Описание
ELSA-2025-23325: podman security update (MODERATE)
[5.6.0-9.0.1]
- Add devices on container startup, not on creation
- overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]
[6:5.6.0-9]
- update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/3bf5313)
- fixes 'run 1.2.x upgrade throws error while using nocopy volume mount filesystem option - [RHEL 9.7]'
- Resolves: RHEL-132531
[6:5.6.0-8]
- rebuild for golang-1.25.3
- Resolves: RHEL-125711
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
podman
5.6.0-9.0.1.el9_7
podman-docker
5.6.0-9.0.1.el9_7
podman-plugins
5.6.0-9.0.1.el9_7
podman-remote
5.6.0-9.0.1.el9_7
podman-tests
5.6.0-9.0.1.el9_7
Oracle Linux x86_64
podman
5.6.0-9.0.1.el9_7
podman-docker
5.6.0-9.0.1.el9_7
podman-plugins
5.6.0-9.0.1.el9_7
podman-remote
5.6.0-9.0.1.el9_7
podman-tests
5.6.0-9.0.1.el9_7
Связанные CVE
Связанные уязвимости
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.
Unbounded allocation when parsing GNU sparse map in archive/tar
tar.Reader does not set a maximum size on the number of sparse region ...
