Oval Definition:oval:com.redhat.rhsa:def:20228431
Revision Date:2022-11-15Version:635
Title:RHSA-2022:8431: podman security, bug fix, and enhancement update (Low)
Description:The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

  • podman: possible information disclosure and modification (CVE-2022-2989)

  • buildah: possible information disclosure and modification (CVE-2022-2990)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

  • (podman image trust) does not support the new trust type "sigstoreSigned " (BZ#2120436)

  • dnf-update broken for podman/catatonit (BZ#2123319)

  • podman creates lock file in /etc/cni/net.d/cni.lock instead of /run/lock/ (BZ#2123905)

  • podman kill may deadlock [RHEL 9.1] (BZ#2124716)

  • containers config.json gets empty after sudden power loss (BZ#2136278)

  • PANIC podman API service endpoint handler panic (BZ#2136287)

    Enhancement(s):

  • Podman volume plugin timeout should be configurable [rhel-9.1.0 Z] (BZ#2124676)

  • [RFE]Podman support to perform custom actions on unhealthy containers (BZ#2136281)
  • Family:unixClass:patch
    Status:Reference(s):CVE-2022-2989
    CVE-2022-2990
    RHSA-2022:8431
    Platform(s):Red Hat Enterprise Linux 9
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 9 is installed
  • AND
  • podman is earlier than 2:4.2.0-7.el9_1
  • AND podman is signed with Red Hat redhatrelease2 key
  • podman-catatonit is earlier than 2:4.2.0-7.el9_1
  • AND podman-catatonit is signed with Red Hat redhatrelease2 key
  • podman-docker is earlier than 2:4.2.0-7.el9_1
  • AND podman-docker is signed with Red Hat redhatrelease2 key
  • podman-gvproxy is earlier than 2:4.2.0-7.el9_1
  • AND podman-gvproxy is signed with Red Hat redhatrelease2 key
  • podman-plugins is earlier than 2:4.2.0-7.el9_1
  • AND podman-plugins is signed with Red Hat redhatrelease2 key
  • podman-remote is earlier than 2:4.2.0-7.el9_1
  • AND podman-remote is signed with Red Hat redhatrelease2 key
  • podman-tests is earlier than 2:4.2.0-7.el9_1
  • AND podman-tests is signed with Red Hat redhatrelease2 key
  • BACK