CVE-2024-11218

This update for podman fixes the following issues. Github.com/containers/storage: Fixed symlink traversal vulnerability in the containers/storage library can cause Denial of Service Load ip_tables and ip6_tables kernel module Required for rootless mode as a regular user has no permission to load kernel modules. Fixed cache arbitrary directory mount in buildah. Fixed Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction in buildah cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library. Fixed full container escape at build time in buildah. Fixed a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. Refactor network backend dependencies. Podman requires either netavark or cni-plugins. On ALP, require netavark, otherwise prefer netavark but don't force it. This fixes missing cni-plugins in some scenarios Default to netavark everywhere where it's available.