Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package podman for openSUSE:Factory checked in at 2026-10-06 19:14:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/podman (Old) and /work/SRC/openSUSE:Factory/.podman.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "podman" Tue Oct 6 19:14:10 2026 rev:172 rq:1382644 version:6.1.2 Changes: -------- --- /work/SRC/openSUSE:Factory/podman/podman.changes 2026-08-02 23:13:21.262069821 +0200 +++ /work/SRC/openSUSE:Factory/.podman.new.3698736/podman.changes 2026-10-06 19:14:26.309526100 +0200 @@ -1,0 +2,73 @@ +Fri Sep 25 07:46:06 UTC 2026 - Enrico Belleri <[email protected]> + +- Update to version 6.1.2: + * address CVE-2025-11395 where importing images containing crafted layer + tarballs with the `podman load` command, or importing volumes + containing crafted symlinks with `podman volume import`, allows + overwriting files on the host + * address CVE-2026-79699 and CVE-2026-79705 + * address CVE-2026-17106, where a crafted tar archive could write + outside the extraction directory through the use of malicious links + * Fixed broken rootlessport bind behavior with `-p 0.0.0.0:... -p [::]:...` + which failed instead of binding both v4 and v6 separately. + * new command: `podman volume rename` + + allow renaming volumes. Volumes created using volume drivers and + volumes that are currently used by a container cannot be renamed + * new command: `podman machine restart` + + allow easy restart of VMs managed by `podman machine` + * command `podman network rm` now includes option `--ignore` + + suppresses errors when attempting to remove networks that do not exist + * command `podman manifest push` now includes options `--retry` and `--retry-delay` + + allow pushes to be automatically retried on failure + * Quadlet `.container` units now support key `ImageVolume=` to configure + how volumes from images are handled + * command `podman generate kube` now includes support for generating + container healthchecks as a `livenessProbe` + * container.conf: new option `force_port_listen` + * command `podman info` now additionally includes free memory available on the host + * Pesto rootless port forwarding tool now supports IPv6 port forwarding + with source IP preservation + * Fixed a bug where the remote Podman client could hang on some operations + when connecting to a remote Podman service over SSH + * Fixed a bug where the `podman image scp` command could not be used + with usernames containing an `@` character + * Fixed a bug where the `podman kube play` command did not properly validate + requested `hostPort` bindings, allowing the creation of containers + with duplicated host ports which would never be able to start at the same time + * Fixed a bug where the `podman quadlet list` and `podman quadlet rm` commands + did not function properly with uninstantiated template Quadlets. + * Fixed a bug where the `podman quadlet install` command would occasionally + fail to install a Quadlet if non-quadlet files were specified. + * Fixed a bug where the `podman quadlet install` command would not refuse + to install Quadlets including non-quadlet files if the `--application` option + was not specified. + * Fixed a bug where healthcheck logs could be corrupted, preventing proper + healthcheck operation, if a healthcheck was killed midway through writing the file. + * Fixed a bug where the `podman volume prune --all` command incorrectly discarded + label filters, causing `podman volume prune --all --filter label=foo` to prune + all volumes, not just those with the `foo` label. + * Fixed a bug where the `podman events --format=json` command would print `null` + instead of an error when the server sent an event that could not be decoded. + * Fixed a bug where a race condition could cause Quadlet to generate + corrupt systemd units + * Fixed a bug where the `podman inspect` command on a container with + a single-element command (e.g. `podman run fedora bash`) would include the command + in both `Path` and `Args`, when it should only have been included in `Path` + * Fixed a bug where the `--format` option to `podman inspect` on containers did not + properly support some format specifiers supported by Docker + (e.g. `{{.HostIp}}` did not work, but `{{.HostIP}}` did) + * Fixed a bug where the Quadlet generator would not write error messages to `STDERR` + but only to `/dev/kmsg`, meaning that errors were not visible from `systemd-analyze --generators verify` + and other tooling invoking the systemd generator directly. + * Fixed a bug where containers which failed to start would, in some circumstances, + not properly clean up, resulting in improper behavior + * Fixed a bug where the `podman kube generate` command would improperly generate + warning messages only applicable when running as a rootless user on + an SELinux enabled system when not running in that configuration + * Fixed a bug where the Compat and Libpod Create endpoint for Exec Sessions (`/containers/$CID/exec`) + did not honor the `ConsoleSize` parameter in the exec config. + * The Compat API has seen further changes to improve support for the + Docker v1.44 API, including the deprecation of several fields removed in that release. + * Preparations have begun to implement support for the v1.45 API. + +------------------------------------------------------------------- Old: ---- podman-6.0.2.obscpio New: ---- podman-6.1.2.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ podman.spec ++++++ --- /var/tmp/diff_new_pack.oe3hhX/_old 2026-10-06 19:14:29.146645461 +0200 +++ /var/tmp/diff_new_pack.oe3hhX/_new 2026-10-06 19:14:29.147645504 +0200 @@ -19,12 +19,12 @@ %{!?_user_tmpfilesdir: %global _user_tmpfilesdir %{_datadir}/user-tmpfiles.d} %define project github.com/containers/podman -%define lcc_version 20260521 +%define lcc_version 20260915 %bcond_without apparmor Name: podman -Version: 6.0.2 +Version: 6.1.2 Release: 0 Summary: Daemon-less container engine for managing containers, pods and images License: Apache-2.0 @@ -64,7 +64,7 @@ Requires: libcontainers-common >= %{lcc_version} %if 0%{?sle_version} && 0%{?sle_version} <= 150500 # Build podman with CNI support for SLE-15-SP5 and lower -Requires: (netavark or cni-plugins) +Requires: (netavark >= 2.0.0 or cni-plugins) # We still want users with fresh installation to start off # with Netavark but if they already have cni-plugins installed # and are attempting a migration, it's better to continue with cni ++++++ _service ++++++ --- /var/tmp/diff_new_pack.oe3hhX/_old 2026-10-06 19:14:29.178646808 +0200 +++ /var/tmp/diff_new_pack.oe3hhX/_new 2026-10-06 19:14:29.180646892 +0200 @@ -2,7 +2,7 @@ <service name="obs_scm" mode="manual"> <param name="url">https://github.com/containers/podman.git</param> <param name="scm">git</param> - <param name="revision">v6.0.2</param> + <param name="revision">v6.1.2</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.oe3hhX/_old 2026-10-06 19:14:29.203647860 +0200 +++ /var/tmp/diff_new_pack.oe3hhX/_new 2026-10-06 19:14:29.211648196 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/containers/podman.git</param> - <param name="changesrevision">b28edb9ad70ce4317dc762ee9ce0a6d081d154e9</param></service></servicedata> + <param name="changesrevision">04f3aa430e6df81bea059978bc5bafbc846ba3e7</param></service></servicedata> (No newline at EOF) ++++++ podman-6.0.2.obscpio -> podman-6.1.2.obscpio ++++++ ++++ 344441 lines of diff (skipped) ++++++ podman.obsinfo ++++++ --- /var/tmp/diff_new_pack.oe3hhX/_old 2026-10-06 19:14:38.119022941 +0200 +++ /var/tmp/diff_new_pack.oe3hhX/_new 2026-10-06 19:14:38.123023109 +0200 @@ -1,5 +1,5 @@ name: podman -version: 6.0.2 -mtime: 1784664683 -commit: b28edb9ad70ce4317dc762ee9ce0a6d081d154e9 +version: 6.1.2 +mtime: 1789496680 +commit: 04f3aa430e6df81bea059978bc5bafbc846ba3e7
