Summary
[6:5.4.0-10.0.1]
- Add devices on container startup, not on creation
- overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]
[6:5.4.0-10]
- rebuild to resolve CVE-2025-22871
- Pick latest f rom https://github.com/containers/podman/tree/v5.4-rhel
https://github.com/containers/podman/commit/0ee1d49
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | podman | 6:5.4.0-10.0.1.el10_0 |
| Oracle Linux · 10 | podman-docker | 6:5.4.0-10.0.1.el10_0 |
| Oracle Linux · 10 | podman-remote | 6:5.4.0-10.0.1.el10_0 |
| Oracle Linux · 10 | podman-tests | 6:5.4.0-10.0.1.el10_0 |
Vulnerabilities 2
-
High 7.5
Potential denial of service in golang.org/x/crypto
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.
-
Medium 6.6
Go JOSE's Parsing Vulnerable to Denial of Service
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. In versions on the 4.x branch prior to ve…