File _patchinfo of Package patchinfo.14521

<patchinfo incident="14521">
  <issue tracker="bnc" id="1167850">L3: Podman Dependency Issue</issue>
  <packager>rhafer</packager>
  <rating>moderate</rating>
  <category>recommended</category>
  <summary>Recommended update for podman, slirp4netns</summary>
  <description>This update for podman, slirp4netns fixes the following issues:

slirp4netns was updated to 0.4.4 (bsc#1167850):

* libslirp: Update to v4.2.0:
  * New API function slirp_add_unix: add a forward rule to a Unix
    socket.
  * New API function slirp_remove_guestfwd: remove a forward rule
    previously added by slirp_add_exec, slirp_add_unix or
    slirp_add_guestfwd
  * New SlirpConfig.outbound_addr{,6} fields to bind output
    socket to a specific address
  * socket: do not fallback on host loopback if get_dns_addr()
    failed or the address is in slirp network
  * ncsi: fix checksum OOB memory access
  * tcp_emu(): fix OOB accesses
  * tftp: restrict relative path access
  * state: fix loading of guestfwd state

Update to 0.4.3:

* api: raise an error if the socket path is too long
* libslirp: update to v4.1.0: Including the fix for libslirp
  sends RST to app in response to arriving FIN when containerized
  socket is shutdown() with SHUT_WR
* Fix create_sandbox error

Update to 0.4.2:

* Do not propagate mounts to the parent ns in sandbox

Update to 0.4.1:

* Support specifying netns path (slirp4netns --netns-type=path PATH
  TAPNAME)
* Support specifying --userns-path
* Vendor https://gitlab.freedesktop.org/slirp/libslirp (QEMU v4.1+)
* Bring up loopback device when --configure is specified
* Support sandboxing by creating a mount namespace
  (--enable-sandbox)
* Support seccomp (--enable-seccomp)
- Add new build dependencies libcap-devel and libseccomp-devel

Update to 0.3.3:

* Fix use-after-free in libslirp

Update to 0.3.2:

* Fix heap overflow in `ip_reass` on big packet input

Update to 0.3.1:

* Fix use-after-free

Changes in podman:

- Fixed dependency on slirp4netns. We need at least 0.4.0 now (bsc#1167850)
</description>
</patchinfo>
openSUSE Build Service is sponsored by