podman security update

2023-12-1400:00:00

linux.oracle.com

cve-2023-39318

cve-2023-39319

cve-2023-39321

cve-2023-39322

cve-2023-29409

resolves

orabug

github

jira

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.0%

JSON

[2:4.6.1-7.0.1]

Rebuild for following CVEs:
CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322 CVE-2023-29409
Resolves: #2228743
Resolves: #2237773
Resolves: #2237776
Resolves: #2237777
Resolves: #2237778
[2:4.6.1-6.0.1]
Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]
[2:4.6.1-6]
update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
(https://github.com/containers/podman/commit/68e7ae0)
Related: Jira:RHEL-2112

OSVersionArchitecturePackageVersionFilename
oracle linux9srcpodman< 4.6.1-7.0.1.el9_3podman-4.6.1-7.0.1.el9_3.src.rpm
oracle linux9aarch64podman< 4.6.1-7.0.1.el9_3podman-4.6.1-7.0.1.el9_3.aarch64.rpm
oracle linux9noarchpodman-docker< 4.6.1-7.0.1.el9_3podman-docker-4.6.1-7.0.1.el9_3.noarch.rpm
oracle linux9aarch64podman-gvproxy< 4.6.1-7.0.1.el9_3podman-gvproxy-4.6.1-7.0.1.el9_3.aarch64.rpm
oracle linux9aarch64podman-plugins< 4.6.1-7.0.1.el9_3podman-plugins-4.6.1-7.0.1.el9_3.aarch64.rpm
oracle linux9aarch64podman-remote< 4.6.1-7.0.1.el9_3podman-remote-4.6.1-7.0.1.el9_3.aarch64.rpm
oracle linux9aarch64podman-tests< 4.6.1-7.0.1.el9_3podman-tests-4.6.1-7.0.1.el9_3.aarch64.rpm
oracle linux9srcpodman< 4.6.1-7.0.1.el9_3podman-4.6.1-7.0.1.el9_3.src.rpm
oracle linux9x86_64podman< 4.6.1-7.0.1.el9_3podman-4.6.1-7.0.1.el9_3.x86_64.rpm
oracle linux9noarchpodman-docker< 4.6.1-7.0.1.el9_3podman-docker-4.6.1-7.0.1.el9_3.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	9	src	podman	< 4.6.1-7.0.1.el9_3	podman-4.6.1-7.0.1.el9_3.src.rpm
oracle linux	9	aarch64	podman	< 4.6.1-7.0.1.el9_3	podman-4.6.1-7.0.1.el9_3.aarch64.rpm
oracle linux	9	noarch	podman-docker	< 4.6.1-7.0.1.el9_3	podman-docker-4.6.1-7.0.1.el9_3.noarch.rpm
oracle linux	9	aarch64	podman-gvproxy	< 4.6.1-7.0.1.el9_3	podman-gvproxy-4.6.1-7.0.1.el9_3.aarch64.rpm
oracle linux	9	aarch64	podman-plugins	< 4.6.1-7.0.1.el9_3	podman-plugins-4.6.1-7.0.1.el9_3.aarch64.rpm
oracle linux	9	aarch64	podman-remote	< 4.6.1-7.0.1.el9_3	podman-remote-4.6.1-7.0.1.el9_3.aarch64.rpm
oracle linux	9	aarch64	podman-tests	< 4.6.1-7.0.1.el9_3	podman-tests-4.6.1-7.0.1.el9_3.aarch64.rpm
oracle linux	9	src	podman	< 4.6.1-7.0.1.el9_3	podman-4.6.1-7.0.1.el9_3.src.rpm
oracle linux	9	x86_64	podman	< 4.6.1-7.0.1.el9_3	podman-4.6.1-7.0.1.el9_3.x86_64.rpm
oracle linux	9	noarch	podman-docker	< 4.6.1-7.0.1.el9_3	podman-docker-4.6.1-7.0.1.el9_3.noarch.rpm