ELBA-2021-3070

ELBA-2021-3070 - container-tools:ol8 security, bug fix, and enhancement update

Type:BUG
Severity:NA
Release Date:2021-08-12

Description


buildah
[1.21.4-1.0.1]
- Fixes troubles with oracle registry login [Orabug: 29937283]

[1.21.4-1]
- add buildah-copy helper
- Related: #1954702

[1.21.3-1]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.21
(https://github.com/containers/buildah/commit/7f9540d)
- Related: #1954702

[1.21.1-2]
- 'buildah version' produces correct output
- Related: #1954702

[1.21.1-1]
- update to buildah 1.21.1 from the release-1.21 upstream branch
- Related: #1954702

[1.19.7-2]
- revert changes to the state of 3.0-8.4.0
- Related: #1954702

[1.20.2-0.2]
- update to the latest content of https://github.com/containers/buildah/tree/master
(https://github.com/containers/buildah/commit/135d63d)
- Related: #1954702

[1.20.2-0.1]
- update to the latest content of https://github.com/containers/buildah/tree/master
(https://github.com/containers/buildah/commit/22fc573)
- Related: #1954702

[1.20.1-1]
- update to https://github.com/containers/buildah/releases/tag/v1.20.1
- Related: #1954702

cockpit-podman
[32-2]
- attempt to fix gating tests - thanks for Matej Marusak
- Related: #1954702

[32-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/32
- Related: #1954702

[31-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/31
- Related: #1954702

conmon
[2:2.0.29-1]
- update to https://github.com/containers/conmon/releases/tag/v2.0.29
- Related: #1954702

[2:2.0.26-3]
- fix 'Permission on /dev/null are changing from 666 to 777 after running podman as root [rhel-8.4.0.z]'
- Resolves: #1961682

[2:2.0.26-2]
- revert back to the state of 3.0-8.4.0
- Related: #1954702

[2:2.0.27-3]
- upload new source tarball
- Related: #1954702

[2:2.0.27-2]
- switch to master branch to fix /dev/null ownership issues
(https://github.com/containers/conmon/commit/372fa19211cfeabdb2bad52a4ab8a4d1b0b0063c)
- Related: #1954702

[2:2.0.27-1]
- update to https://github.com/containers/conmon/releases/tag/v2.0.27
- Related: #1954702

container-selinux
[2:2.164.1-1]
- update to https://github.com/containers/container-selinux/releases/tag/v2.164.1
- Related: #1954702

[2:2.163.0-1]
- fix the build of 2.163.0
- Related: #1954702

crun
[0.20.1-1]
- update to https://github.com/containers/crun/releases/tag/0.20.1
- Related: #1954702

fuse-overlayfs
[1.6-1]
- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.6
- Related: #1954702

[1.4.0-3]
- revert back to the state of 3.0-8.4.0
- Related: #1954702

[1.5.0-2]
- be sure to disable openat2 syscall also with 1.5.0 - this is not supported
in RHEL8 kernel (yet)
- Related: #1954702

[1.5.0-1]
- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.5.0
- Related: #1954702

oci-seccomp-bpf-hook
[1.2.3-2]
- fix build on 8.4.0 with older bcc in buildroot
- Related: #1954702

[1.2.3-1]
- change runc dependency to conflict
- Related: #1954702

[1.2.0-2]
- revert back to 1.2.0 - build issues
- Related: #1883490

[1.2.1-1]
- update to
https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
- require crun >= 0.17
- Related: #1883490

podman
[3.2.3-0.10.0.1]
- Handling redirect from the docker registry [Orabug: 29874238] (Nikita Gerasimov)

[3.2.3-0.10]
- update to the latest content of https://github.com/containers/podman/tree/v3.2.3-rhel
(https://github.com/containers/podman/commit/78f0bd7)
- Related: #1954702

[3.2.3-0.9]
- switch to v3.2.3-rhel branch
- Related: #1954702

[3.2.3-0.8]
- update to the latest content of https://github.com/containers/podman/tree/v3.2
(https://github.com/containers/podman/commit/4136f8b)
- Related: #1954702

[3.2.3-0.7]
- update to the latest content of https://github.com/containers/podman/tree/v3.2
(https://github.com/containers/podman/commit/60d12f7)
- Related: #1954702

[3.2.3-0.6]
- update to the latest content of https://github.com/containers/podman/tree/v3.2
(https://github.com/containers/podman/commit/275b0d8)
- Related: #1954702

[3.2.3-0.5]
- install CNI manually as install.cni target is missing from the Makefile
- simplify unit file packaging
- put 87-podman-bridge.conflist to main podman package not podman-remote
- Related: #1954702

[3.2.3-0.4]
- update to the latest content of https://github.com/containers/podman/tree/v3.2
(https://github.com/containers/podman/commit/6f0bf16)
- Related: #1954702

[3.2.3-0.3]
- install CNI properly
- Related: #1954702

[3.2.3-0.2]
- remove missing unit files
- Related: #1954702

[3.2.3-0.1]
- update to the latest content of https://github.com/containers/podman/tree/v3.2
(https://github.com/containers/podman/commit/ac740c6)
- Related: #1954702

[3.2.2-2]
- don't install CNI (breaks the build)
- Related: #1954702

[3.2.2-1]
- sync with the current state of 8.5.0
- Related: #1954702

[3.2.2-2]
- update to podman 3.2.2 from v3.2 upstream branch
- Related: #1954702

[3.0.1-7]
- revert back to the state of 3.0-8.4.0
- Related: #1954702

[3.2.0-12]
- require at least conmon >= 2.0.25 to assure rootless podman is able to start containers
- Related: #1954702

[3.2.0-11]
- update to the latest content of https://github.com/containers/podman/tree/master
(https://github.com/containers/podman/commit/8dcd5b8)
- Related: #1954702

[3.2.0-10]
- update to the latest content of https://github.com/containers/podman/tree/master
(https://github.com/containers/podman/commit/57b6425)
- Related: #1954702

[3.2.0-9]
- update to the latest content of https://github.com/containers/podman/tree/master
(https://github.com/containers/podman/commit/54bed10)
- Related: #1954702

[3.2.0-8]
- update to the latest content of https://github.com/containers/podman/tree/master
(https://github.com/containers/podman/commit/034470e)
- Related: #1954702

[3.2.0-7]
- update to the latest content of https://github.com/containers/podman/tree/master
(https://github.com/containers/podman/commit/b6405c1)
- Related: #1954702

[3.2.0-6]
- update to the latest content of https://github.com/containers/podman/tree/master
(https://github.com/containers/podman/commit/ed6f399)
- Related: #1954702

[3.2.0-5]
- update to the latest content of https://github.com/containers/podman/tree/master
(https://github.com/containers/podman/commit/8eefca5)
- Related: #1954702

[3.2.0-4]
- update to the latest content of https://github.com/containers/podman/tree/master
(https://github.com/containers/podman/commit/9788289)
- Related: #1954702

[3.2.0-3]
- update to the latest content of https://github.com/containers/podman/tree/master
(https://github.com/containers/podman/commit/697ec8f)
- Related: #1954702

[3.2.0-2]
- update to the latest content of https://github.com/containers/podman/tree/master
(https://github.com/containers/podman/commit/49eb047)
- Related: #1954702

[3.2.0-1]
- update to the latest content of https://github.com/containers/podman/tree/master
(https://github.com/containers/podman/commit/db67fed)
- Related: #1954702

runc
[1.0.0-74.rc95]
- updated to rc95 to fix CVE-2021-30465
- Related: #1954702

skopeo
[1.3.1-5.0.1]
- Handling redirect from the docker registry [Orabug: 29874238] (Nikita Gerasimov)
- Add oracle registry into the conf file [Orabug: 29845934 31306708]
- Switch back to the official Oracle Linux image

[1:1.3.1-5]
- move unqualified-search-registries to [registries.search]
- Related: #1954702

[1:1.3.1-4]
- update shortnames from Pyxis
- Related: #1954702

[1:1.3.1-3]
- add direct runc dependency to avoid situation when runc is listed
as default runtime but only crun is present in RHEL8
- Related: #1954702

[1:1.3.1-2]
- update to the latest content of https://github.com/containers/skopeo/tree/release-1.3
(https://github.com/containers/skopeo/commit/038f70e)
- Related: #1954702

[1:1.3.1-1]
- sync with 8.5.0 branch
- Related: #1954702

[1:1.2.2-13]
- put back ubi8/buildah and ubi8/skopeo as it was released in 8.4
(only ubi8/podman was not)
- Related: #1972700

[1:1.2.2-12]
- remove all ubi8 references for 8.4 in 002-rhel-shortnames-overrides.conf
- Related: #1972700

[1:1.2.2-11]
- update shortnames
- Related: #1972700

[1:1.2.2-10]
- re-enable release-1.2 branch
- Related: #1954702

[1:1.2.2-9]
- revert back to state of 3.0-8.4.0
- sync shortnames with pyxis
- improve shortnames
- Related: #1954702

[1:1.2.3-2]
- update vendored components versions
- sync shortnames with pyxis
- Related: #1954702

[1:1.2.3-1]
- assure runc is set as default runtime in RHEL8
- update shortnames from upstream
- sync vendored component versions with upstream
- Related: #1954702

[1:1.2.2-8]
- use runc as default OCI runtime in RHEL8
- Resolves: #1940854

udica
[0.2.4-2]
- remove %check again and all related BRs
- Related: #1954702




Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 8 (aarch64) buildah-1.21.4-1.0.1.module+el8.4.0+20289+730b73cc.src.rpm1333c1f053070752d458a7d7a4f02755-
cockpit-podman-32-2.module+el8.4.0+20289+730b73cc.src.rpm6020855b7c21d85ab158dd0c0b160035-
conmon-2.0.29-1.module+el8.4.0+20289+730b73cc.src.rpmd1cc59d57d4d50e33c1f23c2c68b9d74-
container-selinux-2.164.1-1.module+el8.4.0+20289+730b73cc.src.rpm995d30bc6e17395a9c15b95e7ba1add8-
containernetworking-plugins-0.9.1-1.module+el8.4.0+20289+730b73cc.src.rpm24cefcbf2eab173c35688e897b442389-
criu-3.15-1.module+el8.4.0+20289+730b73cc.src.rpm6d34390d716a8d8df03fe2b2aadce8a6-
crun-0.20.1-1.module+el8.4.0+20289+730b73cc.src.rpm08fe386bd726a9bbc13362d9d6591b5e-
fuse-overlayfs-1.6-1.module+el8.4.0+20289+730b73cc.src.rpm64ab8d084f20de161ce3253a924daba3-
libslirp-4.3.1-1.module+el8.4.0+20289+730b73cc.src.rpm6d75d898c6054e24a76eaa7c53956387-
oci-seccomp-bpf-hook-1.2.3-2.module+el8.4.0+20289+730b73cc.src.rpma688d0b748820e71d5dac3b3c14ceab1-
podman-3.2.3-0.10.0.1.module+el8.4.0+20289+730b73cc.src.rpmc38f63407d375baf525c5c70b6966f12-
runc-1.0.0-74.rc95.module+el8.4.0+20289+730b73cc.src.rpmccfd2bf0f8ca17852fc53c7611e2edaa-
skopeo-1.3.1-5.0.1.module+el8.4.0+20289+730b73cc.src.rpm238cd689aa003a2b4780a02f65f552a1-
slirp4netns-1.1.8-1.module+el8.4.0+20289+730b73cc.src.rpm050f6bd0bffec32ebb32eac9871e7934-
udica-0.2.4-2.module+el8.4.0+20289+730b73cc.src.rpmdec527737f7244ddf9fe89b877e67fdb-
buildah-1.21.4-1.0.1.module+el8.4.0+20289+730b73cc.aarch64.rpm61d5bad56e2b3d2c080f4b9a666fd487-
buildah-tests-1.21.4-1.0.1.module+el8.4.0+20289+730b73cc.aarch64.rpm8d1fd81dca6c23f3efdb81ea6534421a-
cockpit-podman-32-2.module+el8.4.0+20289+730b73cc.noarch.rpmf1c7ca90afd5ac739b8e3197e8e9a91b-
conmon-2.0.29-1.module+el8.4.0+20289+730b73cc.aarch64.rpm6fea7679fc35f3e0fe66c6bdf88aa98a-
container-selinux-2.164.1-1.module+el8.4.0+20289+730b73cc.noarch.rpmf067782197c8d42930ef708efa7b9010-
containernetworking-plugins-0.9.1-1.module+el8.4.0+20289+730b73cc.aarch64.rpm2767a36e4e1f05705952c495920a9966-
containers-common-1.3.1-5.0.1.module+el8.4.0+20289+730b73cc.aarch64.rpmbeb792a2527eab8afc1d3447a6dbe0e0-
crit-3.15-1.module+el8.4.0+20289+730b73cc.aarch64.rpm98d5e38c4e3ea95e1e98eb051ec3090f-
criu-3.15-1.module+el8.4.0+20289+730b73cc.aarch64.rpmcc46057fa4305c5c108dad2100a1113c-
crun-0.20.1-1.module+el8.4.0+20289+730b73cc.aarch64.rpma82e306e7fb5928b60cd8ae94cf989df-
fuse-overlayfs-1.6-1.module+el8.4.0+20289+730b73cc.aarch64.rpm13ce5d6b3d49ccc1af28d42784ab39c0-
libslirp-4.3.1-1.module+el8.4.0+20289+730b73cc.aarch64.rpm7533575d332083328aeafb5784800a7e-
libslirp-devel-4.3.1-1.module+el8.4.0+20289+730b73cc.aarch64.rpm52c7022dbcd0c904db010d01d7f3dd7a-
oci-seccomp-bpf-hook-1.2.3-2.module+el8.4.0+20289+730b73cc.aarch64.rpm48d475c42879f2ce0a4ffd2f1f756680-
podman-3.2.3-0.10.0.1.module+el8.4.0+20289+730b73cc.aarch64.rpmf05ec138b27c5a3f2643b574fd07e461-
podman-catatonit-3.2.3-0.10.0.1.module+el8.4.0+20289+730b73cc.aarch64.rpm9217728c32f679ed78638b67031fc694-
podman-docker-3.2.3-0.10.0.1.module+el8.4.0+20289+730b73cc.noarch.rpmf1befc5674c3f2d65278a740f85f01e7-
podman-plugins-3.2.3-0.10.0.1.module+el8.4.0+20289+730b73cc.aarch64.rpmbcf3e3a73ed58fc1f1880ae30cce629d-
podman-remote-3.2.3-0.10.0.1.module+el8.4.0+20289+730b73cc.aarch64.rpm7bf8a55ee9393ac46c606a1c9d890d15-
podman-tests-3.2.3-0.10.0.1.module+el8.4.0+20289+730b73cc.aarch64.rpm23ef302feba1603306582d5d5c3f5eed-
python3-criu-3.15-1.module+el8.4.0+20289+730b73cc.aarch64.rpm376baace9d246c60f2248e8ead53095a-
runc-1.0.0-74.rc95.module+el8.4.0+20289+730b73cc.aarch64.rpma92aa02bc123934bb9c7e8083cc503f4-
skopeo-1.3.1-5.0.1.module+el8.4.0+20289+730b73cc.aarch64.rpm95f72093726c4685bfccf98791798b1b-
skopeo-tests-1.3.1-5.0.1.module+el8.4.0+20289+730b73cc.aarch64.rpmbd37788933a84d7a0b4a4c6866d22bc5-
slirp4netns-1.1.8-1.module+el8.4.0+20289+730b73cc.aarch64.rpm53e421a1545bf37f6b15a3820e7a193d-
udica-0.2.4-2.module+el8.4.0+20289+730b73cc.noarch.rpmbc021a3de1d070a0ea0ad4caae9a0493-
Oracle Linux 8 (x86_64) buildah-1.21.4-1.0.1.module+el8.4.0+20289+730b73cc.src.rpm1333c1f053070752d458a7d7a4f02755-
cockpit-podman-32-2.module+el8.4.0+20289+730b73cc.src.rpm6020855b7c21d85ab158dd0c0b160035-
conmon-2.0.29-1.module+el8.4.0+20289+730b73cc.src.rpmd1cc59d57d4d50e33c1f23c2c68b9d74-
container-selinux-2.164.1-1.module+el8.4.0+20289+730b73cc.src.rpm995d30bc6e17395a9c15b95e7ba1add8-
containernetworking-plugins-0.9.1-1.module+el8.4.0+20289+730b73cc.src.rpm24cefcbf2eab173c35688e897b442389-
criu-3.15-1.module+el8.4.0+20289+730b73cc.src.rpm6d34390d716a8d8df03fe2b2aadce8a6-
crun-0.20.1-1.module+el8.4.0+20289+730b73cc.src.rpm08fe386bd726a9bbc13362d9d6591b5e-
fuse-overlayfs-1.6-1.module+el8.4.0+20289+730b73cc.src.rpm64ab8d084f20de161ce3253a924daba3-
libslirp-4.3.1-1.module+el8.4.0+20289+730b73cc.src.rpm6d75d898c6054e24a76eaa7c53956387-
oci-seccomp-bpf-hook-1.2.3-2.module+el8.4.0+20289+730b73cc.src.rpma688d0b748820e71d5dac3b3c14ceab1-
podman-3.2.3-0.10.0.1.module+el8.4.0+20289+730b73cc.src.rpmc38f63407d375baf525c5c70b6966f12-
runc-1.0.0-74.rc95.module+el8.4.0+20289+730b73cc.src.rpmccfd2bf0f8ca17852fc53c7611e2edaa-
skopeo-1.3.1-5.0.1.module+el8.4.0+20289+730b73cc.src.rpm238cd689aa003a2b4780a02f65f552a1-
slirp4netns-1.1.8-1.module+el8.4.0+20289+730b73cc.src.rpm050f6bd0bffec32ebb32eac9871e7934-
udica-0.2.4-2.module+el8.4.0+20289+730b73cc.src.rpmdec527737f7244ddf9fe89b877e67fdb-
buildah-1.21.4-1.0.1.module+el8.4.0+20289+730b73cc.x86_64.rpmcb97dee7ebb11987d04970cb26aa5429-
buildah-tests-1.21.4-1.0.1.module+el8.4.0+20289+730b73cc.x86_64.rpm6ca5c7355159642d1f4a9d2a9fce4f42-
cockpit-podman-32-2.module+el8.4.0+20289+730b73cc.noarch.rpmf1c7ca90afd5ac739b8e3197e8e9a91b-
conmon-2.0.29-1.module+el8.4.0+20289+730b73cc.x86_64.rpma5201357432009f9f10c5711b63592c0-
container-selinux-2.164.1-1.module+el8.4.0+20289+730b73cc.noarch.rpmf067782197c8d42930ef708efa7b9010-
containernetworking-plugins-0.9.1-1.module+el8.4.0+20289+730b73cc.x86_64.rpmb53ca8199b2415ac8e58cbbc0f71fe62-
containers-common-1.3.1-5.0.1.module+el8.4.0+20289+730b73cc.x86_64.rpmfab02dbc4ffe6746ad0d3aa9ad42bc84-
crit-3.15-1.module+el8.4.0+20289+730b73cc.x86_64.rpma03edee9f40525906cea1d1f581049a9-
criu-3.15-1.module+el8.4.0+20289+730b73cc.x86_64.rpm8f77920f83a18f582bae5bf205410ece-
crun-0.20.1-1.module+el8.4.0+20289+730b73cc.x86_64.rpm609c0838a1e70ac8c7755c517cb5e25b-
fuse-overlayfs-1.6-1.module+el8.4.0+20289+730b73cc.x86_64.rpm7331c2522a86a535192dcf345087cd89-
libslirp-4.3.1-1.module+el8.4.0+20289+730b73cc.x86_64.rpme6dc60f40640bba24890a17ac3e3a5c2-
libslirp-devel-4.3.1-1.module+el8.4.0+20289+730b73cc.x86_64.rpm36ae9194d1a851fe4a42ed77f1ec41ad-
oci-seccomp-bpf-hook-1.2.3-2.module+el8.4.0+20289+730b73cc.x86_64.rpme05208b6fe9c14deaf3c2c6571944b32-
podman-3.2.3-0.10.0.1.module+el8.4.0+20289+730b73cc.x86_64.rpm478e1ba53375418daea58011ffe644a8-
podman-catatonit-3.2.3-0.10.0.1.module+el8.4.0+20289+730b73cc.x86_64.rpmaa80773c08b2e6f22e65ddff914067e3-
podman-docker-3.2.3-0.10.0.1.module+el8.4.0+20289+730b73cc.noarch.rpmf1befc5674c3f2d65278a740f85f01e7-
podman-plugins-3.2.3-0.10.0.1.module+el8.4.0+20289+730b73cc.x86_64.rpm882390ecb33c15c74413b2c73c9bdf87-
podman-remote-3.2.3-0.10.0.1.module+el8.4.0+20289+730b73cc.x86_64.rpm3f933a6ccb6c8aafda6f22b223279976-
podman-tests-3.2.3-0.10.0.1.module+el8.4.0+20289+730b73cc.x86_64.rpm668c402fa3c072ee04a0513db95bf168-
python3-criu-3.15-1.module+el8.4.0+20289+730b73cc.x86_64.rpmae4992b2301fada993e67a585fb42d79-
runc-1.0.0-74.rc95.module+el8.4.0+20289+730b73cc.x86_64.rpmcbeb7e28f952372fc144b7cec2852b86-
skopeo-1.3.1-5.0.1.module+el8.4.0+20289+730b73cc.x86_64.rpm10f030b6292153f8f95f7625724c93a9-
skopeo-tests-1.3.1-5.0.1.module+el8.4.0+20289+730b73cc.x86_64.rpmc0d21bd0ac17b8c874d5765f358444dc-
slirp4netns-1.1.8-1.module+el8.4.0+20289+730b73cc.x86_64.rpm2846377e6c5b9f6b5d9085b4f2a4901b-
udica-0.2.4-2.module+el8.4.0+20289+730b73cc.noarch.rpmbc021a3de1d070a0ea0ad4caae9a0493-



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete