[El-errata] ELSA-2019-4269 Important: Oracle Linux 8 container-tools:ol8 security and bug fix update

Fri Jan 3 13:46:10 PST 2020

Oracle Linux Security Advisory ELSA-2019-4269

http://linux.oracle.com/errata/ELSA-2019-4269.html

The following updated rpms for Oracle Linux 8 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
buildah-1.9.0-5.0.1.module+el8.1.0+5440+994fc847.x86_64.rpm
buildah-tests-1.9.0-5.0.1.module+el8.1.0+5440+994fc847.x86_64.rpm
cockpit-podman-4-1.module+el8.1.0+5440+994fc847.noarch.rpm
containernetworking-plugins-0.8.1-3.0.1.module+el8.1.0+5460+5d763c32.x86_64.rpm
containers-common-0.1.37-6.0.1.module+el8.1.0+5460+5d763c32.x86_64.rpm
container-selinux-2.123.0-2.module+el8.1.0+5460+5d763c32.noarch.rpm
fuse-overlayfs-0.4.1-1.module+el8.1.0+5440+994fc847.x86_64.rpm
oci-systemd-hook-0.1.15-2.git2d0b8a3.module+el8.1.0+5440+994fc847.x86_64.rpm
oci-umount-2.3.4-2.git87f9237.module+el8.1.0+5440+994fc847.x86_64.rpm
podman-1.4.2-6.0.1.module+el8.1.0+5460+5d763c32.x86_64.rpm
podman-docker-1.4.2-6.0.1.module+el8.1.0+5460+5d763c32.noarch.rpm
podman-manpages-1.4.2-6.0.1.module+el8.1.0+5460+5d763c32.noarch.rpm
podman-remote-1.4.2-6.0.1.module+el8.1.0+5460+5d763c32.x86_64.rpm
podman-tests-1.4.2-6.0.1.module+el8.1.0+5460+5d763c32.x86_64.rpm
python-podman-api-1.2.0-0.1.gitd0a45fe.module+el8.1.0+5440+994fc847.noarch.rpm
runc-1.0.0-61.rc8.module+el8.1.0+5460+5d763c32.x86_64.rpm
skopeo-0.1.37-6.0.1.module+el8.1.0+5460+5d763c32.x86_64.rpm
skopeo-tests-0.1.37-6.0.1.module+el8.1.0+5460+5d763c32.x86_64.rpm
slirp4netns-0.3.0-4.module+el8.1.0+5440+994fc847.x86_64.rpm

aarch64:
buildah-1.9.0-5.0.1.module+el8.1.0+5440+994fc847.aarch64.rpm
buildah-tests-1.9.0-5.0.1.module+el8.1.0+5440+994fc847.aarch64.rpm
cockpit-podman-4-1.module+el8.1.0+5440+994fc847.noarch.rpm
containernetworking-plugins-0.8.1-3.0.1.module+el8.1.0+5460+5d763c32.aarch64.rpm
containers-common-0.1.37-6.0.1.module+el8.1.0+5460+5d763c32.aarch64.rpm
container-selinux-2.123.0-2.module+el8.1.0+5460+5d763c32.noarch.rpm
fuse-overlayfs-0.4.1-1.module+el8.1.0+5440+994fc847.aarch64.rpm
oci-systemd-hook-0.1.15-2.git2d0b8a3.module+el8.1.0+5440+994fc847.aarch64.rpm
oci-umount-2.3.4-2.git87f9237.module+el8.1.0+5440+994fc847.aarch64.rpm
podman-1.4.2-6.0.1.module+el8.1.0+5460+5d763c32.aarch64.rpm
podman-docker-1.4.2-6.0.1.module+el8.1.0+5460+5d763c32.noarch.rpm
podman-manpages-1.4.2-6.0.1.module+el8.1.0+5460+5d763c32.noarch.rpm
podman-remote-1.4.2-6.0.1.module+el8.1.0+5460+5d763c32.aarch64.rpm
podman-tests-1.4.2-6.0.1.module+el8.1.0+5460+5d763c32.aarch64.rpm
python-podman-api-1.2.0-0.1.gitd0a45fe.module+el8.1.0+5440+994fc847.noarch.rpm
runc-1.0.0-61.rc8.module+el8.1.0+5460+5d763c32.aarch64.rpm
skopeo-0.1.37-6.0.1.module+el8.1.0+5460+5d763c32.aarch64.rpm
skopeo-tests-0.1.37-6.0.1.module+el8.1.0+5460+5d763c32.aarch64.rpm
slirp4netns-0.3.0-4.module+el8.1.0+5440+994fc847.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/buildah-1.9.0-5.0.1.module+el8.1.0+5440+994fc847.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/cockpit-podman-4-1.module+el8.1.0+5440+994fc847.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/containernetworking-plugins-0.8.1-3.0.1.module+el8.1.0+5460+5d763c32.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/container-selinux-2.123.0-2.module+el8.1.0+5460+5d763c32.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/fuse-overlayfs-0.4.1-1.module+el8.1.0+5440+994fc847.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/oci-systemd-hook-0.1.15-2.git2d0b8a3.module+el8.1.0+5440+994fc847.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/oci-umount-2.3.4-2.git87f9237.module+el8.1.0+5440+994fc847.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/podman-1.4.2-6.0.1.module+el8.1.0+5460+5d763c32.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/python-podman-api-1.2.0-0.1.gitd0a45fe.module+el8.1.0+5440+994fc847.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/runc-1.0.0-61.rc8.module+el8.1.0+5460+5d763c32.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/skopeo-0.1.37-6.0.1.module+el8.1.0+5460+5d763c32.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/slirp4netns-0.3.0-4.module+el8.1.0+5440+994fc847.src.rpm

Description of changes:

buildah
[1.9.0-5.0.1]
- Fixes troubles with oracle registry login [Orabug: 29937283]

[1.9.0-5]
- Use autosetup macro again.

[1.9.0-4]
- Fix CVE-2019-10214 (#1734653).

[1.9.0-3]
- Resolves: #1721247 - enable fips mode

[1.9.0-2]
- Resolves: #1720654 - tests subpackage depends on golang explicitly

[1.9.0-1]
- Resolves: #1720654 - rebase to v1.9.0

cockpit-podman
[4-1]
- Fix regression in container commit
- Fix AppStream ID rhbz#1734809

[3-1]
- Enable Commit button for running containers
- Fix race condition with container deletion
- Stop fetching all containers/images for each container/image event

[2-2]
- Fix podman dependency

[2-1]
- Update to upstream 2 release
- Support podman API 1.3
- Support running commands with arguments
- Show the default command coming from image
- Implement filtering of images and containers

containernetworking-plugins
[0.8.1-3.0.1]
- Disable debuginfo

[0.8.1-3]
- rebuild to address CVE-2019-9514 and CVE-2019-9512
- Resolves: #1766318, #1766217

container-selinux
[2:2.123.0-1]
- update to 2.123.0
- Related: #1774382

fuse-overlayfs
[0.4.1-1]
- Resolves: #1720654 - rebase to v0.4.1

[0.3-2]
- rebase
- Resolves:#1666510

podman
[1.4.2-6.0.1]
- Ensure patch for Oracle docker registry is applied [Orabug: 30533101]
- delivering fix for [Orabug: 29874238] by Nikita Gerasimov 
<nikita.gerasimov at oracle.com>

[1.4.2-6]
- update to 1.4.2-stable3
- Resolves: #1770176

python-podman-api
[1.2.0-0.1.gitd0a45fe]
- Initial package

runc
[1.0.0-61.rc8]
- backport patches for CVE-2019-16884 from upstream
- Resolves: #1764182

skopeo
[1:0.1.37-6.0.1]
- Ensure patch for Oracle docker registry is applied [Orabug: 30533101]
- Add oracle registry into the conf file [Orabug: 29845934]
- Fix oracle registry login issues [Orabug: 29937192]

[1:0.1.37-6]
- rebuild because of CVE-2019-9512 and CVE-2019-9514
- Resolves: #1772136, #1772131

slirp4netns [0.3.0-4]
- Fix CVE-2019-14378 (#1755595).

[0.3.0-3]
- Resolves: #1683217 - BR: glib2-devel

[0.3.0-2]
- Resolves: #1683217 - bump slirp4netns to v0.3.0

[0.3.0-1.alpha.2.git30883b5]
- bump to v0.3.0-alpha.2