erabo/spiegel_podman
1
0
Fork 0
mirror of https://github.com/podman-container-tools/podman.git synced 2026-09-16 20:57:53 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 10
18011 commits 59 branches 275 tags 349 MiB
Commit graph

941 commits

Author SHA1 Message Date
tomsweeneyredhat
2e8bce201e [v4.4.1-rhel] Bump runc to 1.2.9, Buidah 1.29.6 
Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2025-12-17 15:39:55 -05:00
tomsweeneyredhat
be8c3c83cd [v4.4.1-rhel] Bump securejoin to v0.4.1 
This is needed for the fixes that are part of the
ones in the CVE-2025-9566 fix.

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2025-09-09 20:03:19 -04:00
Chris Evich
1ca79bdbaf
Re-vendor golang.org/x/crypto from temp. source 
This commit re-vendors the module from a temporary source, and moves to
an earlier, patched version to address CVE-2025-22869.  Prior to this
commit, building podman fails due to platform dependence on golang 1.18
- the version currently used to build for RHEL.

In the future, it is intended that the RHEL platform will migrate to a
newer golang toolchain.  This will enable re-vendoring the crypto module
again back to the authoritative upstream source.  Thus removing the need
for the temporary fork.

Resolves: RHEL-81300 RHEL-81322

Signed-off-by: Chris Evich <cevich@redhat.com>
 2025-03-21 09:16:15 -04:00
Paul Holzinger
0d24dfef44
vendor: replace crypto with github.com/openshift/golang-crypto@v0.33.openshift.1 
The go 1.23 build requirement is to new for the older branches, switch
to a fork maintained by openshift.

Fixes: CVE-2025-22869
Fixes: https://issues.redhat.com/browse/RHEL-81322
Fixes: https://issues.redhat.com/browse/RHEL-81300
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
 2025-03-13 17:41:35 +01:00
Paul Holzinger
4218941608
Revert "vendor: bump to golang.org/x/crypto@v0.36.0" 
This reverts commit 53a8ef8264.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
 2025-03-13 17:41:27 +01:00
Paul Holzinger
53a8ef8264
vendor: bump to golang.org/x/crypto@v0.36.0 
Fixes: CVE-2025-22869
Fixes: https://issues.redhat.com/browse/RHEL-81322
Fixes: https://issues.redhat.com/browse/RHEL-81300
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
 2025-03-11 19:18:38 +01:00
tomsweeneyredhat
0b9f534a2b [v4.4.1-rhel] CVE-2024-11218 Fix 
This fixes CVE-2024-11218 by vendoring in Buidlah v1.29.5 which
has the actual fixes within it.

Fixes: https://issues.redhat.com/browse/OCPBUGS-44538,
https://issues.redhat.com/browse/OCPBUGS-44537,
https://issues.redhat.com/browse/OCPBUGS-44539,
https://issues.redhat.com/browse/RHEL-67603, https://issues.redhat.com/browse/RHEL-67597

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2025-02-06 18:50:21 -05:00
David Shea
638400242d [v4.4.1-rhel] Update buildah for CVE-2024-9675 
Addresses:
https://issues.redhat.com/browse/RHEL-62386
https://issues.redhat.com/browse/RHEL-62377

[NO NEW TESTS NEEDED]

Signed-off-by: David Shea <dshea@redhat.com>
 2024-10-18 13:37:25 -04:00
tomsweeneyredhat
2c2d84f2b7 [v4.4.1-rhel] CVE-2024-3727 & stats 
Addresses CVE-2024-3727 and Podman stats takes pagecache into account

Fixes: https://issues.redhat.com/browse/OCPBUGS-37008
       https://issues.redhat.com/browse/OCPBUGS-37010
       https://issues.redhat.com/browse/OCPBUGS-37011

Also addresses #1642 in the v4.4.1-rhel branch

Fixes: https://issues.redhat.com/browse/RHEL-16376

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2024-09-19 12:07:38 -04:00
tomsweeneyredhat
a90356fd8d [v4.4.1-rhel] builds try to write to additionalImageStore 
... read-only locataion

This vendors in c/storage v1.45.7 to address this issue in RHEL 8.8/9.2: containers/storage#1733

This addresses: https://issues.redhat.com/browse/RHEL-41079 and https://issues.redhat.com/browse/ACCELFIX-243

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2024-07-22 11:27:54 -04:00
tomsweeneyredhat
a55bdc2caf [v4.4.1-rhel] CVE-2024-6104 retryablehttp 
Fixes CVE-2024-6104 which bumps github.com/hashicorp/go-retryablehttp to
v0.7.7.

Addresses:
https://issues.redhat.com/browse/OCPBUGS-36116
https://issues.redhat.com/browse/OCPBUGS-36117
https://issues.redhat.com/browse/OCPBUGS-36118
https://issues.redhat.com/browse/RHEL-44858
https://issues.redhat.com/browse/RHEL-44880

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2024-07-18 19:55:40 -04:00
Matt Heon
7a0847859a Update gorilla/mux to v1.4.1 to address CVE-2024-37298 
Ref: RHEL-45918

Signed-off-by: Matt Heon <mheon@redhat.com>
 2024-07-03 14:19:52 -04:00
tomsweeneyredhat
788303370e [v4.4.1-rhel] Bump ocicrypt and go-jose CVE-2024-28180 
Bump github.com/go-jose/go-jose to v3.0.0 and
github.com/containers/ocicrypt to v1.1.10

Addresses: CVE-2024-28180
https://issues.redhat.com/browse/OCPBUGS-30785
https://issues.redhat.com/browse/OCPBUGS-30786
https://issues.redhat.com/browse/OCPBUGS-30787

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2024-04-18 16:24:44 -04:00
tomsweeneyredhat
e79c35238e [v4.4.1-rhel] Bump Buildah to v1.29.3 CVE-2024-1753 
As the title says, buming to Buildah v1.29.3 to address:
CVE-2024-1753
https://issues.redhat.com/browse/RHEL-26762 and probably another card
TBD

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2024-03-27 20:55:27 -04:00
tomsweeneyredhat
c651132ef2 [v4.4.1-rhel] Bump golang.org/x/net to v0.13.0 
As the title says.  Bump golang.org/x/net to v0.13.0.

Addresses: https://issues.redhat.com/browse/OCPBUGS-17313

CVE-2023-3978

[NO NEW TESTS NEEDED]
Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2024-02-14 15:32:07 -05:00
Matt Heon
fd07c085f4 Bump to runc v1.1.12 
Signed-off-by: Matt Heon <mheon@redhat.com>
 2024-02-02 09:25:17 -05:00
Lokesh Mandvekar
1aaff8d52d
bump golang.org/x/crypto to v0.17.0 
Fixes: GHSA-45x7-px36-x8w8 CVE-2023-48795

Signed-off-by: Lokesh Mandvekar <lsm5@redhat.com>
 2024-01-04 17:22:16 +05:30
TomSweeneyRedHat
c346d69e3b [v4.4.1-rhel] vendor c/storage v1.45.6 
This backport a fix for c/storage for unlink functionaliy from https://github.com/containers/storage/pull/1631/

This was a WIP, but has been updated and is ready to merge, assuming
happy tests.

[NO NEW TESTS NEEDED]

Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
 2023-09-14 17:53:53 -04:00
Paul Holzinger
10e879c6a1
update c/common to v0.51.3 
Addresses:
https://bugzilla.redhat.com/show_bug.cgi?id=2210113
https://bugzilla.redhat.com/show_bug.cgi?id=2210111

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
 2023-05-26 10:08:44 +02:00
tomsweeneyredhat
b458fc63d2 [v4.4.1-rhel] Vendor c/storage v1.45.5 
Vendor in c/storage v1.45.5

Addresses: https://bugzilla.redhat.com/show_bug.cgi?id=2177925 and
https://bugzilla.redhat.com/show_bug.cgi?id=2176833

"Podman containers do not start after upgrade to v4.4.1 "

ZeroDay BZs for RHEL 8.8 and 9.2

Repushed with v1.45.5 after it was found that v1.45.4 was built
incorrectly from main.

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2023-04-13 08:44:36 -04:00
Valentin Rothberg
3101c8be24 [v4.4.1-rhel] compat: /auth: parse server address correctly 
Use `auth.Login` as `podman login` does which parses and normalizes the
input addresses correctly, especially for docker.io.

This Cherry Picks https://github.com/containers/podman/pull/17581 and
brings in necessary changes to run_test.go from i
5f86fae71f

Addreses: https://bugzilla.redhat.com/show_bug.cgi?id=2183601 and
https://bugzilla.redhat.com/show_bug.cgi?id=2183602 for the RHEL 8.8 and
9.2 ZeroDay

The original Fixed: #17571
Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2023-03-31 16:10:16 -04:00
Lokesh Mandvekar
75d0b4a787
bump golang.org/x/net to v0.8.0 
Resolves: CVE-2022-41723

Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>
 2023-03-16 15:39:58 +05:30
tomsweeneyredhat
f8a635a482 [v4.4.1-rhel] Bump c/image to v5.24.1 
Bump c/image to v5.24.1 in preparation of the RHEL 8.8 and 9.2
release.

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2023-02-15 16:14:22 -05:00
Miloslav Trmač
097ca60568 Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml) 
(podman push) and (podman manifest push) now support --sign-by-sigstore=param-file,
using the containers-sigstore-signing-params.yaml(5) file format.

That notably adds support for Fulcio and Rekor signing.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
 2023-01-27 16:46:28 +01:00
tomsweeneyredhat
36875c2654 [v4.4] Bump to Buildah v1.29.0 
As the title says.

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2023-01-26 12:37:53 -05:00
OpenShift Merge Robot
c4378f97fa
Merge pull request #17195 from containers/dependabot/go_modules/github.com/onsi/gomega-1.26.0 
build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0
 2023-01-24 17:47:38 -05:00
Ashley Cui
2db4682041 Vendor containers/(storage, image, common, buildah) 
c/storage v1.45.3
c/image v5.24.0
c/common v0.51.0
c/buildah main

Signed-off-by: Ashley Cui <acui@redhat.com>
 2023-01-24 11:07:09 -05:00
dependabot[bot]
795708f8b5
build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0 
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.25.0 to 1.26.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.25.0...v1.26.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-24 12:02:42 +00:00
dependabot[bot]
d0794ab9ea
build(deps): bump github.com/docker/docker 
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 20.10.22+incompatible to 20.10.23+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v20.10.22...v20.10.23)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-20 12:02:32 +00:00
Daniel J Walsh
f65d79f4c7
vendor in latests containers/(storage, common, build, image) 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2023-01-19 10:42:10 -05:00
Valentin Rothberg
b5a6f3f914 fix bud-multiple-platform-with-base-as-default-arg flake 
By vendoring the latest c/common.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
 2023-01-18 15:32:38 +01:00
Ashley Cui
ddf8e49891 Vendor in latest c/common 
Signed-off-by: Ashley Cui <acui@redhat.com>
 2023-01-17 12:12:17 -05:00
Daniel J Walsh
5ac5aaa723
Vendor in latest containers/storage 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2023-01-15 07:41:30 -05:00
Daniel J Walsh
c433982d18
Vendor in latest containers/storage 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2023-01-12 18:21:29 -05:00
Daniel J Walsh
e332b6246b
Vendor in latest containers/common 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2023-01-06 14:19:47 -05:00
Daniel J Walsh
eea78ec7b3
Vendor in latest containers/(common, image, storage) 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2023-01-05 10:40:36 -05:00
Aditya R
1d3fd53833
vendor: bump c/storage to a747b27 
CI in other projects which uses podman is blocked because of missing https://github.com/containers/storage/pull/1455
Update `c/storage` to a747b27 so it contains patch from https://github.com/containers/storage/pull/1455

[NO NEW TESTS NEEDED]
[NO TESTS NEEDED]

Closes: https://github.com/containers/crun/pull/1111#issuecomment-1368367699

Signed-off-by: Aditya R <arajan@redhat.com>
 2023-01-02 14:24:10 +05:30
Daniel J Walsh
bfec23c363
Vendor in latest containers/(buildah, image, common) 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2022-12-21 06:12:45 -05:00
Aditya R
987c8e3a78
vendor: bump to buildah ca578b290144 and use new cache API 
Bump to buildah ca578b290144 and use new `cacheTo` and `cacheFrom` API.

[NO NEW TESTS NEEDED]
[NO TESTS NEEDED]

Signed-off-by: Aditya R <arajan@redhat.com>
 2022-12-20 17:13:59 +05:30
Daniel J Walsh
ae706e61bb
Update vendor of containters/(common, image) 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2022-12-19 08:01:10 -05:00
dependabot[bot]
3868d2d82b
build(deps): bump github.com/docker/docker 
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 20.10.21+incompatible to 20.10.22+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v20.10.21...v20.10.22)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-16 12:02:29 +00:00
Daniel J Walsh
3718ac8e96
Vendor in latest containers/common with default capabilities 
Also update vendor of containers/storage and image

Cleanup display of added/dropped capabilties as well

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2022-12-15 14:28:30 -05:00
OpenShift Merge Robot
52598cd5bd
Merge pull request #16850 from containers/dependabot/go_modules/github.com/onsi/gomega-1.24.2 
build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2
 2022-12-15 11:56:14 -05:00
dependabot[bot]
b1bb84637a
build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2 
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.24.1 to 1.24.2.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.24.1...v1.24.2)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-15 12:02:43 +00:00
dependabot[bot]
b4d90b2ebe
build(deps): bump github.com/ulikunitz/xz from 0.5.10 to 0.5.11 
Bumps [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) from 0.5.10 to 0.5.11.
- [Release notes](https://github.com/ulikunitz/xz/releases)
- [Commits](https://github.com/ulikunitz/xz/compare/v0.5.10...v0.5.11)

---
updated-dependencies:
- dependency-name: github.com/ulikunitz/xz
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-13 12:02:03 +00:00
OpenShift Merge Robot
50d81b14f8
Merge pull request #16768 from containers/dependabot/go_modules/golang.org/x/net-0.4.0 
build(deps): bump golang.org/x/net from 0.2.0 to 0.4.0
 2022-12-12 10:31:13 -05:00
OpenShift Merge Robot
9ef2d9dcd9
Merge pull request #16530 from elezar/bump-golang 
Bump golang version to 1.18
 2022-12-12 08:28:51 -05:00
dependabot[bot]
364ed81b46 build(deps): bump golang.org/x/net from 0.2.0 to 0.4.0 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.2.0 to 0.4.0.
- [Release notes](https://github.com/golang/net/releases)
- [Commits](https://github.com/golang/net/compare/v0.2.0...v0.4.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
 2022-12-12 13:53:49 +01:00
dependabot[bot]
bf66b6ac7a
build(deps): bump golang.org/x/term from 0.2.0 to 0.3.0 
Bumps [golang.org/x/term](https://github.com/golang/term) from 0.2.0 to 0.3.0.
- [Release notes](https://github.com/golang/term/releases)
- [Commits](https://github.com/golang/term/compare/v0.2.0...v0.3.0)

---
updated-dependencies:
- dependency-name: golang.org/x/term
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-10 06:13:44 -05:00
Ygal Blum
7d16c2b69e Update containers common package 
The new version adds NetworkCreateOptions. For now pass nil

[NO NEW TESTS NEEDED]

Signed-off-by: Ygal Blum <ygal.blum@gmail.com>
 2022-12-06 13:52:28 +02:00