A container-tools:4.0 security and bug fix update has been released for Oracle Linux 8.

ELSA-2023-7202 Moderate: Oracle Linux 8 container-tools:4.0 security and bug fix update

Oracle Linux Security Advisory ELSA-2023-7202

http://linux.oracle.com/errata/ELSA-2023-7202.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
aardvark-dns-1.0.1-38.0.1.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
buildah-1.24.6-7.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
buildah-tests-1.24.6-7.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
cockpit-podman-46-1.module+el8.9.0+90086+8f2d6fb1.noarch.rpm
conmon-2.1.4-2.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
container-selinux-2.205.0-3.module+el8.9.0+90086+8f2d6fb1.noarch.rpm
containernetworking-plugins-1.1.1-5.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
containers-common-1-38.0.1.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
crit-3.15-3.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
criu-3.15-3.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
criu-devel-3.15-3.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
criu-libs-3.15-3.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
crun-1.8.7-1.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
fuse-overlayfs-1.9-2.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
libslirp-4.4.0-1.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
libslirp-devel-4.4.0-1.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
netavark-1.0.1-38.0.1.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
oci-seccomp-bpf-hook-1.2.5-2.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
podman-4.0.2-24.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
podman-catatonit-4.0.2-24.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
podman-docker-4.0.2-24.module+el8.9.0+90086+8f2d6fb1.noarch.rpm
podman-gvproxy-4.0.2-24.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
podman-plugins-4.0.2-24.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
podman-remote-4.0.2-24.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
podman-tests-4.0.2-24.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
python3-criu-3.15-3.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
python3-podman-4.0.0-2.module+el8.9.0+90086+8f2d6fb1.noarch.rpm
runc-1.1.5-2.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
skopeo-1.6.2-9.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
skopeo-tests-1.6.2-9.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
slirp4netns-1.1.8-3.module+el8.9.0+90086+8f2d6fb1.x86_64.rpm
udica-0.2.6-4.module+el8.9.0+90086+8f2d6fb1.noarch.rpm

aarch64:
cockpit-podman-46-1.module+el8.9.0+90086+8f2d6fb1.noarch.rpm
container-selinux-2.205.0-3.module+el8.9.0+90086+8f2d6fb1.noarch.rpm
podman-docker-4.0.2-24.module+el8.9.0+90086+8f2d6fb1.noarch.rpm
python3-podman-4.0.0-2.module+el8.9.0+90086+8f2d6fb1.noarch.rpm
udica-0.2.6-4.module+el8.9.0+90086+8f2d6fb1.noarch.rpm
aardvark-dns-1.0.1-38.0.1.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
buildah-1.24.6-7.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
buildah-tests-1.24.6-7.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
conmon-2.1.4-2.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
containernetworking-plugins-1.1.1-5.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
containers-common-1-38.0.1.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
crit-3.15-3.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
criu-3.15-3.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
criu-devel-3.15-3.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
criu-libs-3.15-3.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
crun-1.8.7-1.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
fuse-overlayfs-1.9-2.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
libslirp-4.4.0-1.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
libslirp-devel-4.4.0-1.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
netavark-1.0.1-38.0.1.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
oci-seccomp-bpf-hook-1.2.5-2.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
podman-4.0.2-24.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
podman-catatonit-4.0.2-24.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
podman-gvproxy-4.0.2-24.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
podman-plugins-4.0.2-24.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
podman-remote-4.0.2-24.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
podman-tests-4.0.2-24.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
python3-criu-3.15-3.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
runc-1.1.5-2.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
skopeo-1.6.2-9.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
skopeo-tests-1.6.2-9.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm
slirp4netns-1.1.8-3.module+el8.9.0+90086+8f2d6fb1.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//buildah-1.24.6-7.module+el8.9.0+90086+8f2d6fb1.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//cockpit-podman-46-1.module+el8.9.0+90086+8f2d6fb1.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//conmon-2.1.4-2.module+el8.9.0+90086+8f2d6fb1.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//containernetworking-plugins-1.1.1-5.module+el8.9.0+90086+8f2d6fb1.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//containers-common-1-38.0.1.module+el8.9.0+90086+8f2d6fb1.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//container-selinux-2.205.0-3.module+el8.9.0+90086+8f2d6fb1.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//criu-3.15-3.module+el8.9.0+90086+8f2d6fb1.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//crun-1.8.7-1.module+el8.9.0+90086+8f2d6fb1.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//fuse-overlayfs-1.9-2.module+el8.9.0+90086+8f2d6fb1.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//libslirp-4.4.0-1.module+el8.9.0+90086+8f2d6fb1.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//oci-seccomp-bpf-hook-1.2.5-2.module+el8.9.0+90086+8f2d6fb1.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//podman-4.0.2-24.module+el8.9.0+90086+8f2d6fb1.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//python-podman-4.0.0-2.module+el8.9.0+90086+8f2d6fb1.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//runc-1.1.5-2.module+el8.9.0+90086+8f2d6fb1.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//skopeo-1.6.2-9.module+el8.9.0+90086+8f2d6fb1.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//slirp4netns-1.1.8-3.module+el8.9.0+90086+8f2d6fb1.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//udica-0.2.6-4.module+el8.9.0+90086+8f2d6fb1.src.rpm

Related CVEs:

CVE-2023-29406

Description of changes:

buildah
[1:1.24.6-7]
- rebuild for CVE-2023-29406
- Related: #2176055

cockpit-podman
[46-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/46
- Related: #2061390

conmon
[2:2.1.4-2]
- update to https://github.com/containers/conmon/releases/tag/v2.1.4
- Related: #2176055

containernetworking-plugins
[1:1.1.1-5]
- add Epoch in Provides
- Related: #2176055

containers-common
[1-38.0.1]
- Updated removed references [Orabug: 33473101] (Alex Burmashev)
- Adjust registries.conf (Nikita Gerasimov)
- remove references to RedHat registry (Nikita Gerasimov)

container-selinux
[2:2.205.0-3]
- fix build for stable module
- Related: #2176055

criu
[3.15-3]
- add Requires: criu-libs = %{version}-%{release} in criu-devel
- add gating tests
- Related: #1934415

crun
fuse-overlayfs
libslirp
oci-seccomp-bpf-hook
[1.2.5-2]
- fix compatibility with the new bcc
- Related: #2176055

podman
[2:4.0.2-24]
- rebuild for CVE-2023-29406
- Related: #2176055

python-podman
[4.0.0-2]
- bump to v4.0.0
- Related: #2176055

runc
[1:1.1.5-2]
- rebuild for following CVEs: CVE-2022-41724
- Resolves: #2179971