Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package podman for openSUSE:Factory checked in at 2026-08-02 23:13:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/podman (Old) and /work/SRC/openSUSE:Factory/.podman.new.16738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "podman" Sun Aug 2 23:13:10 2026 rev:171 rq:1367291 version:6.0.2 Changes: -------- --- /work/SRC/openSUSE:Factory/podman/podman.changes 2026-06-25 10:51:16.453053721 +0200 +++ /work/SRC/openSUSE:Factory/.podman.new.16738/podman.changes 2026-08-02 23:13:21.262069821 +0200 @@ -1,0 +2,375 @@ +Thu Jul 23 05:01:04 UTC 2026 - Danish Prakash <[email protected]> + +- Update to version 6.0.2: + * Bump to v6.0.2 + * Release notes for v6.0.2 + * podman-remote: do not check for cgroupv2 + * [v6.0] Bump Buildah to v1.44.1 + * docs: clarify network create isolate option + * test system: increase nproc ulimit to avoid flake + * fix broken kube play --wait behavior + * test/system: fix broken port bound check logic + * test/system: fix "podman rm running container, w/o and w/ force" flake + * Fix Windows installer machine scope PATH update + * Always unprovision if the WSL machine init fail + * Bump Podman to v6.0.2-dev + * Bump to v6.0.1 + * Release notes for v6.0.1 + * Mark pasta forwarder tests as non-parallel + * Enable pasta forwarder tests after passt SELinux fix + * vendor: bump go.podman.io/common to v0.68.1 and fix pasta API break + * macos: Use latest vfkit release in installer + * Bump bundled krunkit from 1.3.1 to 1.3.2 + * Fix lookup of HyperV VMs with matching name + * docs: update network create --route description + * docs: fix network create no_default_route doc + * Only suggest --replace for commands that have the flag + * machine/wsl: fix config mount logic + * Bump bundled krunkit from 1.2.1 to 1.3.1 + * Restore caching of the default machine image + * label machine issues automatically + * fix podman machine os upgrade distro check + * podman log-level debug must produce the same oci runtime errors + * Fix release email + * Fix lookup of WSL VMs with matching name + * Fix WSL check: assume not installed when --status returns an error + * Packit: Add cautionary note to ephemeral copr job + * Windows installer tests: download v5.8.3 of the setup bundle + * Bump Podman to v6.0.1-dev + +------------------------------------------------------------------- +Fri Jun 26 05:43:18 UTC 2026 - Danish Prakash <[email protected]> + +- Update to version 6.0.0: + * Security + * This release addresses CVE-2026-57231 (bsc#1269471), where a malicious image + using malformed Env entries could cause host environment variables to leak + into containers run based on the image, including the ability to use the * + glob operator to leak large numbers of environment variables without knowing + their exact names (GHSA*4hq8-gpf5-8p68). + * Breaking Changes + * Due to breaking changes in this release, Podman v6.0.0 must be used with + Buildah v1.44.0, Skopeo v1.23, Netavark and Aardvark v2.0.0, and + configuration files from the container*libs repository's common/v0.68.0 + release. + * Support for BoltDB databases has been dropped. Starting Podman 6 when the + BoltDB database is in use will have Podman attempt an automatic migration + from BoltDB to SQLite. + * Support for running on Intel Macs has been removed. + * Support for running on Windows 10 has been removed. + * Support for running on cgroups v1 systems has been removed. Please update + your system to use cgroups v2. + * Support for running on iptables has been removed. Please use nftables + instead. + * Support for CNI networking has been removed. Please use Netavark instead. + * Support for the slirp4netns rootless network stack has been removed. + Please use Pasta instead. As part of this, the *-network-cmd-path global + option, only used with slirp4netns, has been removed. + * Podman's configuration file parsing logic has seen a major rewrite. Please + see this document for exact details. + * Podman's import path has changed from github.com/containers/podman/v5 to + go.podman.io/podman/v6 as part of our move into a CNCF*owned GitHub + organization. + * Network isolation now defaults to enabled, improving Docker compatibility + and security. A special workaround for the Docker*compatible API related + to isolation being disabled has been removed (#27349). + * The way the podman quadlet suite of commands functions has been changed. + Previously, Quadlets and their associated files were tracked using a .app + file, ensuring that removing a Quadlet also removed all associated + non*Quadlet files. Now, Quadlets and associated files are placed in + subdirectories, which should reduce bugs and make manual management of + Quadlets added by podman quadlet install much easier. + * VMs made by podman machine on Linux now mount volumes from the host using + systemd. Volume mounts on existing podman machine VMs on Linux have been + broken by this change, and the VM will need to be recreated. + * The podman volume prune command now matches Docker's behavior by only + pruning unused anonymous volumes. Please use the newly*added --all option + for the previous behavior (pruning all volumes). + * The podman volume list command now combines multiple filters using logical + AND instead of logical OR (meaning all filters must match for a container + to be included in output) (#26786). + * The label!= filter used in many commands now combines the output of + multiple instances of the filter with logical AND instead of logical OR. + * The --format='{{json .Labels}} option to the podman ps, podman pod ps, and + podman volume ls commands now prints its output as comma*separated + key=value pairs instead of as a JSON map, improving Docker compatibility + (#21847). + * The --all-providers option to podman machine list has been removed, as + machines from all providers can now be accessed by all commands. + * The MemorySwappiness field of podman inspect is now set to nil when not + explicitly set by the user (instead of *1), improving Docker compatibility + (#23824). + * The podman commit command now pauses the container while committing + changes, improving security by restricting concurrent modification. The + prior behavior can be restored by using podman commit *-pause=false .... + * The Go bindings for the REST API have removed the redundant nameOrID + parameter from the artifacts.Remove() function. + * The minimum Go version required to build Podman is now v1.25. + * Features + * All podman machine commands can now operate on VMs from all providers, + regardless of what the current provider is set to. The provider set in the + configuration only determines the provider used by newly*created VMs, and + can be overridden by the new podman machine init *-provider option. This + should make operation of Mac and Windows installs mixing use of applehv + and libkrun VMs, or hyperv and wsl VMs, much easier. + * A new command has been added, podman machine os update, which updates the + operating system of a podman machine VM. Please note that this is not + supported with the wsl provider. + * A new command has been added, podman system hyperv-prep, allowing Windows + administrators to prepare a host for their users to run podman machine VMs + using the hyperv provider. + * When starting a VM with podman machine start and podman machine init + *-now, if the connection to that VM is not the default, users will be + prompted whether they want to change the default to the machine that was + just started. This can also be controlled by a new option, + *-update-connection, which controls whether the default will be updated. + If the *-update-connection option is set, a user-interactive prompt is not + displayed. + * The podman machine init and podman machine set commands now support a new + option, *-import-native-ca, which, when set, causes podman machine VMs on + Windows, Linux, and Mac to import the host's trusted CA certificates each + time the VM boots. + * The podman exec command now has a new option, --no-session, disabling API + session tracking and database operations to increase performance (#26727). + * The podman image list --format json command now includes two new fields + for each image, Repository and Tag (#27632). + * The manpages for Quadlets have been split into multiple files, one for + each type of Quadlet file, and should be much more readable. + * Quadlet .volume units now support three new keys, UID= and GID= (to set + the UID and GID that the volume will be created with) and Options= (to set + generic volume options). + * Quadlet .container units now support mounting anonymous volumes (using a + Mount= key with no source specified) (#28497). + * Two new search paths for Quadlets have been added, + /usr/share/containers/systemd/users and + /usr/share/containers/systemd/users/${UID}, to allow distributions to more + easily package and distribute Quadlets (#27843). + * The podman quadlet list command now has a new alias, podman quadlet ls. + * The podman quadlet list command now has a new option, --noheading, which + disables printing the table header. This is set automatically if the + *-format option is used. + * The pomdan quadlet list command now includes a new field in its output, + Pod, which prints the pod a Quadlet .container unit is part of. + * The podman quadlet list command's --filter option now supports a new + filter, status= (#28369). + * The --gpus option to podman create and podman run is now compatible with + AMD GPUs. + * The podman create, podman run, and podman pod create commands can now + specify volumes with a new option, nocreate (e.g. podman run *-mount + type=volume,src=myvol,dst=/mnt,nocreate) which will error if the specified + volume does not exist, instead of creating it. + * The --log-opt option to the podman run and podman create now supports a + new option, label=, to attach additional labels to logged messages (only + usable with the journald log driver). + * Many Podman commands now expose a --tls-details option, allowing custom + tuning of TLS settings using a containers*tls-details.yaml(5) file. + * The died event for Containers now exposes a new attribute, OOMKilled, + which (if set) indicates the container was stopped due to running out of + memory (#26701). + * Containers can now set multiple static IP addresses by passing the ip= + option to *-net multiple times (e.g. --net + mynet:ip=10.0.0.2,ip=10.0.0.3,ip=10.0.0.4). + * The podman volume prune command now includes a new option, --all, to prune + all unused volumes, not just anonymous volumes (#24597). + * The podman volume prune command now includes a new option, --dry-run, + which returns the volumes that would be removed but does not actually + remove them (#27838). + * The podman image scp command now includes a new option, --format, to set + the archive format used for the image transfer (#28183). + * A new field has been added to containers.conf, default_host_ips, to set + the default host IP that ports are forwarded from if an IP is not + specified by the user (#27186). + * The podman image trust suite of commands now support a new + *-signature-policy option, which is mandatory for podman image trust set. + * Events now include artifact lifecycle events (create, pull, push, and + remove) (#27260). + * A new experimental option for the rootless_port_forwarder field in + containers.conf has been added, rootless_port_forwarder="pasta". When set, + rootless bridge networks will use Pasta's kernel*level port forwarding via + Pesto instead of rootlessport, preserving the original client source IP in + network traffic in rootless containers. The default remains rootlessport + (the default for Podman 5.x), but we will investigate switching at a later + date when stability is more certain. + * A new filter has been added to the podman ps and podman container prune + commands, *-filter annotation=, to filter containers based on their + annotations (#28562). + * The podman network create command's --route option can now create + blackhole, unreachable, and prohibit routes to prevent containers from + reaching certain networks (e.g. podman network create *-route + 10.20.30.40/24,blackhole ...) (#20022). + * Add support for blackhole, unreachable, and prohibit route types in podman + networks. Supported since netavark 2.0. + * The podman info command now reports CDI spec directories and discovered + CDI devices. + * Events generated by pods and volumes now include the pod/volume's labels + as attributes, matching the behavior of container events (#26480). + * Changes + * VMs created by podman machine now mount the host's user configurations + (e.g. ~/.config/containers on Linux) into the machine at /etc/containers, + allowing users to edit the config files controlling Podman's behavior + directly. + * The default podman machine provider on Macs has been changed to libkrun. + * Starting and stopping podman machine VMs on Windows with the hyperv + provider no longer requires administrator privileges (creating machines + still requires admin, however). Operations requiring elevated privileges + will prompt for administrator access. Please note that this only works + with newly*created VMs. + * The podman pod inspect command now prints arrays in its output in + deterministic order. + * The podman machine os apply command has been updated, and now uses bootc + switch to apply changes. All transports supported by bootc switch can be + used for the new image to apply. + * An experimental feature has been added where, on systems using Kernel 6.18 + and newer, rootless Podman will no longer need to create a pause process + to hold open the rootless user namespace, instead using an nsfs file + handle. This behavior is currently gated behind an environment variable, + drop*pause-process, being set. + * Containers created with --net=host will now use 127.0.0.1 for their + host.containers.internal address, instead of a public IP of the machine + (#27823). + * Containers in multiple networks now have these networks configured in a + deterministic order based on the order they were passed on the command + line. + * When building an image with process substitution, such as podman build -f + <(<<<"FROM scratch") , an empty temporary directory is now used as the + context directory (#28113). + * In Podman versions 5.x and under, image IDs (for both OCI and Docker v2s2 + images) were always equal to the SHA256 digest of the image's config data. + A future version of Podman will add support for non*SHA256 digests, and + image ID format will change for images that are not using the SHA256 + digest. The exact format of the new IDs has not yet been decided, but the + assumption that image IDs are valid hashes will no longer be true in + future Podman versions. + * Bugfixes + * Fixed a bug where creating a Quadlet from a templated .container file that + was part of a pod would incorrectly add a dependency on the template used + for the container to the pod (#27844). + * Fixed a bug where Quadlet .pod files would unconditionally set + Restart=on*failure even when the user specified an alternative restart + policy (#28081). + * Fixed a bug where starting a podman machine VM on Windows using the hyperv + provider would fail if the machine failed to start on first boot (#27930). + * Fixed a bug where podman machine init and podman machine set allowed + creating VMs with more CPUs than were available on the host, creating VMs + that could not be started (#28322). + * Fixed a bug where artifact volumes only checked the validity of the + artifact when the container was started, allowing containers to be created + that referenced artifacts which did not exist and thus could never be + started (#27747). + * Fixed a bug where containers with environment secrets could lose the value + of the secret after a restart under some circumstances (#28075). + * Fixed a bug where the podman container restore --publish command would + silently ignore the *-publish option instead of erroring when used without + the *-import option or a checkpoint image. + * Fixed a bug where running nested rootless Podman containers on Windows + using the wsl provider was not possible (#27411). + * Fixed a bug where the podman container clone command would fail with + containers created with environment secrets (*-secret type=env,...) + (#28130). + * Fixed a bug where creating a container with the tag= log option (--log-opt + tag=mytag) was allowed when a log driver other than journald was selected. + * Fixed a bug where the output of --help with some commands was incorrectly + formatted (#28178). + * Fixed a bug where containers in pods with multiple volume mounts could + have mount options from one volume mount leak to other mounts. + * Fixed a bug where the remote Podman client's podman version command would + error if the server could not be connected to (e.g. the podman machine VM + was shut down). In this case, client version is now printed (#28222). + * Fixed a bug where rootless Podman would display errors and refuse to + launch if the pause process was killed and its PID recycled to another + process (#28157). + * Fixed a bug where running podman kube generate on a container including + volumes with . characters in their names produced invalid YAML (#27620). + * Fixed a bug where patterns in .containerignore and .dockerignore files + that began or ended with slashes were silently ignored during remote + builds (#25458). + * Fixed a bug where healthchecks on containers created using the + *-transient-store option would fail (#28483). + * Fixed a bug where the podman generate spec command would panic when run on + a pod with no infra container (#21609). + * Fixed a bug where the podman container inspect command could HTML-escape + certain characters in its output (#28560). + * Fixed a bug where pods with entries added to /etc/hosts containing + multiple containers would incorrectly remove entries from /etc/hosts for + all containers in the pod when any container stopped. + * Fixed a bug where hosts without /dev/mqueue could be unable to start + containers as Podman attempted to add the device unconditionally. + * Fixed a bug where inspecting networks without a gateway set would show the ++++ 78 more lines (skipped) ++++ between /work/SRC/openSUSE:Factory/podman/podman.changes ++++ and /work/SRC/openSUSE:Factory/.podman.new.16738/podman.changes Old: ---- podman-5.8.3.obscpio New: ---- podman-6.0.2.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ podman.spec ++++++ --- /var/tmp/diff_new_pack.K4qE7K/_old 2026-08-02 23:13:23.238137795 +0200 +++ /var/tmp/diff_new_pack.K4qE7K/_new 2026-08-02 23:13:23.242137933 +0200 @@ -17,12 +17,14 @@ %{!?_user_tmpfilesdir: %global _user_tmpfilesdir %{_datadir}/user-tmpfiles.d} + %define project github.com/containers/podman +%define lcc_version 20260521 %bcond_without apparmor Name: podman -Version: 5.8.3 +Version: 6.0.2 Release: 0 Summary: Daemon-less container engine for managing containers, pods and images License: Apache-2.0 @@ -44,7 +46,7 @@ %endif BuildRequires: libassuan-devel BuildRequires: libbtrfs-devel -BuildRequires: libcontainers-common +BuildRequires: libcontainers-common >= %{lcc_version} BuildRequires: libgpgme-devel BuildRequires: libostree-devel BuildRequires: libseccomp-devel @@ -59,16 +61,16 @@ Requires: conmon >= 2.0.24 Recommends: criu Requires: fuse-overlayfs -Requires: libcontainers-common >= 20230214 +Requires: libcontainers-common >= %{lcc_version} %if 0%{?sle_version} && 0%{?sle_version} <= 150500 # Build podman with CNI support for SLE-15-SP5 and lower Requires: (netavark or cni-plugins) # We still want users with fresh installation to start off # with Netavark but if they already have cni-plugins installed # and are attempting a migration, it's better to continue with cni -Suggests: netavark +Suggests: netavark >= 2.0.0 %else -Requires: netavark +Requires: netavark >= 2.0.0 %endif Requires: runc >= 1.0.1 Requires: passt ++++++ _service ++++++ --- /var/tmp/diff_new_pack.K4qE7K/_old 2026-08-02 23:13:23.274139033 +0200 +++ /var/tmp/diff_new_pack.K4qE7K/_new 2026-08-02 23:13:23.278139171 +0200 @@ -2,7 +2,7 @@ <service name="obs_scm" mode="manual"> <param name="url">https://github.com/containers/podman.git</param> <param name="scm">git</param> - <param name="revision">v5.8.3</param> + <param name="revision">v6.0.2</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.K4qE7K/_old 2026-08-02 23:13:23.302139996 +0200 +++ /var/tmp/diff_new_pack.K4qE7K/_new 2026-08-02 23:13:23.306140134 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/containers/podman.git</param> - <param name="changesrevision">93dbfd0d86ee57f8f91801f61ce57dd880a4725f</param></service></servicedata> + <param name="changesrevision">b28edb9ad70ce4317dc762ee9ce0a6d081d154e9</param></service></servicedata> (No newline at EOF) ++++++ podman-5.8.3.obscpio -> podman-6.0.2.obscpio ++++++ ++++ 851567 lines of diff (skipped) ++++++ podman.obsinfo ++++++ --- /var/tmp/diff_new_pack.K4qE7K/_old 2026-08-02 23:13:34.038509305 +0200 +++ /var/tmp/diff_new_pack.K4qE7K/_new 2026-08-02 23:13:34.078510682 +0200 @@ -1,5 +1,5 @@ name: podman -version: 5.8.3 -mtime: 1781275785 -commit: 93dbfd0d86ee57f8f91801f61ce57dd880a4725f +version: 6.0.2 +mtime: 1784664683 +commit: b28edb9ad70ce4317dc762ee9ce0a6d081d154e9
