Fedora Linux 8648 Published by

A podman security update has been released for Fedora 37.



SECURITY: Fedora 37 Update: podman-4.4.4-3.fc37


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-c40519168b
2023-04-06 01:53:39.783162
--------------------------------------------------------------------------------

Name : podman
Product : Fedora 37
Version : 4.4.4
Release : 3.fc37
URL :   https://podman.io/
Summary : Manage Pods, Containers and Container Images
Description :
podman (Pod Manager) is a fully featured container engine that is a simple
daemonless tool. podman provides a Docker-CLI comparable command line that
eases the transition from other container engines and allows the management of
pods, containers and images. Simply put: alias docker=podman.
Most podman commands can be run as a regular user, without requiring
additional privileges.

podman uses Buildah(1) internally to create container images.
Both tools share image (not container) storage, hence each can use or
manipulate images (but not containers) created by the other.

Manage Pods, Containers and Container Images
podman Simple management tool for pods, containers and images

--------------------------------------------------------------------------------
Update Information:

Resolves: 2183639,2183641 - use min conmon v2.1.7 ---- Adjust tests for new
Ansible ---- auto bump to v4.4.3
--------------------------------------------------------------------------------
ChangeLog:

* Mon Apr 3 2023 Lokesh Mandvekar - 5:4.4.4-3
- Resolves: #2183641 - use min conmon v2.1.7
* Fri Mar 31 2023 Miroslav Vadkerti - 5:4.4.4-2
- Adjust tests for new Ansible
* Mon Mar 27 2023 RH Container Bot - 5:4.4.4-1
- auto bump to v4.4.4
* Fri Mar 24 2023 Lokesh Mandvekar - 5:4.4.3-2
- ensure no buildroot macro left in /usr/bin/docker
* Thu Mar 23 2023 RH Container Bot - 5:4.4.3-1
- auto bump to v4.4.3
* Mon Mar 6 2023 Lokesh Mandvekar - 5:4.4.2-3
- migrated to SPDX license
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2183639 - podman/conmon: null bytes in logging messages is can result in buffer overread which results in segfault
  https://bugzilla.redhat.com/show_bug.cgi?id=2183639
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-c40519168b' at the command
line. For more information, refer to the dnf documentation available at
  http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
  https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________