ELBA-2023-12757

ELBA-2023-12757 - buildah bug fix update

Type:	BUG
Impact:	NA
Release Date:	2023-09-04

Description

buildah
[1:1.24.6-5.0.1]
- Rebuild with newer glibc [Orabug: 35720304]

cockpit-podman
[46-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/46
- Related: #2061390


conmon
[2:2.1.4-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.4
- Related: #2061390

containernetworking-plugins
[1:1.1.1-2]
- bump golang BR to 1.17.7
- Related: #2061390

containers-common
[1-37.0.1]
- Updated removed references [Orabug: 33473101] (Alex Burmashev)
- Adjust registries.conf (Nikita Gerasimov)
- remove references to RedHat registry (Nikita Gerasimov)

container-selinux
[2:2.199.0-1]
- revert back to https://github.com/containers/container-selinux/releases/tag/v2.199.0
(2.200.0 fails to build as it relies on the new selinux-policy which is not there yet)
- Related: #2123641

criu
crun
[1.6-1]
- update to https://github.com/containers/crun/releases/tag/1.6
- Related: #2123641

fuse-overlayfs
[1.9-1]
- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.9
- Related: #2061390

libslirp
oci-seccomp-bpf-hook
[1.2.5-2]
- fix compatibility with the new bcc
- Related: #2123641

podman
[2:4.0.2-20.0.1]
- Rebuild with newer glibc [Orabug: 35720304]

python-podman
[4.0.0-1]
- bump to v4.0.0
- Related: #2001445

runc
[1:1.1.4-1.0.1]
- rootless: fix /sys/fs/cgroup mounts to prevent CVE-2023-25809
- rootfs: prohibit symlinks that conflicts with readonlyPaths
and/or maskedPaths to prevent CVE-2023-27561
- Prohibit /proc and /sys to be symlinks to prevent CVE-2023-28642
- JIRA: OLDIS-25589

skopeo
[2:1.6.2-6]
- update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
(https://github.com/containers/skopeo/commit/2b16a1c)
- Related: #2129766

slirp4netns
[1.1.8-2]
- fix gating - don't use insecure functions - thanks to Marc-Andre Lureau
- Related: #2001445

udica
[0.2.6-3]
- Make sure each section of the inspect exists before accessing (#2027662)

Updated Packages

Release/Architecture

Filename

sha256

Superseded By Advisory

Channel Label

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team