From ea93aa0415fa4d3061cde1fb8992a144d5140984 Mon Sep 17 00:00:00 2001 From: Jindrich Novy Date: Wed, 8 Jul 2026 08:15:12 +0200 Subject: [PATCH] update to the latest content of v4.9-rhel (commit bd39e82) Sync podman to latest v4.9-rhel upstream commit (bd39e82) which includes fixes for CVE-2026-39835 (golang.org/x/crypto/ssh), CVE-2026-57231 (podman info disclosure), CVE-2026-25681 and CVE-2026-27136 (golang.org/x/net/html). Resolves: RHEL-190070 RHEL-190856 RHEL-191102 RHEL-191553 Signed-off-by: Jindrich Novy --- podman.spec | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/podman.spec b/podman.spec index 0411b78..ab26b5a 100644 --- a/podman.spec +++ b/podman.spec @@ -8,7 +8,7 @@ GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback $ %global import_path github.com/containers/podman %global branch v4.9-rhel -%global commit0 48ede9e7c9fedb7b5809206f862251d20809888e +%global commit0 bd39e824730fe1232965d89a22f50d0ac7b4061e %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) %global cataver 0.1.7 %global commit_dnsname bdc4ab85266ade865a7c398336e98721e62ef6b2 @@ -20,7 +20,7 @@ GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback $ Epoch: 4 Name: podman Version: 4.9.4 -Release: 32%{?dist} +Release: 33%{?dist} Summary: Manage Pods, Containers and Container Images License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0 URL: https://%{name}.io/ @@ -415,6 +415,10 @@ fi %{_libexecdir}/%{name}/gvproxy %changelog +* Wed Jul 08 2026 Jindrich Novy - 4:4.9.4-33 +- update to the latest content of v4.9-rhel (commit bd39e82) to fix CVE-2026-39835, CVE-2026-57231, CVE-2026-25681, CVE-2026-27136 +- Resolves: RHEL-190070 RHEL-190856 RHEL-191102 RHEL-191553 + * Wed Jul 01 2026 Jindrich Novy - 4:4.9.4-32 - switch source URL from GitHub to the internal GitLab sustaining-engineering repo - update to the latest content of v4.9-rhel (commit 48ede9e)