erabo/spiegel_podman
1
0
Fork 0
mirror of https://github.com/podman-container-tools/podman.git synced 2026-09-17 05:07:50 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 8
17965 commits 59 branches 275 tags 349 MiB
Commit graph

1006 commits

Author SHA1 Message Date
tomsweeneyredhat
be8c3c83cd [v4.4.1-rhel] Bump securejoin to v0.4.1 
This is needed for the fixes that are part of the
ones in the CVE-2025-9566 fix.

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2025-09-09 20:03:19 -04:00
Paul Holzinger
53a8ef8264
vendor: bump to golang.org/x/crypto@v0.36.0 
Fixes: CVE-2025-22869
Fixes: https://issues.redhat.com/browse/RHEL-81322
Fixes: https://issues.redhat.com/browse/RHEL-81300
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
 2025-03-11 19:18:38 +01:00
tomsweeneyredhat
0b9f534a2b [v4.4.1-rhel] CVE-2024-11218 Fix 
This fixes CVE-2024-11218 by vendoring in Buidlah v1.29.5 which
has the actual fixes within it.

Fixes: https://issues.redhat.com/browse/OCPBUGS-44538,
https://issues.redhat.com/browse/OCPBUGS-44537,
https://issues.redhat.com/browse/OCPBUGS-44539,
https://issues.redhat.com/browse/RHEL-67603, https://issues.redhat.com/browse/RHEL-67597

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2025-02-06 18:50:21 -05:00
David Shea
638400242d [v4.4.1-rhel] Update buildah for CVE-2024-9675 
Addresses:
https://issues.redhat.com/browse/RHEL-62386
https://issues.redhat.com/browse/RHEL-62377

[NO NEW TESTS NEEDED]

Signed-off-by: David Shea <dshea@redhat.com>
 2024-10-18 13:37:25 -04:00
tomsweeneyredhat
2c2d84f2b7 [v4.4.1-rhel] CVE-2024-3727 & stats 
Addresses CVE-2024-3727 and Podman stats takes pagecache into account

Fixes: https://issues.redhat.com/browse/OCPBUGS-37008
       https://issues.redhat.com/browse/OCPBUGS-37010
       https://issues.redhat.com/browse/OCPBUGS-37011

Also addresses #1642 in the v4.4.1-rhel branch

Fixes: https://issues.redhat.com/browse/RHEL-16376

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2024-09-19 12:07:38 -04:00
tomsweeneyredhat
a90356fd8d [v4.4.1-rhel] builds try to write to additionalImageStore 
... read-only locataion

This vendors in c/storage v1.45.7 to address this issue in RHEL 8.8/9.2: containers/storage#1733

This addresses: https://issues.redhat.com/browse/RHEL-41079 and https://issues.redhat.com/browse/ACCELFIX-243

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2024-07-22 11:27:54 -04:00
tomsweeneyredhat
a55bdc2caf [v4.4.1-rhel] CVE-2024-6104 retryablehttp 
Fixes CVE-2024-6104 which bumps github.com/hashicorp/go-retryablehttp to
v0.7.7.

Addresses:
https://issues.redhat.com/browse/OCPBUGS-36116
https://issues.redhat.com/browse/OCPBUGS-36117
https://issues.redhat.com/browse/OCPBUGS-36118
https://issues.redhat.com/browse/RHEL-44858
https://issues.redhat.com/browse/RHEL-44880

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2024-07-18 19:55:40 -04:00
Matt Heon
7a0847859a Update gorilla/mux to v1.4.1 to address CVE-2024-37298 
Ref: RHEL-45918

Signed-off-by: Matt Heon <mheon@redhat.com>
 2024-07-03 14:19:52 -04:00
tomsweeneyredhat
788303370e [v4.4.1-rhel] Bump ocicrypt and go-jose CVE-2024-28180 
Bump github.com/go-jose/go-jose to v3.0.0 and
github.com/containers/ocicrypt to v1.1.10

Addresses: CVE-2024-28180
https://issues.redhat.com/browse/OCPBUGS-30785
https://issues.redhat.com/browse/OCPBUGS-30786
https://issues.redhat.com/browse/OCPBUGS-30787

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2024-04-18 16:24:44 -04:00
tomsweeneyredhat
e79c35238e [v4.4.1-rhel] Bump Buildah to v1.29.3 CVE-2024-1753 
As the title says, buming to Buildah v1.29.3 to address:
CVE-2024-1753
https://issues.redhat.com/browse/RHEL-26762 and probably another card
TBD

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2024-03-27 20:55:27 -04:00
Matt Heon
fd07c085f4 Bump to runc v1.1.12 
Signed-off-by: Matt Heon <mheon@redhat.com>
 2024-02-02 09:25:17 -05:00
TomSweeneyRedHat
c346d69e3b [v4.4.1-rhel] vendor c/storage v1.45.6 
This backport a fix for c/storage for unlink functionaliy from https://github.com/containers/storage/pull/1631/

This was a WIP, but has been updated and is ready to merge, assuming
happy tests.

[NO NEW TESTS NEEDED]

Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
 2023-09-14 17:53:53 -04:00
Paul Holzinger
10e879c6a1
update c/common to v0.51.3 
Addresses:
https://bugzilla.redhat.com/show_bug.cgi?id=2210113
https://bugzilla.redhat.com/show_bug.cgi?id=2210111

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
 2023-05-26 10:08:44 +02:00
tomsweeneyredhat
b458fc63d2 [v4.4.1-rhel] Vendor c/storage v1.45.5 
Vendor in c/storage v1.45.5

Addresses: https://bugzilla.redhat.com/show_bug.cgi?id=2177925 and
https://bugzilla.redhat.com/show_bug.cgi?id=2176833

"Podman containers do not start after upgrade to v4.4.1 "

ZeroDay BZs for RHEL 8.8 and 9.2

Repushed with v1.45.5 after it was found that v1.45.4 was built
incorrectly from main.

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2023-04-13 08:44:36 -04:00
Valentin Rothberg
3101c8be24 [v4.4.1-rhel] compat: /auth: parse server address correctly 
Use `auth.Login` as `podman login` does which parses and normalizes the
input addresses correctly, especially for docker.io.

This Cherry Picks https://github.com/containers/podman/pull/17581 and
brings in necessary changes to run_test.go from i
5f86fae71f

Addreses: https://bugzilla.redhat.com/show_bug.cgi?id=2183601 and
https://bugzilla.redhat.com/show_bug.cgi?id=2183602 for the RHEL 8.8 and
9.2 ZeroDay

The original Fixed: #17571
Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2023-03-31 16:10:16 -04:00
tomsweeneyredhat
f8a635a482 [v4.4.1-rhel] Bump c/image to v5.24.1 
Bump c/image to v5.24.1 in preparation of the RHEL 8.8 and 9.2
release.

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2023-02-15 16:14:22 -05:00
Miloslav Trmač
097ca60568 Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml) 
(podman push) and (podman manifest push) now support --sign-by-sigstore=param-file,
using the containers-sigstore-signing-params.yaml(5) file format.

That notably adds support for Fulcio and Rekor signing.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
 2023-01-27 16:46:28 +01:00
tomsweeneyredhat
36875c2654 [v4.4] Bump to Buildah v1.29.0 
As the title says.

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
 2023-01-26 12:37:53 -05:00
OpenShift Merge Robot
c4378f97fa
Merge pull request #17195 from containers/dependabot/go_modules/github.com/onsi/gomega-1.26.0 
build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0
 2023-01-24 17:47:38 -05:00
Ashley Cui
2db4682041 Vendor containers/(storage, image, common, buildah) 
c/storage v1.45.3
c/image v5.24.0
c/common v0.51.0
c/buildah main

Signed-off-by: Ashley Cui <acui@redhat.com>
 2023-01-24 11:07:09 -05:00
dependabot[bot]
795708f8b5
build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0 
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.25.0 to 1.26.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.25.0...v1.26.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-24 12:02:42 +00:00
dependabot[bot]
d0794ab9ea
build(deps): bump github.com/docker/docker 
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 20.10.22+incompatible to 20.10.23+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v20.10.22...v20.10.23)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-20 12:02:32 +00:00
Daniel J Walsh
f65d79f4c7
vendor in latests containers/(storage, common, build, image) 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2023-01-19 10:42:10 -05:00
Valentin Rothberg
b5a6f3f914 fix bud-multiple-platform-with-base-as-default-arg flake 
By vendoring the latest c/common.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
 2023-01-18 15:32:38 +01:00
Ashley Cui
ddf8e49891 Vendor in latest c/common 
Signed-off-by: Ashley Cui <acui@redhat.com>
 2023-01-17 12:12:17 -05:00
Daniel J Walsh
5ac5aaa723
Vendor in latest containers/storage 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2023-01-15 07:41:30 -05:00
Daniel J Walsh
c433982d18
Vendor in latest containers/storage 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2023-01-12 18:21:29 -05:00
Daniel J Walsh
e332b6246b
Vendor in latest containers/common 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2023-01-06 14:19:47 -05:00
Daniel J Walsh
eea78ec7b3
Vendor in latest containers/(common, image, storage) 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2023-01-05 10:40:36 -05:00
Aditya R
1d3fd53833
vendor: bump c/storage to a747b27 
CI in other projects which uses podman is blocked because of missing https://github.com/containers/storage/pull/1455
Update `c/storage` to a747b27 so it contains patch from https://github.com/containers/storage/pull/1455

[NO NEW TESTS NEEDED]
[NO TESTS NEEDED]

Closes: https://github.com/containers/crun/pull/1111#issuecomment-1368367699

Signed-off-by: Aditya R <arajan@redhat.com>
 2023-01-02 14:24:10 +05:30
Daniel J Walsh
bfec23c363
Vendor in latest containers/(buildah, image, common) 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2022-12-21 06:12:45 -05:00
Aditya R
987c8e3a78
vendor: bump to buildah ca578b290144 and use new cache API 
Bump to buildah ca578b290144 and use new `cacheTo` and `cacheFrom` API.

[NO NEW TESTS NEEDED]
[NO TESTS NEEDED]

Signed-off-by: Aditya R <arajan@redhat.com>
 2022-12-20 17:13:59 +05:30
Daniel J Walsh
3718ac8e96
Vendor in latest containers/common with default capabilities 
Also update vendor of containers/storage and image

Cleanup display of added/dropped capabilties as well

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2022-12-15 14:28:30 -05:00
OpenShift Merge Robot
52598cd5bd
Merge pull request #16850 from containers/dependabot/go_modules/github.com/onsi/gomega-1.24.2 
build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2
 2022-12-15 11:56:14 -05:00
dependabot[bot]
b1bb84637a
build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2 
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.24.1 to 1.24.2.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.24.1...v1.24.2)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-15 12:02:43 +00:00
dependabot[bot]
b4d90b2ebe
build(deps): bump github.com/ulikunitz/xz from 0.5.10 to 0.5.11 
Bumps [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) from 0.5.10 to 0.5.11.
- [Release notes](https://github.com/ulikunitz/xz/releases)
- [Commits](https://github.com/ulikunitz/xz/compare/v0.5.10...v0.5.11)

---
updated-dependencies:
- dependency-name: github.com/ulikunitz/xz
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-13 12:02:03 +00:00
Ygal Blum
7d16c2b69e Update containers common package 
The new version adds NetworkCreateOptions. For now pass nil

[NO NEW TESTS NEEDED]

Signed-off-by: Ygal Blum <ygal.blum@gmail.com>
 2022-12-06 13:52:28 +02:00
Miloslav Trmač
c83efd0f07 Update c/storage after https://github.com/containers/storage/pull/1436 
... and update to remove the now-deprecated Locker interface.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
 2022-12-01 16:05:13 +01:00
Daniel J Walsh
2862ecf288
Update vendor of containers/(image, buildah) 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2022-11-30 13:05:12 -05:00
Valentin Rothberg
71f92d263c container create: add inspect data to event 
When the new `events_container_create_inspect_data` option is enabled in
containers.conf set the `ContainersInspectData` event field for each
container-create event.

The data was requested for the purpose of auditing (e.g., intrusion
detection).

Jira: https://issues.redhat.com/browse/RUN-1702
Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
 2022-11-29 10:40:24 +01:00
Daniel J Walsh
35b46a4200
Update Vendor of containers/(common, image, buildah) 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2022-11-28 06:41:31 -05:00
OpenShift Merge Robot
ab7f6095a1
Merge pull request #16580 from giuseppe/specgen-support-cdi-devices 
specgen: support CDI devices from containers.conf
 2022-11-28 06:36:33 -05:00
Paul Holzinger
c7827957a4
ginkgo: restructure install work flow 
- move the ginkgo deps into test/tools which is more consitent with the
  other tools there, listing in dependencies always causes errors with
  linters
- do not install it globally on the system, instead we use it in a
  subdir of this project

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
 2022-11-25 14:41:43 +01:00
Giuseppe Scrivano
7eb11e7bb3
vendor: update containers/common 
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
 2022-11-25 11:44:38 +01:00
Daniel J Walsh
fb429dbe3c
Update vendor of containers/(buildah, common, storage, image) 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2022-11-22 08:53:59 -05:00
Daniel J Walsh
5df00c6f79
Vendor in latest containers/(common,image,storage) 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2022-11-11 14:40:03 -05:00
OpenShift Merge Robot
6555e69354
Merge pull request #16446 from Luap99/format-json 
fix --format {{json .}} output to match docker
 2022-11-11 15:48:58 +00:00
dependabot[bot]
9f9bf6fb4a Bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0 
Bumps [github.com/coreos/go-systemd/v22](https://github.com/coreos/go-systemd) from 22.4.0 to 22.5.0.
- [Release notes](https://github.com/coreos/go-systemd/releases)
- [Commits](https://github.com/coreos/go-systemd/compare/v22.4.0...v22.5.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-systemd/v22
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
 2022-11-10 10:24:59 +01:00
dependabot[bot]
fa2b4aeefd Bump github.com/container-orchestrated-devices/container-device-interface 
Bumps [github.com/container-orchestrated-devices/container-device-interface](https://github.com/container-orchestrated-devices/container-device-interface) from 0.5.2 to 0.5.3.
- [Release notes](https://github.com/container-orchestrated-devices/container-device-interface/releases)
- [Commits](https://github.com/container-orchestrated-devices/container-device-interface/compare/v0.5.2...v0.5.3)

---
updated-dependencies:
- dependency-name: github.com/container-orchestrated-devices/container-device-interface
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
 2022-11-10 10:24:59 +01:00
Paul Holzinger
3e08f85353
fix --format {{json .}} output to match docker 
`--format json` should not be the same as `--format {{json .}}`, the
later should actually run through the go template and thus create one
json object per entry instead of an json array.

Includes a vendor of c/common@main since it requires a fix from there as
well.

This matches docker compat.
Fixes #16436

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
 2022-11-09 17:59:05 +01:00