From db103f3a65afb6671f6288b5f86f2a3ef4de86cb Mon Sep 17 00:00:00 2001 From: Jindrich Novy Date: Tue, 18 Mar 2025 10:04:23 +0100 Subject: [PATCH] podman-5.4.0-4.el10 - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel (https://github.com/containers/podman/commit/9ad4842) - fixes "CVE-2025-22869 podman: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh [rhel-10.0]" - Resolves: RHEL-82776 Signed-off-by: Jindrich Novy --- podman.spec | 10 ++++++++-- sources | 2 +- 2 files changed, 9 insertions(+), 3 deletions(-) diff --git a/podman.spec b/podman.spec index dc82570..40a3f99 100644 --- a/podman.spec +++ b/podman.spec @@ -9,7 +9,7 @@ %global import_path github.com/containers/podman %global branch v5.4-rhel -%global commit0 45c2d1f6a5a63e5b0d1a50cb4ffd826efd412673 +%global commit0 9ad48423b0c6d4126a3f051ebcfba093573dc419 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) %global gomodulesmode GO111MODULE=on @@ -63,7 +63,7 @@ Epoch: 6 Version: 5.4.0 # The `AND` needs to be uppercase in the License for SPDX compatibility License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0 -Release: 3%{?dist} +Release: 4%{?dist} %if %{defined golang_arches_future} ExclusiveArch: %{golang_arches_future} %else @@ -390,6 +390,12 @@ ln -s ../virtiofsd %{buildroot}%{_libexecdir}/%{name} %endif %changelog +* Tue Mar 18 2025 Jindrich Novy - 6:5.4.0-4 +- update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel + (https://github.com/containers/podman/commit/9ad4842) +- fixes "CVE-2025-22869 podman: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh [rhel-10.0]" +- Resolves: RHEL-82776 + * Thu Mar 13 2025 Jindrich Novy - 6:5.4.0-3 - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel (https://github.com/containers/podman/commit/45c2d1f) diff --git a/sources b/sources index eac321e..e075c4f 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v5.4-rhel-45c2d1f.tar.gz) = 746dc81d611df59a1b18cd3d794936ddcd8c224333c861c0981245a4d5f1be92d1708c000eb0fc1f41c5bb593139f24da86e7d9d5fa1c682fb25448d9f1c605e +SHA512 (v5.4-rhel-9ad4842.tar.gz) = f86d4c693e72b21d4b4bac806fee05e5c56d5208b687c8c9042f3e1955377b5cbdd4c23c5b44088962bd459f383fbfffa19535c3e2d7fbfd02bbc95af9e4f732