Oracle alert ELSA-2021-2371 (container-tools:ol8)
From: | Errata Announcements for Oracle Linux <el-errata@oss.oracle.com> | |
To: | el-errata@oss.oracle.com | |
Subject: | [El-errata] ELSA-2021-2371 Important: Oracle Linux 8 container-tools:ol8 security update | |
Date: | Mon, 14 Jun 2021 07:36:18 -0700 | |
Message-ID: | <60c76962.JWkizoqUDDorv3IQ%keshav.sharma@oracle.com> |
Oracle Linux Security Advisory ELSA-2021-2371 http://linux.oracle.com/errata/ELSA-2021-2371.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: buildah-1.19.7-2.0.1.module+el8.4.0+20195+0a4a4953.x86_64.rpm buildah-tests-1.19.7-2.0.1.module+el8.4.0+20195+0a4a4953.x86_64.rpm cockpit-podman-29-2.module+el8.4.0+20195+0a4a4953.noarch.rpm conmon-2.0.26-3.module+el8.4.0+20195+0a4a4953.x86_64.rpm containernetworking-plugins-0.9.1-1.module+el8.4.0+20195+0a4a4953.x86_64.rpm containers-common-1.2.2-10.0.1.module+el8.4.0+20195+0a4a4953.x86_64.rpm container-selinux-2.162.0-1.module+el8.4.0+20195+0a4a4953.noarch.rpm crit-3.15-1.module+el8.4.0+20195+0a4a4953.x86_64.rpm criu-3.15-1.module+el8.4.0+20195+0a4a4953.x86_64.rpm crun-0.18-2.module+el8.4.0+20195+0a4a4953.x86_64.rpm fuse-overlayfs-1.4.0-3.module+el8.4.0+20195+0a4a4953.x86_64.rpm libslirp-4.3.1-1.module+el8.4.0+20195+0a4a4953.x86_64.rpm libslirp-devel-4.3.1-1.module+el8.4.0+20195+0a4a4953.x86_64.rpm oci-seccomp-bpf-hook-1.2.0-2.module+el8.4.0+20195+0a4a4953.x86_64.rpm podman-3.0.1-7.0.1.module+el8.4.0+20195+0a4a4953.x86_64.rpm podman-catatonit-3.0.1-7.0.1.module+el8.4.0+20195+0a4a4953.x86_64.rpm podman-docker-3.0.1-7.0.1.module+el8.4.0+20195+0a4a4953.noarch.rpm podman-plugins-3.0.1-7.0.1.module+el8.4.0+20195+0a4a4953.x86_64.rpm podman-remote-3.0.1-7.0.1.module+el8.4.0+20195+0a4a4953.x86_64.rpm podman-tests-3.0.1-7.0.1.module+el8.4.0+20195+0a4a4953.x86_64.rpm python3-criu-3.15-1.module+el8.4.0+20195+0a4a4953.x86_64.rpm runc-1.0.0-73.rc93.module+el8.4.0+20195+0a4a4953.x86_64.rpm skopeo-1.2.2-10.0.1.module+el8.4.0+20195+0a4a4953.x86_64.rpm skopeo-tests-1.2.2-10.0.1.module+el8.4.0+20195+0a4a4953.x86_64.rpm slirp4netns-1.1.8-1.module+el8.4.0+20195+0a4a4953.x86_64.rpm udica-0.2.4-1.module+el8.4.0+20195+0a4a4953.noarch.rpm aarch64: buildah-1.19.7-2.0.1.module+el8.4.0+20195+0a4a4953.aarch64.rpm buildah-tests-1.19.7-2.0.1.module+el8.4.0+20195+0a4a4953.aarch64.rpm cockpit-podman-29-2.module+el8.4.0+20195+0a4a4953.noarch.rpm conmon-2.0.26-3.module+el8.4.0+20195+0a4a4953.aarch64.rpm containernetworking-plugins-0.9.1-1.module+el8.4.0+20195+0a4a4953.aarch64.rpm containers-common-1.2.2-10.0.1.module+el8.4.0+20195+0a4a4953.aarch64.rpm container-selinux-2.162.0-1.module+el8.4.0+20195+0a4a4953.noarch.rpm crit-3.15-1.module+el8.4.0+20195+0a4a4953.aarch64.rpm criu-3.15-1.module+el8.4.0+20195+0a4a4953.aarch64.rpm crun-0.18-2.module+el8.4.0+20195+0a4a4953.aarch64.rpm fuse-overlayfs-1.4.0-3.module+el8.4.0+20195+0a4a4953.aarch64.rpm libslirp-4.3.1-1.module+el8.4.0+20195+0a4a4953.aarch64.rpm libslirp-devel-4.3.1-1.module+el8.4.0+20195+0a4a4953.aarch64.rpm oci-seccomp-bpf-hook-1.2.0-2.module+el8.4.0+20195+0a4a4953.aarch64.rpm podman-3.0.1-7.0.1.module+el8.4.0+20195+0a4a4953.aarch64.rpm podman-catatonit-3.0.1-7.0.1.module+el8.4.0+20195+0a4a4953.aarch64.rpm podman-docker-3.0.1-7.0.1.module+el8.4.0+20195+0a4a4953.noarch.rpm podman-plugins-3.0.1-7.0.1.module+el8.4.0+20195+0a4a4953.aarch64.rpm podman-remote-3.0.1-7.0.1.module+el8.4.0+20195+0a4a4953.aarch64.rpm podman-tests-3.0.1-7.0.1.module+el8.4.0+20195+0a4a4953.aarch64.rpm python3-criu-3.15-1.module+el8.4.0+20195+0a4a4953.aarch64.rpm runc-1.0.0-73.rc93.module+el8.4.0+20195+0a4a4953.aarch64.rpm skopeo-1.2.2-10.0.1.module+el8.4.0+20195+0a4a4953.aarch64.rpm skopeo-tests-1.2.2-10.0.1.module+el8.4.0+20195+0a4a4953.aarch64.rpm slirp4netns-1.1.8-1.module+el8.4.0+20195+0a4a4953.aarch64.rpm udica-0.2.4-1.module+el8.4.0+20195+0a4a4953.noarch.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates/buildah-1.19.7-2.... http://oss.oracle.com/ol8/SRPMS-updates/cockpit-podman-29... http://oss.oracle.com/ol8/SRPMS-updates/conmon-2.0.26-3.m... http://oss.oracle.com/ol8/SRPMS-updates/containernetworki... http://oss.oracle.com/ol8/SRPMS-updates/container-selinux... http://oss.oracle.com/ol8/SRPMS-updates/criu-3.15-1.modul... http://oss.oracle.com/ol8/SRPMS-updates/crun-0.18-2.modul... http://oss.oracle.com/ol8/SRPMS-updates/fuse-overlayfs-1.... http://oss.oracle.com/ol8/SRPMS-updates/libslirp-4.3.1-1.... http://oss.oracle.com/ol8/SRPMS-updates/oci-seccomp-bpf-h... http://oss.oracle.com/ol8/SRPMS-updates/podman-3.0.1-7.0.... http://oss.oracle.com/ol8/SRPMS-updates/runc-1.0.0-73.rc9... http://oss.oracle.com/ol8/SRPMS-updates/skopeo-1.2.2-10.0... http://oss.oracle.com/ol8/SRPMS-updates/slirp4netns-1.1.8... http://oss.oracle.com/ol8/SRPMS-updates/udica-0.2.4-1.mod... Related CVEs: CVE-2021-30465 Description of changes: buildah [1.19.7-2.0.1] - Fixes troubles with oracle registry login [Orabug: 29937283] [1.19.7-2] - revert changes to the state of 3.0-8.4.0 - Related: #1954702 conmon [2:2.0.26-3] - fix 'Permission on /dev/null are changing from 666 to 777 after running podman as root [rhel-8.4.0.z]' - Resolves: #1961682 [2:2.0.26-2] - revert back to the state of 3.0-8.4.0 - Related: #1954702 container-selinux [2:2.162.0-1] - update to https://github.com/containers/container-selinux/releases/... - Related: #1954702 [2:2.161.1-2] - do not use lockdown class yet - it is not available in RHEL - Related: #1954702 [2:2.161.1-1] - update to https://github.com/containers/container-selinux/releases/... - Related: #1954702 [2:2.160.2-1] - update to https://github.com/containers/container-selinux/releases/... - Related: #1954702 crun [0.18-2] - revert back to the state of 3.0-8.4.0 - Related: #1954702 fuse-overlayfs [1.4.0-3] - revert back to the state of 3.0-8.4.0 - Related: #1954702 podman [3.0.1-7.0.1] - Handling redirect from the docker registry [Orabug: 29874238] (Nikita Gerasimov) [3.0.1-7] - revert back to the state of 3.0-8.4.0 - Related: #1954702 runc [1.0.0-73.rc93] - fix 'podman run --pid=host command causes OCI permission error' - Related: #1954702 [1.0.0-72.rc93] - fix CVE-2021-30465 - Related: #1954702 [1.0.0-71.rc93] - upload rc93 tarball - Related: #1954702 skopeo [1:1.2.2-10.0.1] - Handling redirect from the docker registry [Orabug: 29874238] (Nikita Gerasimov) - Add oracle registry into the conf file [Orabug: 29845934 31306708] [1:1.2.2-10] - re-enable release-1.2 branch - Related: #1954702 _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata