ELSA-2024-3826

ELSA-2024-3826 - podman security and bug fix update

Type:SECURITY
Severity:MODERATE
Release Date:2024-06-11

Description


[4.9.4-4.0.1]
- Improved saving remote build context to tarfile in Podman daemon [Orabug: 36495655]
- Add devices on container startup, not on creation
- Backport fast gzip for compression [Orabug: 36420418]
- overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]

[4:4.9.4-4]
- update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
(https://github.com/containers/podman/commit/4afc71a)
- Resolves: RHEL-28735


Related CVEs


CVE-2024-28176
CVE-2024-28180
CVE-2023-45290

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) podman-4.9.4-4.0.1.el9_4.src.rpmd3e32fe462f9dd221c9f483c5fce623e-ol9_aarch64_appstream
podman-4.9.4-4.0.1.el9_4.aarch64.rpmcb898b5e51f3407516bb569821e3b0b0-ol9_aarch64_appstream
podman-docker-4.9.4-4.0.1.el9_4.noarch.rpmba56ba9b70ad1a262c54e2c44a05e7bc-ol9_aarch64_appstream
podman-plugins-4.9.4-4.0.1.el9_4.aarch64.rpmd77de38866cf57de2dfa5bd6e7c91567-ol9_aarch64_appstream
podman-remote-4.9.4-4.0.1.el9_4.aarch64.rpmf5f5964259d0143c3c3f050bf997bb44-ol9_aarch64_appstream
podman-tests-4.9.4-4.0.1.el9_4.aarch64.rpm83acb9580a73c734763f1c649b00fa98-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) podman-4.9.4-4.0.1.el9_4.src.rpmd3e32fe462f9dd221c9f483c5fce623e-ol9_x86_64_appstream
podman-4.9.4-4.0.1.el9_4.x86_64.rpm87a71387a3a66bc9282024752c94dd00-ol9_x86_64_appstream
podman-docker-4.9.4-4.0.1.el9_4.noarch.rpmba56ba9b70ad1a262c54e2c44a05e7bc-ol9_x86_64_appstream
podman-plugins-4.9.4-4.0.1.el9_4.x86_64.rpm117827027dcd37be16f19317a5e48746-ol9_x86_64_appstream
podman-remote-4.9.4-4.0.1.el9_4.x86_64.rpm5df2a44f69abcceb0546d8d8e433526b-ol9_x86_64_appstream
podman-tests-4.9.4-4.0.1.el9_4.x86_64.rpm426edb406f689d5ac9af3c7e81594df6-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete