Oracle alert ELSA-2025-9142 (container-tools:ol8)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2025-9142 Moderate: Oracle Linux 8 container-tools:ol8 security update | |
| Date: | Fri, 20 Jun 2025 21:12:10 -0700 | |
| Message-ID: | <mailman.499.1750479139.37250.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2025-9142 http://linux.oracle.com/errata/ELSA-2025-9142.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: aardvark-dns-1.10.1-2.module+el8.10.0+90618+4905d84b.x86_64.rpm buildah-1.33.12-2.module+el8.10.0+90618+4905d84b.x86_64.rpm buildah-tests-1.33.12-2.module+el8.10.0+90618+4905d84b.x86_64.rpm cockpit-podman-84.1-1.module+el8.10.0+90618+4905d84b.noarch.rpm conmon-2.1.10-1.module+el8.10.0+90618+4905d84b.x86_64.rpm containernetworking-plugins-1.4.0-6.module+el8.10.0+90618+4905d84b.x86_64.rpm containers-common-1-82.0.1.module+el8.10.0+90618+4905d84b.x86_64.rpm container-selinux-2.229.0-2.module+el8.10.0+90618+4905d84b.noarch.rpm crit-3.18-5.module+el8.10.0+90618+4905d84b.x86_64.rpm criu-3.18-5.module+el8.10.0+90618+4905d84b.x86_64.rpm criu-devel-3.18-5.module+el8.10.0+90618+4905d84b.x86_64.rpm criu-libs-3.18-5.module+el8.10.0+90618+4905d84b.x86_64.rpm crun-1.14.3-2.module+el8.10.0+90618+4905d84b.x86_64.rpm fuse-overlayfs-1.13-1.module+el8.10.0+90618+4905d84b.x86_64.rpm libslirp-4.4.0-2.module+el8.10.0+90618+4905d84b.x86_64.rpm libslirp-devel-4.4.0-2.module+el8.10.0+90618+4905d84b.x86_64.rpm netavark-1.10.3-1.module+el8.10.0+90618+4905d84b.x86_64.rpm oci-seccomp-bpf-hook-1.2.10-1.module+el8.10.0+90618+4905d84b.x86_64.rpm podman-4.9.4-20.0.1.module+el8.10.0+90618+4905d84b.x86_64.rpm podman-catatonit-4.9.4-20.0.1.module+el8.10.0+90618+4905d84b.x86_64.rpm podman-docker-4.9.4-20.0.1.module+el8.10.0+90618+4905d84b.noarch.rpm podman-gvproxy-4.9.4-20.0.1.module+el8.10.0+90618+4905d84b.x86_64.rpm podman-plugins-4.9.4-20.0.1.module+el8.10.0+90618+4905d84b.x86_64.rpm podman-remote-4.9.4-20.0.1.module+el8.10.0+90618+4905d84b.x86_64.rpm podman-tests-4.9.4-20.0.1.module+el8.10.0+90618+4905d84b.x86_64.rpm python3-criu-3.18-5.module+el8.10.0+90618+4905d84b.x86_64.rpm python3-podman-4.9.0-3.module+el8.10.0+90618+4905d84b.noarch.rpm runc-1.1.12-6.module+el8.10.0+90618+4905d84b.x86_64.rpm skopeo-1.14.5-4.module+el8.10.0+90618+4905d84b.x86_64.rpm skopeo-tests-1.14.5-4.module+el8.10.0+90618+4905d84b.x86_64.rpm slirp4netns-1.2.3-1.module+el8.10.0+90618+4905d84b.x86_64.rpm udica-0.2.6-21.module+el8.10.0+90618+4905d84b.noarch.rpm aarch64: aardvark-dns-1.10.1-2.module+el8.10.0+90618+4905d84b.aarch64.rpm buildah-1.33.12-2.module+el8.10.0+90618+4905d84b.aarch64.rpm buildah-tests-1.33.12-2.module+el8.10.0+90618+4905d84b.aarch64.rpm cockpit-podman-84.1-1.module+el8.10.0+90618+4905d84b.noarch.rpm conmon-2.1.10-1.module+el8.10.0+90618+4905d84b.aarch64.rpm containernetworking-plugins-1.4.0-6.module+el8.10.0+90618+4905d84b.aarch64.rpm containers-common-1-82.0.1.module+el8.10.0+90618+4905d84b.aarch64.rpm container-selinux-2.229.0-2.module+el8.10.0+90618+4905d84b.noarch.rpm crit-3.18-5.module+el8.10.0+90618+4905d84b.aarch64.rpm criu-3.18-5.module+el8.10.0+90618+4905d84b.aarch64.rpm criu-devel-3.18-5.module+el8.10.0+90618+4905d84b.aarch64.rpm criu-libs-3.18-5.module+el8.10.0+90618+4905d84b.aarch64.rpm crun-1.14.3-2.module+el8.10.0+90618+4905d84b.aarch64.rpm fuse-overlayfs-1.13-1.module+el8.10.0+90618+4905d84b.aarch64.rpm libslirp-4.4.0-2.module+el8.10.0+90618+4905d84b.aarch64.rpm libslirp-devel-4.4.0-2.module+el8.10.0+90618+4905d84b.aarch64.rpm netavark-1.10.3-1.module+el8.10.0+90618+4905d84b.aarch64.rpm oci-seccomp-bpf-hook-1.2.10-1.module+el8.10.0+90618+4905d84b.aarch64.rpm podman-4.9.4-20.0.1.module+el8.10.0+90618+4905d84b.aarch64.rpm podman-catatonit-4.9.4-20.0.1.module+el8.10.0+90618+4905d84b.aarch64.rpm podman-docker-4.9.4-20.0.1.module+el8.10.0+90618+4905d84b.noarch.rpm podman-gvproxy-4.9.4-20.0.1.module+el8.10.0+90618+4905d84b.aarch64.rpm podman-plugins-4.9.4-20.0.1.module+el8.10.0+90618+4905d84b.aarch64.rpm podman-remote-4.9.4-20.0.1.module+el8.10.0+90618+4905d84b.aarch64.rpm podman-tests-4.9.4-20.0.1.module+el8.10.0+90618+4905d84b.aarch64.rpm python3-criu-3.18-5.module+el8.10.0+90618+4905d84b.aarch64.rpm python3-podman-4.9.0-3.module+el8.10.0+90618+4905d84b.noarch.rpm runc-1.1.12-6.module+el8.10.0+90618+4905d84b.aarch64.rpm skopeo-1.14.5-4.module+el8.10.0+90618+4905d84b.aarch64.rpm skopeo-tests-1.14.5-4.module+el8.10.0+90618+4905d84b.aarch64.rpm slirp4netns-1.2.3-1.module+el8.10.0+90618+4905d84b.aarch64.rpm udica-0.2.6-21.module+el8.10.0+90618+4905d84b.noarch.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates//aardvark-dns-1.1... http://oss.oracle.com/ol8/SRPMS-updates//buildah-1.33.12-... http://oss.oracle.com/ol8/SRPMS-updates//cockpit-podman-8... http://oss.oracle.com/ol8/SRPMS-updates//conmon-2.1.10-1.... http://oss.oracle.com/ol8/SRPMS-updates//containernetwork... http://oss.oracle.com/ol8/SRPMS-updates//containers-commo... http://oss.oracle.com/ol8/SRPMS-updates//container-selinu... http://oss.oracle.com/ol8/SRPMS-updates//criu-3.18-5.modu... http://oss.oracle.com/ol8/SRPMS-updates//crun-1.14.3-2.mo... http://oss.oracle.com/ol8/SRPMS-updates//fuse-overlayfs-1... http://oss.oracle.com/ol8/SRPMS-updates//libslirp-4.4.0-2... http://oss.oracle.com/ol8/SRPMS-updates//netavark-1.10.3-... http://oss.oracle.com/ol8/SRPMS-updates//oci-seccomp-bpf-... http://oss.oracle.com/ol8/SRPMS-updates//podman-4.9.4-20.... http://oss.oracle.com/ol8/SRPMS-updates//python-podman-4.... http://oss.oracle.com/ol8/SRPMS-updates//runc-1.1.12-6.mo... http://oss.oracle.com/ol8/SRPMS-updates//skopeo-1.14.5-4.... http://oss.oracle.com/ol8/SRPMS-updates//slirp4netns-1.2.... http://oss.oracle.com/ol8/SRPMS-updates//udica-0.2.6-21.m... Related CVEs: CVE-2025-22871 Description of changes: aardvark-dns buildah [2:1.33.12-2] - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 (https://github.com/containers/buildah/commit/cf49e7c) - fixes "CVE-2025-22871 container-tools:rhel8/buildah: Request smuggling due to acceptance of invalid chunked data in net/http [rhel-8.10.z]" - Resolves: RHEL-89239 cockpit-podman conmon containernetworking-plugins [1:1.4.0-6] - rebuild for CVE-2025-22871 - Resolves: RHEL-89244 containers-common [1-82.0.1] - Updated removed references [Orabug: 33473101] (Alex Burmashev) - Adjust registries.conf (Nikita Gerasimov) - remove references to RedHat registry (Nikita Gerasimov) container-selinux criu crun fuse-overlayfs libslirp netavark oci-seccomp-bpf-hook podman [4.9.4-20.0.1] - Fixes issue of container created in cgroupv2 not start in cgroupv1 [Orabug: 36136813] - Fixes container memory limit not set after host is rebooted with cgroupv2 [Orabug: 36136802] - Fixes issue of podman execvp error while using podmansh [Orabug: 36756665] python-podman runc skopeo [2:1.14.5-4] - rebuild for CVE-2025-22871 - Resolves: RHEL-89254 slirp4netns udica _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata