ELSA-2024-0121

ELSA-2024-0121 - container-tools:4.0 security update

Type:SECURITY
Severity:MODERATE
Release Date:2024-01-11

Description


buildah
[1:1.24.6-7]
- rebuild for CVE-2023-29406
- Related: #2176055

cockpit-podman
[46-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/46
- Related: #2061390

conmon
[2:2.1.4-2]
- update to https://github.com/containers/conmon/releases/tag/v2.1.4
- Related: #2176055

containernetworking-plugins
[1:1.1.1-6]
- Rebuild with golang 1.20.6 or higher
- Related: Jira:RHEL-4507
- Related: Jira:RHEL-7442

containers-common
[1-38.0.1]
- Updated removed references [Orabug: 33473101] (Alex Burmashev)
- Adjust registries.conf (Nikita Gerasimov)
- remove references to RedHat registry (Nikita Gerasimov)

container-selinux
[2:2.205.0-3]
- fix build for stable module
- Related: #2176055

criu
[3.15-3]
- add Requires: criu-libs = %{version}-%{release} in criu-devel
- add gating tests
- Related: #1934415

crun
fuse-overlayfs
[1.9-2]
- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.9
- Related: #2176055

libslirp
oci-seccomp-bpf-hook
[1.2.5-2]
- fix compatibility with the new bcc
- Related: #2176055

podman
[2:4.0.2-25]
- rebuild with golang 1.20.6+ for CVE-2023-39321 CVE-2023-29409
- Related: Jira:RHEL-4508
- Related: Jira:RHEL-7443

python-podman
[4.0.0-2]
- bump to v4.0.0
- Related: #2176055

runc
[1:1.1.5-2]
- rebuild for following CVEs: CVE-2022-41724
- Resolves: #2179971

skopeo
[2:1.6.2-9]
- rebuild because of CVE-2023-29406
- Resolves: #2236831

slirp4netns
[1.1.8-3]
- fix gating - don't use insecure functions - thanks to Marc-Andre Lureau
- Related: #2176055

udica
[0.2.6-4]
- sync with stream-container-tools-4.0-rhel-8.8.0
- Related: #2176055


Related CVEs


CVE-2022-27664
CVE-2023-39322
CVE-2023-29409
CVE-2022-2879
CVE-2023-39318
CVE-2023-39321
CVE-2022-2880
CVE-2022-41715
CVE-2023-39319

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) buildah-1.24.6-7.module+el8.9.0+90119+2f9ef15c.src.rpm479972c2700d7b5934429c06f7ca0b7f-ol8_aarch64_appstream
cockpit-podman-46-1.module+el8.9.0+90119+2f9ef15c.src.rpm61668d634288f8ec5d0df843b9ddc225-ol8_aarch64_appstream
conmon-2.1.4-2.module+el8.9.0+90119+2f9ef15c.src.rpmb9d62a7e85b596cf5bf1e4159617787c-ol8_aarch64_appstream
container-selinux-2.205.0-3.module+el8.9.0+90119+2f9ef15c.src.rpmf0625f2f9204fb46edfc13d49bf1c194-ol8_aarch64_appstream
containernetworking-plugins-1.1.1-6.module+el8.9.0+90119+2f9ef15c.src.rpm2e7259aceb4f0fe598f8835fca864bfd-ol8_aarch64_appstream
containers-common-1-38.0.1.module+el8.9.0+90119+2f9ef15c.src.rpm32d27e8291aec3478d94caa652ea9ea7-ol8_aarch64_appstream
criu-3.15-3.module+el8.9.0+90119+2f9ef15c.src.rpm2d32ff53abe6882ff51ee0f5424156be-ol8_aarch64_appstream
crun-1.8.7-1.module+el8.9.0+90119+2f9ef15c.src.rpm60553ecaf1183318e3eca89b50948c3d-ol8_aarch64_appstream
fuse-overlayfs-1.9-2.module+el8.9.0+90119+2f9ef15c.src.rpm11759159b9a1c6dcda6448c3347f27b5-ol8_aarch64_appstream
libslirp-4.4.0-1.module+el8.9.0+90119+2f9ef15c.src.rpm516e0ab0f91b11c276bccdfde6062828-ol8_aarch64_appstream
oci-seccomp-bpf-hook-1.2.5-2.module+el8.9.0+90119+2f9ef15c.src.rpm2af28758912741e959a28e268047afff-ol8_aarch64_appstream
podman-4.0.2-25.module+el8.9.0+90119+2f9ef15c.src.rpmc3479451d22cd9301534a90af59bbdb6-ol8_aarch64_appstream
python-podman-4.0.0-2.module+el8.9.0+90119+2f9ef15c.src.rpm7fc50ad9be900677a135799f3e06398d-ol8_aarch64_appstream
runc-1.1.5-2.module+el8.9.0+90119+2f9ef15c.src.rpm6d814df7144082666d5887c8e50ec390-ol8_aarch64_appstream
skopeo-1.6.2-9.module+el8.9.0+90119+2f9ef15c.src.rpm2ff4bf053c2ae37ed89a784c182147d4-ol8_aarch64_appstream
slirp4netns-1.1.8-3.module+el8.9.0+90119+2f9ef15c.src.rpmff6be7020c20314c5dbca92faf883e9a-ol8_aarch64_appstream
udica-0.2.6-4.module+el8.9.0+90119+2f9ef15c.src.rpmbb42f8d195cacf9a2cd60a79d141c495-ol8_aarch64_appstream
aardvark-dns-1.0.1-38.0.1.module+el8.9.0+90119+2f9ef15c.aarch64.rpmc6cac88179b5e894e5187bda8286e197-ol8_aarch64_appstream
buildah-1.24.6-7.module+el8.9.0+90119+2f9ef15c.aarch64.rpm64361558cbafef436fd7b8d004edcd49-ol8_aarch64_appstream
buildah-tests-1.24.6-7.module+el8.9.0+90119+2f9ef15c.aarch64.rpm4cd01eec2d26a1e103e60829ad64c99f-ol8_aarch64_appstream
cockpit-podman-46-1.module+el8.9.0+90119+2f9ef15c.noarch.rpmf18c2668102d701d05932e8070059220-ol8_aarch64_appstream
conmon-2.1.4-2.module+el8.9.0+90119+2f9ef15c.aarch64.rpm1e42b2d6cc1e2028d7ce407a5a9e60a7-ol8_aarch64_appstream
container-selinux-2.205.0-3.module+el8.9.0+90119+2f9ef15c.noarch.rpm950160fb80417eafa9ddd0c3f1144a4e-ol8_aarch64_appstream
containernetworking-plugins-1.1.1-6.module+el8.9.0+90119+2f9ef15c.aarch64.rpm578e61d5ce60be5f2ce9d4c04ecebb8d-ol8_aarch64_appstream
containers-common-1-38.0.1.module+el8.9.0+90119+2f9ef15c.aarch64.rpmf72c8030bc0b9cf9cbe9c06fa78166d5-ol8_aarch64_appstream
crit-3.15-3.module+el8.9.0+90119+2f9ef15c.aarch64.rpm4a2ed4c95ed1b01a57375f902e277451-ol8_aarch64_appstream
criu-3.15-3.module+el8.9.0+90119+2f9ef15c.aarch64.rpm571a36ce96915ef75dc9c439d0b72e2d-ol8_aarch64_appstream
criu-devel-3.15-3.module+el8.9.0+90119+2f9ef15c.aarch64.rpma7771536cfedc2c4d461c446e40c13fb-ol8_aarch64_appstream
criu-libs-3.15-3.module+el8.9.0+90119+2f9ef15c.aarch64.rpm3ed2358fa059cfc9092150c11e82e668-ol8_aarch64_appstream
crun-1.8.7-1.module+el8.9.0+90119+2f9ef15c.aarch64.rpm0f58e1681de54a92cfc8fa2e95e4bc39-ol8_aarch64_appstream
fuse-overlayfs-1.9-2.module+el8.9.0+90119+2f9ef15c.aarch64.rpmec6f1038521144283bab75c700521f11-ol8_aarch64_appstream
libslirp-4.4.0-1.module+el8.9.0+90119+2f9ef15c.aarch64.rpmaf95838a333b98a9e14c8d91af637fc2-ol8_aarch64_appstream
libslirp-devel-4.4.0-1.module+el8.9.0+90119+2f9ef15c.aarch64.rpmd8c20744a727dc5b81c0505bc5fb3ac6-ol8_aarch64_appstream
netavark-1.0.1-38.0.1.module+el8.9.0+90119+2f9ef15c.aarch64.rpm3a9342261b9da7f510872a9e1906ab75-ol8_aarch64_appstream
oci-seccomp-bpf-hook-1.2.5-2.module+el8.9.0+90119+2f9ef15c.aarch64.rpm18ed36c6b173148af0427f406a221f11-ol8_aarch64_appstream
podman-4.0.2-25.module+el8.9.0+90119+2f9ef15c.aarch64.rpm6ed2ec31a8f6ee89a4bdfbfb58e6d475-ol8_aarch64_appstream
podman-catatonit-4.0.2-25.module+el8.9.0+90119+2f9ef15c.aarch64.rpm9b9a7d5c826dda804507c1eb4cf197d0-ol8_aarch64_appstream
podman-docker-4.0.2-25.module+el8.9.0+90119+2f9ef15c.noarch.rpmad9fc1cfd3df69fe09bc3409218ee0b9-ol8_aarch64_appstream
podman-gvproxy-4.0.2-25.module+el8.9.0+90119+2f9ef15c.aarch64.rpm528718f91b3221fa3b5e2f9262c0b5c8-ol8_aarch64_appstream
podman-plugins-4.0.2-25.module+el8.9.0+90119+2f9ef15c.aarch64.rpm064a4d1b3f18870ca7aef5495e9f2440-ol8_aarch64_appstream
podman-remote-4.0.2-25.module+el8.9.0+90119+2f9ef15c.aarch64.rpmd3e5f2745b4ecd6cd6ef33a612ce2a01-ol8_aarch64_appstream
podman-tests-4.0.2-25.module+el8.9.0+90119+2f9ef15c.aarch64.rpm3877c0eb33149962ec5ecf8b607142f6-ol8_aarch64_appstream
python3-criu-3.15-3.module+el8.9.0+90119+2f9ef15c.aarch64.rpmd37878de672fb6e7ce46947ac58059c7-ol8_aarch64_appstream
python3-podman-4.0.0-2.module+el8.9.0+90119+2f9ef15c.noarch.rpmc12def1f30b0d2e50ef8b1cf4f9d9140-ol8_aarch64_appstream
runc-1.1.5-2.module+el8.9.0+90119+2f9ef15c.aarch64.rpmcac00d645cc34091824131815d6bcddd-ol8_aarch64_appstream
skopeo-1.6.2-9.module+el8.9.0+90119+2f9ef15c.aarch64.rpm3276e1130b6a5f41aae18c1784f01267-ol8_aarch64_appstream
skopeo-tests-1.6.2-9.module+el8.9.0+90119+2f9ef15c.aarch64.rpm583c7d5ae471a3ea61f779685ab62a60-ol8_aarch64_appstream
slirp4netns-1.1.8-3.module+el8.9.0+90119+2f9ef15c.aarch64.rpm5af7a9c123119df4a2c1cc1ce80e1c73-ol8_aarch64_appstream
udica-0.2.6-4.module+el8.9.0+90119+2f9ef15c.noarch.rpmeef39ac03994ddc27b4b3d99413fde61-ol8_aarch64_appstream
Oracle Linux 8 (x86_64) buildah-1.24.6-7.module+el8.9.0+90119+2f9ef15c.src.rpm479972c2700d7b5934429c06f7ca0b7f-ol8_x86_64_appstream
cockpit-podman-46-1.module+el8.9.0+90119+2f9ef15c.src.rpm61668d634288f8ec5d0df843b9ddc225-ol8_x86_64_appstream
conmon-2.1.4-2.module+el8.9.0+90119+2f9ef15c.src.rpmb9d62a7e85b596cf5bf1e4159617787c-ol8_x86_64_appstream
container-selinux-2.205.0-3.module+el8.9.0+90119+2f9ef15c.src.rpmf0625f2f9204fb46edfc13d49bf1c194-ol8_x86_64_appstream
containernetworking-plugins-1.1.1-6.module+el8.9.0+90119+2f9ef15c.src.rpm2e7259aceb4f0fe598f8835fca864bfd-ol8_x86_64_appstream
containers-common-1-38.0.1.module+el8.9.0+90119+2f9ef15c.src.rpm32d27e8291aec3478d94caa652ea9ea7-ol8_x86_64_appstream
criu-3.15-3.module+el8.9.0+90119+2f9ef15c.src.rpm2d32ff53abe6882ff51ee0f5424156be-ol8_x86_64_appstream
crun-1.8.7-1.module+el8.9.0+90119+2f9ef15c.src.rpm60553ecaf1183318e3eca89b50948c3d-ol8_x86_64_appstream
fuse-overlayfs-1.9-2.module+el8.9.0+90119+2f9ef15c.src.rpm11759159b9a1c6dcda6448c3347f27b5-ol8_x86_64_appstream
libslirp-4.4.0-1.module+el8.9.0+90119+2f9ef15c.src.rpm516e0ab0f91b11c276bccdfde6062828-ol8_x86_64_appstream
oci-seccomp-bpf-hook-1.2.5-2.module+el8.9.0+90119+2f9ef15c.src.rpm2af28758912741e959a28e268047afff-ol8_x86_64_appstream
podman-4.0.2-25.module+el8.9.0+90119+2f9ef15c.src.rpmc3479451d22cd9301534a90af59bbdb6-ol8_x86_64_appstream
python-podman-4.0.0-2.module+el8.9.0+90119+2f9ef15c.src.rpm7fc50ad9be900677a135799f3e06398d-ol8_x86_64_appstream
runc-1.1.5-2.module+el8.9.0+90119+2f9ef15c.src.rpm6d814df7144082666d5887c8e50ec390-ol8_x86_64_appstream
skopeo-1.6.2-9.module+el8.9.0+90119+2f9ef15c.src.rpm2ff4bf053c2ae37ed89a784c182147d4-ol8_x86_64_appstream
slirp4netns-1.1.8-3.module+el8.9.0+90119+2f9ef15c.src.rpmff6be7020c20314c5dbca92faf883e9a-ol8_x86_64_appstream
udica-0.2.6-4.module+el8.9.0+90119+2f9ef15c.src.rpmbb42f8d195cacf9a2cd60a79d141c495-ol8_x86_64_appstream
aardvark-dns-1.0.1-38.0.1.module+el8.9.0+90119+2f9ef15c.x86_64.rpm41cc4fd11773a150c4e6760180bee27c-ol8_x86_64_appstream
buildah-1.24.6-7.module+el8.9.0+90119+2f9ef15c.x86_64.rpm4a00404fd315c962638e6c6e477000e3-ol8_x86_64_appstream
buildah-tests-1.24.6-7.module+el8.9.0+90119+2f9ef15c.x86_64.rpm88844ac850a99688b5a1d2af19250da0-ol8_x86_64_appstream
cockpit-podman-46-1.module+el8.9.0+90119+2f9ef15c.noarch.rpmf18c2668102d701d05932e8070059220-ol8_x86_64_appstream
conmon-2.1.4-2.module+el8.9.0+90119+2f9ef15c.x86_64.rpm5a40ad49dc0f2a4a6c0484f277f8ae79-ol8_x86_64_appstream
container-selinux-2.205.0-3.module+el8.9.0+90119+2f9ef15c.noarch.rpm950160fb80417eafa9ddd0c3f1144a4e-ol8_x86_64_appstream
containernetworking-plugins-1.1.1-6.module+el8.9.0+90119+2f9ef15c.x86_64.rpm6c60dbf9f29382c1ba29e7b07823ae96-ol8_x86_64_appstream
containers-common-1-38.0.1.module+el8.9.0+90119+2f9ef15c.x86_64.rpm793cdd0a8384e86232a4e5ce7cf4a88b-ol8_x86_64_appstream
crit-3.15-3.module+el8.9.0+90119+2f9ef15c.x86_64.rpm9110848c3950ea3f73c30b42a8996ae7-ol8_x86_64_appstream
criu-3.15-3.module+el8.9.0+90119+2f9ef15c.x86_64.rpmeec964d3c2fe1ad99fcd2dc4a925fcaf-ol8_x86_64_appstream
criu-devel-3.15-3.module+el8.9.0+90119+2f9ef15c.x86_64.rpm009316d5c378049b432a7f4f74950f60-ol8_x86_64_appstream
criu-libs-3.15-3.module+el8.9.0+90119+2f9ef15c.x86_64.rpm41f94228057415f1f49321554e0c0eb8-ol8_x86_64_appstream
crun-1.8.7-1.module+el8.9.0+90119+2f9ef15c.x86_64.rpmc7de7e6aabccf30190a1f201b0c2f540-ol8_x86_64_appstream
fuse-overlayfs-1.9-2.module+el8.9.0+90119+2f9ef15c.x86_64.rpm2d21e2a378b6e9972f52b0edf04a9c0e-ol8_x86_64_appstream
libslirp-4.4.0-1.module+el8.9.0+90119+2f9ef15c.x86_64.rpme510c77c82bc6fbd16c3279ca7b20823-ol8_x86_64_appstream
libslirp-devel-4.4.0-1.module+el8.9.0+90119+2f9ef15c.x86_64.rpm1c0fe0a1c45a104caad304117c401380-ol8_x86_64_appstream
netavark-1.0.1-38.0.1.module+el8.9.0+90119+2f9ef15c.x86_64.rpmfc27b345a85b608cb8de6d72ebe711b4-ol8_x86_64_appstream
oci-seccomp-bpf-hook-1.2.5-2.module+el8.9.0+90119+2f9ef15c.x86_64.rpm2ca2fa212a51f70d415338be964ffb7f-ol8_x86_64_appstream
podman-4.0.2-25.module+el8.9.0+90119+2f9ef15c.x86_64.rpm20b2b8af5a4af04499c652d707630834-ol8_x86_64_appstream
podman-catatonit-4.0.2-25.module+el8.9.0+90119+2f9ef15c.x86_64.rpm0c9baa783326e439b0b2750edfacb6bf-ol8_x86_64_appstream
podman-docker-4.0.2-25.module+el8.9.0+90119+2f9ef15c.noarch.rpmad9fc1cfd3df69fe09bc3409218ee0b9-ol8_x86_64_appstream
podman-gvproxy-4.0.2-25.module+el8.9.0+90119+2f9ef15c.x86_64.rpmb7a59ce798a8524bae79e51d4a85d48a-ol8_x86_64_appstream
podman-plugins-4.0.2-25.module+el8.9.0+90119+2f9ef15c.x86_64.rpmda1c396fb2a80ff9fcf23185cd5e4f2b-ol8_x86_64_appstream
podman-remote-4.0.2-25.module+el8.9.0+90119+2f9ef15c.x86_64.rpm80957968510669d7ecd4fd1c100dba73-ol8_x86_64_appstream
podman-tests-4.0.2-25.module+el8.9.0+90119+2f9ef15c.x86_64.rpm5f154b30aa249d61ce8bb7d1fe68cd1a-ol8_x86_64_appstream
python3-criu-3.15-3.module+el8.9.0+90119+2f9ef15c.x86_64.rpmc0e5bc4ea38f94951e72eda6c2283189-ol8_x86_64_appstream
python3-podman-4.0.0-2.module+el8.9.0+90119+2f9ef15c.noarch.rpmc12def1f30b0d2e50ef8b1cf4f9d9140-ol8_x86_64_appstream
runc-1.1.5-2.module+el8.9.0+90119+2f9ef15c.x86_64.rpmc448edd4f6744a0850169fc5426187f7-ol8_x86_64_appstream
skopeo-1.6.2-9.module+el8.9.0+90119+2f9ef15c.x86_64.rpm16a75c06c59fc82952192c60950ff8c8-ol8_x86_64_appstream
skopeo-tests-1.6.2-9.module+el8.9.0+90119+2f9ef15c.x86_64.rpm72276fa0362ce0b6900f61158bdc8655-ol8_x86_64_appstream
slirp4netns-1.1.8-3.module+el8.9.0+90119+2f9ef15c.x86_64.rpm44d22b845df72fe98f490de9491dde45-ol8_x86_64_appstream
udica-0.2.6-4.module+el8.9.0+90119+2f9ef15c.noarch.rpmeef39ac03994ddc27b4b3d99413fde61-ol8_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete