Summary
[5.8.2-1.0.2]
- Rebuild on new golang to support experimental GODEBUG fipsnoenforceems
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]
[6:5.8.2-1]
- update to https://github.com/containers/podman/releases/tag/v5.8.2
- fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE
- Resolves: RHEL-165040
[6:5.8.1-3]
- revert sequoia - only available in RHEL10
- Related: RHEL-164019
[6:5.8.1-2]
- enable sequoia
- Resolves: RHEL-164019
[6:5.8.1-1]
- update to https://github.com/containers/podman/releases/tag/v5.8.1
- fixes podman restart policy unless-stopped does not behave exactly as always despite the man page saying they are identical - [RHEL-9.8] [0day]
- Resolves: RHEL-157746
[6:5.8.0-1]
- update to https://github.com/containers/podman/releases/tag/v5.8.0
- Related: RHEL-111919
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | podman | 6:5.8.2-1.0.2.el9_8 |
| Oracle Linux · 9 | podman-docker | 6:5.8.2-1.0.2.el9_8 |
| Oracle Linux · 9 | podman-plugins | 6:5.8.2-1.0.2.el9_8 |
| Oracle Linux · 9 | podman-remote | 6:5.8.2-1.0.2.el9_8 |
| Oracle Linux · 9 | podman-tests | 6:5.8.2-1.0.2.el9_8 |
Vulnerabilities 1
-
High 7.5
Go JOSE affect by a panic in JWE decryption
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JS…