ELSA-2020-1379

ELSA-2020-1379 - container-tools:ol8 security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2020-04-15

Description

buildah
[1.11.6-6.0.1]
- Fixes troubles with oracle registry login [Orabug: 29937283]

[1.11.6-6]
- fix COPY command takes long time with buildah
- Resolves: #1806119

[1.11.6-5]
- fix Podman support for FIPS Mode requires a bind mount inside the container
- Resolves: #1804188

cockpit-podman
[11-1]
- Fix Alert notification in Image Search Modal
- Allow more than a single Error Notification for Container action errors
- Various Alert cleanups
- Translation updates
- Related: RHELPLAN-25138

[10-1]
- Support for user containers
- Show list of containers that use given image
- Show placeholder while loading containers and images
- Fix setting memory limit - bug 1732713
- Add container Terminal - bug 1703245
- Related: RHELPLAN-25138

conmon
[2:2.0.6-1]
- update to 2.0.6
- Related: RHELPLAN-25138

[2:2.0.5-1]
- update to 2.0.5
- Related: RHELPLAN-25138

[2:2.0.4-1]
- update to 2.0.4 bugfix release
- Related: RHELPLAN-25138

[2:2.0.3-2.giteb5fa88]
- BR: systemd-devel
- Related: RHELPLAN-25138

[2:2.0.3-1.giteb5fa88]
- update to 2.0.3

[2:2.0.2-0.1.dev.git422ce21]
- build latest upstream master

[2:2.0.0-2]
- remove BR: go-md2man since no manpages yet

container-selinux
[2:2.124.0-1]
- update to 2.124.0
- Related: RHELPLAN-25138


fuse-overlayfs
[0.7.2-5]
- be sure to work properly also with older rhel8 kernels, thanks to Giuseppe Scrivano
- Resolves: #1803495

[0.7.2-4]
- latest iteration of segfault fix patch, thanks to Giuseppe Scrivano
- Resolves: #1803495

[0.7.2-3]
- fix fuse-overlayfs segfault
- Resolves: #1805016

[0.7.2-2]
- fix useradd and groupadd fail under rootless Buildah and podman
- Resolves: #1803495

podman
[1.6.4-4.0.1]
- delivering fix for [Orabug: 29874238] by Nikita Gerasimov

[1.6.4-4]
- fix podman (1.6.4) rhel 8.1 no route to host from inside container
- Resolves: #1806900

[1.6.4-3]
- fix Podman support for FIPS Mode requires a bind mount inside the container
- Resolves: #1804194

python-podman-api
[1.2.0-0.2.gitd0a45fe]
- revert update to 1.6.0 due to new python3-pbr dependency which
is not in RHEL
- Related: RHELPLAN-25138

runc
[1.0.0-64.rc9]
- use no_openssl in BUILDTAGS (no vendored crypto in runc)
- Related: RHELPLAN-25138

[1.0.0-63.rc9]
- be sure to use golang >= 1.12.12-4
- Related: RHELPLAN-25138

[1.0.0-62.rc9]
- rebuild because of CVE-2019-9512 and CVE-2019-9514
- Related: RHELPLAN-25138

[1.0.0-61.rc9]
- update to runc 1.0.0-rc9 release
- amend golang deps
- fixes CVE-2019-16884

[1.0.0-60.rc8]
- Resolves: #1721247 - enable fips mode

[1.0.0-59.rc8]
- Resolves: #1720654 - rebase to v1.0.0-rc8

[1.0.0-57.rc5.dev.git2abd837]
- Resolves: #1693424 - podman rootless: cannot specify gid= mount options

skopeo
[0.1.40-8.0.1]
- Add oracle registry into the conf file [Orabug: 29845934]
- Fix oracle registry login issues [Orabug: 29937192]

[1:0.1.40-8]
- change the search order of registries and remove quay.io (#1784267)

slirp4netns
[0.4.2-3.git21fdece]
- Fix CVE-2020-8608
- Related: RHELPLAN-25138

toolbox
[0.0.4-1.el8]
- Update for rhel8.1 container-tools module


udica
[0.2.1-2]
- initial import to container-tools 8.2.0
- Related: RHELPLAN-25139

Related CVEs

CVE-2020-8608

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	buildah-1.11.6-6.0.1.module+el8.1.1+5573+1c3f6079.src.rpm	fb5cefdc5f9f62171674d1cb7ebc71962f73762ed0be7e6df0176609ad1feacf	-	ol8_aarch64_appstream
	cockpit-podman-11-1.module+el8.1.1+5502+fbec5cc6.src.rpm	6a503a0441c9d57ba3a2450964d17031f489c353c3fc1e18891d4883b6cb2bb5	-	ol8_aarch64_appstream
	conmon-2.0.6-1.module+el8.1.1+5502+fbec5cc6.src.rpm	c91b2f4cb18d01f6fedfbb5bbc44e351532cd808ee7f36ab862f6550cfaf5024	-	ol8_aarch64_appstream
	container-selinux-2.124.0-1.module+el8.1.1+5502+fbec5cc6.src.rpm	1a425cd76f871a7d99eeb384a1cac6498322304ac16a31fc9a6949108df83003	-	ol8_aarch64_appstream
	containernetworking-plugins-0.8.3-4.0.1.module+el8.1.1+5502+fbec5cc6.src.rpm	4bf95156db3247b25b61de1f5fc43136e2ea7f0506e5f56c7b55c761f0e0b2c4	-	ol8_aarch64_appstream
	fuse-overlayfs-0.7.2-5.module+el8.1.1+5573+1c3f6079.src.rpm	4f6f8e76710ea6987c82a2302dbce983d21366c45b8cf9dd18362ceab4168f88	-	ol8_aarch64_appstream
	podman-1.6.4-4.0.1.module+el8.1.1+5573+1c3f6079.src.rpm	5f40c68cf2ceb9a7313b050f983e31a10ced40c2103a34490d373180c57af6f6	-	ol8_aarch64_appstream
	python-podman-api-1.2.0-0.2.gitd0a45fe.module+el8.1.1+5502+fbec5cc6.src.rpm	57bad390eacd92c6238b3a29445d22c1c0ac305a1a7f22581074e1c2de7d3495	-	ol8_aarch64_appstream
	runc-1.0.0-64.rc9.module+el8.1.1+5502+fbec5cc6.src.rpm	29b44bf4d4bbf71a14ff6a3eed1d9f361c8820ad6247d6c004028e60aa5cda1e	-	ol8_aarch64_appstream
	skopeo-0.1.40-8.0.1.module+el8.1.1+5502+fbec5cc6.src.rpm	eb576fd6806cbaa45ba32e8ded373e09555f4f1ed77c1806ef1ccef6b38fc12e	-	ol8_aarch64_appstream
	slirp4netns-0.4.2-3.git21fdece.module+el8.1.1+5573+1c3f6079.src.rpm	ac76d34a10328a919b42f5d086c3fd52c105510d2736cde01ded09e303448f64	-	ol8_aarch64_appstream
	toolbox-0.0.4-1.module+el8.1.1+5502+fbec5cc6.src.rpm	3e087058bb576238e6b6d48c4ed6a9819eb458d4621f6f23442ad4fbc12f1c81	-	ol8_aarch64_appstream
	udica-0.2.1-2.module+el8.1.1+5502+fbec5cc6.src.rpm	dd2fe6c5cc2d751771d225e142ede8419f1ed4cf33ebf5511ea97975a1a6a874	-	ol8_aarch64_appstream
	buildah-1.11.6-6.0.1.module+el8.1.1+5573+1c3f6079.aarch64.rpm	fe784cb725a69f828684d1a49943c5ee5a42b2b94535034498641a2484bf90ed	-	ol8_aarch64_appstream
	buildah-tests-1.11.6-6.0.1.module+el8.1.1+5573+1c3f6079.aarch64.rpm	d73661482a5f0aba54a7ac17c4f0b647ab5c6512e316d64dab642e168f9957b2	-	ol8_aarch64_appstream
	cockpit-podman-11-1.module+el8.1.1+5502+fbec5cc6.noarch.rpm	495bfa1d343338d7fc997a62f3091328d0443f50d889ced1eff77899ca55b3df	-	ol8_aarch64_appstream
	conmon-2.0.6-1.module+el8.1.1+5502+fbec5cc6.aarch64.rpm	a4dd92d8e29ca9810ffd59be730a6c3d9792ba2644dc44bf27350c1466b0a7ed	-	ol8_aarch64_appstream
	container-selinux-2.124.0-1.module+el8.1.1+5502+fbec5cc6.noarch.rpm	924b8750f0e002cf33e3dc8a7c156092da3eab8f5ae82604b99b4674baa205a0	-	ol8_aarch64_appstream
	containernetworking-plugins-0.8.3-4.0.1.module+el8.1.1+5502+fbec5cc6.aarch64.rpm	b451fbd6ff4678a6556c87f33eb2dc0c7176f4c9de000955a1367cf2f1ca9f0e	-	ol8_aarch64_appstream
	containers-common-0.1.40-8.0.1.module+el8.1.1+5502+fbec5cc6.aarch64.rpm	0ac64a265ab4c39ef32e3b17765b730c5ebd4461efb50a90bfd54d3a6005e92d	-	ol8_aarch64_appstream
	fuse-overlayfs-0.7.2-5.module+el8.1.1+5573+1c3f6079.aarch64.rpm	991d25bb6fa97c922b38a4b81a5bdb1d2061a046e9651ed6e054c40fae8f8980	-	ol8_aarch64_appstream
	podman-1.6.4-4.0.1.module+el8.1.1+5573+1c3f6079.aarch64.rpm	1f32a6e056eaf8a33cef376c5c8435ded054d5f27ee5549ea7d416088a0a008a	-	ol8_aarch64_appstream
	podman-docker-1.6.4-4.0.1.module+el8.1.1+5573+1c3f6079.noarch.rpm	3da2fb0a8bc3a70b49392611b8957581bc1b81e064126e12ab1add58224b6542	-	ol8_aarch64_appstream
	podman-manpages-1.6.4-4.0.1.module+el8.1.1+5573+1c3f6079.noarch.rpm	de3c02d81d12c1dba7a2b2daca33c615e4a365df36b37c342d76f1930e6be512	-	ol8_aarch64_appstream
	podman-remote-1.6.4-4.0.1.module+el8.1.1+5573+1c3f6079.aarch64.rpm	3d72cebf99bbf672048339d12e209f608afdeaded99387a9e336e1214cbb1aa3	-	ol8_aarch64_appstream
	podman-tests-1.6.4-4.0.1.module+el8.1.1+5573+1c3f6079.aarch64.rpm	46a30cf19de921e83fa1c48242f9226b75f3b19c2a8223c7a5520d8f2b66a82c	-	ol8_aarch64_appstream
	python-podman-api-1.2.0-0.2.gitd0a45fe.module+el8.1.1+5502+fbec5cc6.noarch.rpm	149d7a7befae373cc0d9309bd0af41b2fb7a9db9362ec7d1bb5a632459f93cea	-	ol8_aarch64_appstream
	runc-1.0.0-64.rc9.module+el8.1.1+5502+fbec5cc6.aarch64.rpm	48de95e239066a906d32b7883ee84560385be61751e26397ee327e773e16aa24	-	ol8_aarch64_appstream
	skopeo-0.1.40-8.0.1.module+el8.1.1+5502+fbec5cc6.aarch64.rpm	18ccae38a3057d3dc54e6be8491e42e896930434027d7c494fd5375e4cc6f2af	-	ol8_aarch64_appstream
	skopeo-tests-0.1.40-8.0.1.module+el8.1.1+5502+fbec5cc6.aarch64.rpm	6b3548f9b1df6bacbfcf349ce2c4cb50048eb66951d98e90d23bcb380a998c35	-	ol8_aarch64_appstream
	slirp4netns-0.4.2-3.git21fdece.module+el8.1.1+5573+1c3f6079.aarch64.rpm	9eaa0285b6ea5e5efdd1faeff1bea3d931d3407a532a4b161a6a58dfd562118a	-	ol8_aarch64_appstream
	toolbox-0.0.4-1.module+el8.1.1+5502+fbec5cc6.aarch64.rpm	5b5f7f38cf290e1d854323414e54979c4c3440758c275385a8538ca549a0a812	-	ol8_aarch64_appstream
	udica-0.2.1-2.module+el8.1.1+5502+fbec5cc6.noarch.rpm	51fc18f42fea02c79eb4d552ba4a0190c20a595a58808c5f024c81ae812477cf	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	buildah-1.11.6-6.0.1.module+el8.1.1+5573+1c3f6079.src.rpm	fb5cefdc5f9f62171674d1cb7ebc71962f73762ed0be7e6df0176609ad1feacf	-	ol8_x86_64_appstream
	cockpit-podman-11-1.module+el8.1.1+5502+fbec5cc6.src.rpm	6a503a0441c9d57ba3a2450964d17031f489c353c3fc1e18891d4883b6cb2bb5	-	ol8_x86_64_appstream
	conmon-2.0.6-1.module+el8.1.1+5502+fbec5cc6.src.rpm	c91b2f4cb18d01f6fedfbb5bbc44e351532cd808ee7f36ab862f6550cfaf5024	-	ol8_x86_64_appstream
	container-selinux-2.124.0-1.module+el8.1.1+5502+fbec5cc6.src.rpm	1a425cd76f871a7d99eeb384a1cac6498322304ac16a31fc9a6949108df83003	-	ol8_x86_64_appstream
	containernetworking-plugins-0.8.3-4.0.1.module+el8.1.1+5502+fbec5cc6.src.rpm	4bf95156db3247b25b61de1f5fc43136e2ea7f0506e5f56c7b55c761f0e0b2c4	-	ol8_x86_64_appstream
	fuse-overlayfs-0.7.2-5.module+el8.1.1+5573+1c3f6079.src.rpm	4f6f8e76710ea6987c82a2302dbce983d21366c45b8cf9dd18362ceab4168f88	-	ol8_x86_64_appstream
	podman-1.6.4-4.0.1.module+el8.1.1+5573+1c3f6079.src.rpm	5f40c68cf2ceb9a7313b050f983e31a10ced40c2103a34490d373180c57af6f6	-	ol8_x86_64_appstream
	python-podman-api-1.2.0-0.2.gitd0a45fe.module+el8.1.1+5502+fbec5cc6.src.rpm	57bad390eacd92c6238b3a29445d22c1c0ac305a1a7f22581074e1c2de7d3495	-	ol8_x86_64_appstream
	runc-1.0.0-64.rc9.module+el8.1.1+5502+fbec5cc6.src.rpm	29b44bf4d4bbf71a14ff6a3eed1d9f361c8820ad6247d6c004028e60aa5cda1e	-	ol8_x86_64_appstream
	skopeo-0.1.40-8.0.1.module+el8.1.1+5502+fbec5cc6.src.rpm	eb576fd6806cbaa45ba32e8ded373e09555f4f1ed77c1806ef1ccef6b38fc12e	-	ol8_x86_64_appstream
	slirp4netns-0.4.2-3.git21fdece.module+el8.1.1+5573+1c3f6079.src.rpm	ac76d34a10328a919b42f5d086c3fd52c105510d2736cde01ded09e303448f64	-	ol8_x86_64_appstream
	toolbox-0.0.4-1.module+el8.1.1+5502+fbec5cc6.src.rpm	3e087058bb576238e6b6d48c4ed6a9819eb458d4621f6f23442ad4fbc12f1c81	-	ol8_x86_64_appstream
	udica-0.2.1-2.module+el8.1.1+5502+fbec5cc6.src.rpm	dd2fe6c5cc2d751771d225e142ede8419f1ed4cf33ebf5511ea97975a1a6a874	-	ol8_x86_64_appstream
	buildah-1.11.6-6.0.1.module+el8.1.1+5573+1c3f6079.x86_64.rpm	218186ed41db5d03c9128f6d0924756372e523ef0bfcc069b05c23c01f5efb61	-	ol8_x86_64_appstream
	buildah-tests-1.11.6-6.0.1.module+el8.1.1+5573+1c3f6079.x86_64.rpm	ec5262f997d08fac60eb18619ac7314e833733d0e05f5fed11a36dd766185988	-	ol8_x86_64_appstream
	cockpit-podman-11-1.module+el8.1.1+5502+fbec5cc6.noarch.rpm	495bfa1d343338d7fc997a62f3091328d0443f50d889ced1eff77899ca55b3df	-	ol8_x86_64_appstream
	conmon-2.0.6-1.module+el8.1.1+5502+fbec5cc6.x86_64.rpm	0c6e63e0895fe41dca3cfd1f3ae4bd686f8fd54ff11b0ac2a1d9a24ee8bf4c55	-	ol8_x86_64_appstream
	container-selinux-2.124.0-1.module+el8.1.1+5502+fbec5cc6.noarch.rpm	924b8750f0e002cf33e3dc8a7c156092da3eab8f5ae82604b99b4674baa205a0	-	ol8_x86_64_appstream
	containernetworking-plugins-0.8.3-4.0.1.module+el8.1.1+5502+fbec5cc6.x86_64.rpm	c95e4b8e80287295729cdf0db0035bd9b06f09e7319ce9d02d7a2a237f6a307a	-	ol8_x86_64_appstream
	containers-common-0.1.40-8.0.1.module+el8.1.1+5502+fbec5cc6.x86_64.rpm	f7ac5f72aab547584cc1d555c6d0169377b9fd4e35ece63dc2eb3305db03ef22	-	ol8_x86_64_appstream
	fuse-overlayfs-0.7.2-5.module+el8.1.1+5573+1c3f6079.x86_64.rpm	75e0925836a9325ac61a7219259799f872f24d8df044f34e297e8bbc013ad976	-	ol8_x86_64_appstream
	podman-1.6.4-4.0.1.module+el8.1.1+5573+1c3f6079.x86_64.rpm	7a0a924f80f9cb2fbc2590a34bb644d3ed9085a5ee0c0689be7269bc61a50693	-	ol8_x86_64_appstream
	podman-docker-1.6.4-4.0.1.module+el8.1.1+5573+1c3f6079.noarch.rpm	3da2fb0a8bc3a70b49392611b8957581bc1b81e064126e12ab1add58224b6542	-	ol8_x86_64_appstream
	podman-manpages-1.6.4-4.0.1.module+el8.1.1+5573+1c3f6079.noarch.rpm	de3c02d81d12c1dba7a2b2daca33c615e4a365df36b37c342d76f1930e6be512	-	ol8_x86_64_appstream
	podman-remote-1.6.4-4.0.1.module+el8.1.1+5573+1c3f6079.x86_64.rpm	15f41e134ab9ca5b13c5b84621da219dc81c09b5bb35d8198c9901f76418f7d4	-	ol8_x86_64_appstream
	podman-tests-1.6.4-4.0.1.module+el8.1.1+5573+1c3f6079.x86_64.rpm	8dda2d10b675a720097deec71cd67fec308534d6b64f46308ccab4e192ebb9af	-	ol8_x86_64_appstream
	python-podman-api-1.2.0-0.2.gitd0a45fe.module+el8.1.1+5502+fbec5cc6.noarch.rpm	149d7a7befae373cc0d9309bd0af41b2fb7a9db9362ec7d1bb5a632459f93cea	-	ol8_x86_64_appstream
	runc-1.0.0-64.rc9.module+el8.1.1+5502+fbec5cc6.x86_64.rpm	f64e40a286310ef94f1e15a23ddccb484d258ab32c7e022646ac2b78ab7d4328	-	ol8_x86_64_appstream
	skopeo-0.1.40-8.0.1.module+el8.1.1+5502+fbec5cc6.x86_64.rpm	dc0f1805d6f9b0e7d739878b6c33ce2dd324e96388622c37aaec23790f0e72b2	-	ol8_x86_64_appstream
	skopeo-tests-0.1.40-8.0.1.module+el8.1.1+5502+fbec5cc6.x86_64.rpm	778163fed9399378fb019a7c2d468c5ef28cf94aacc5efad0dcf0a4954939d9e	-	ol8_x86_64_appstream
	slirp4netns-0.4.2-3.git21fdece.module+el8.1.1+5573+1c3f6079.x86_64.rpm	c9f7c8bf140c547facd5d3c72491df9eef2cbaeecbddabe77bfe0c8fad9fdaa2	-	ol8_x86_64_appstream
	toolbox-0.0.4-1.module+el8.1.1+5502+fbec5cc6.x86_64.rpm	e651e1214dabd689a6c7dd9af3af81d0cda235e4a1ed5b42d01598dee28dbc73	-	ol8_x86_64_appstream
	udica-0.2.1-2.module+el8.1.1+5502+fbec5cc6.noarch.rpm	51fc18f42fea02c79eb4d552ba4a0190c20a595a58808c5f024c81ae812477cf	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team