-15]
- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
(https://github.com/containers/podman/commit/a2d774c)
- fixes 'Excessive memory leak due to uncontrolled accumulation of health.log entries in Podman 5.x - [RHEL 9.5] Zstream'
- Resolves: RHEL-83558
[4:5.2.2-14]
- update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
(https://github.com/containers/podman/commit/ea1bef4)
- fixes 'CVE-2025-22869 podman: Potential denial of service in golang.org/x/crypto [rhel-9.5.z]'
- Resolves: RHEL-81318
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | podman | 4:5.2.2-15.0.1.el9_5 |
| Oracle Linux · 9 | podman-docker | 4:5.2.2-15.0.1.el9_5 |
| Oracle Linux · 9 | podman-plugins | 4:5.2.2-15.0.1.el9_5 |
| Oracle Linux · 9 | podman-remote | 4:5.2.2-15.0.1.el9_5 |
| Oracle Linux · 9 | podman-tests | 4:5.2.2-15.0.1.el9_5 |
Vulnerabilities 1
-
High 7.5
Potential denial of service in golang.org/x/crypto
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.