diff --git a/_service b/_service
index eda7b10..207723b 100644
--- a/_service
+++ b/_service
@@ -2,7 +2,7 @@
https://github.com/containers/podman.git
git
- v4.4.1
+ v4.4.2
@PARENT_TAG@
enable
v(.*)
diff --git a/_servicedata b/_servicedata
index 3ca1ef4..de87e65 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
https://github.com/containers/podman.git
- 34e8f3933242f2e566bbbbf343cf69b7d506c1cf
\ No newline at end of file
+ 74afe26887f814d1c39925a1624851ef3590e79c
\ No newline at end of file
diff --git a/podman-4.4.1.tar.xz b/podman-4.4.1.tar.xz
deleted file mode 100644
index f109eb3..0000000
--- a/podman-4.4.1.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:6d2b7526ade665f20d13bb1aae3364e2828c829034bdbfdea38c5a4f7ea37882
-size 8801176
diff --git a/podman-4.4.2.tar.xz b/podman-4.4.2.tar.xz
new file mode 100644
index 0000000..61c5420
--- /dev/null
+++ b/podman-4.4.2.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:11ffd53834db864d08a9757514a9cc28f696cb37a0da3b0036c90707c19591d9
+size 8808284
diff --git a/podman.changes b/podman.changes
index 8bf4c08..3400504 100644
--- a/podman.changes
+++ b/podman.changes
@@ -1,3 +1,25 @@
+-------------------------------------------------------------------
+Fri Feb 24 02:29:18 UTC 2023 - Danish Prakash
+
+- Update to version 4.4.2:
+ * Bump to v4.4.2
+ * Release notes for v4.4.2
+ * Revert "CI: Temporarily disable all AWS EC2-based tasks"
+ * kube play: only enforce passthrough in Quadlet
+ * Emergency fix for man pages: check for broken includes
+ * CI: Temporarily disable all AWS EC2-based tasks
+ * quadlet system tests: add useful defaults, logging
+ * volume,container: chroot to source before exporting content
+ * install sigproxy before start/attach
+ * Update to c/image 5.24.1
+ * events + container inspect test: RHEL fixes
+ * Bump to v4.4.2-dev
+
+- Remove patches (merged upstream):
+ * volume-container-chroot-to-source-before-exporting-content.patch
+- podman.spec: add `crun` requirement for quadlet
+ (https://github.com/containers/podman/pull/17601)
+
-------------------------------------------------------------------
Tue Feb 21 07:40:30 UTC 2023 - Danish Prakash
diff --git a/podman.spec b/podman.spec
index 29c2863..e9eff78 100644
--- a/podman.spec
+++ b/podman.spec
@@ -18,7 +18,7 @@
%{!?_user_tmpfilesdir: %global _user_tmpfilesdir %{_datadir}/user-tmpfiles.d}
%define project github.com/containers/podman
Name: podman
-Version: 4.4.1
+Version: 4.4.2
Release: 0
Summary: Daemon-less container engine for managing containers, pods and images
License: Apache-2.0
@@ -27,7 +27,6 @@ URL: https://%{project}
Source0: %{name}-%{version}.tar.xz
Source1: podman.conf
Source2: README.SUSE.SLES
-Patch: https://github.com/containers/podman/pull/17532.patch#/volume-container-chroot-to-source-before-exporting-content.patch
BuildRequires: bash-completion
BuildRequires: cni
BuildRequires: device-mapper-devel
@@ -52,6 +51,11 @@ Requires: catatonit >= 0.1.7
Requires: cni
Requires: cni-plugins
Requires: conmon >= 2.0.24
+# FIXME: quadlet has a hard dependency on crun
+# until https://github.com/containers/podman/pull/17601 is merged
+# which removes the hard dependency and at which point, we should
+# remove this and let users decide which runtime to use.
+Requires: crun
Requires: fuse-overlayfs
Requires: iptables
Requires: libcontainers-common >= 20210626
diff --git a/volume-container-chroot-to-source-before-exporting-content.patch b/volume-container-chroot-to-source-before-exporting-content.patch
deleted file mode 100644
index 564aeea..0000000
--- a/volume-container-chroot-to-source-before-exporting-content.patch
+++ /dev/null
@@ -1,102 +0,0 @@
-From 805e94b034ceb59e10a57413c1493b7e8b7e33a0 Mon Sep 17 00:00:00 2001
-From: Aditya R
-Date: Fri, 10 Feb 2023 15:16:27 +0530
-Subject: [PATCH] volume,container: chroot to source before exporting content
-
-* Utils must support higher level API to create Tar with chrooted into
- directory
-* Volume export: use TarwithChroot instead of Tar so we can make sure no
- symlink can be exported by tar if it exists outside of the source
-directory.
-* container export: use chroot and Tar instead of Tar so we can make sure no
- symlink can be exported by tar if it exists outside of the mointPoint.
-
-[NO NEW TESTS NEEDED]
-[NO TESTS NEEDED]
-Race needs combination of external/in-container mechanism which is hard to repro in CI.
-
-Closes: BZ:#2168256
-CVE: https://access.redhat.com/security/cve/CVE-2023-0778
-
-Signed-off-by: Aditya R
-
-
-
-Signed-off-by: Matt Heon
----
- libpod/container_internal.go | 4 ++--
- utils/utils.go | 25 ++++++++++++++++++++++++-
- 2 files changed, 26 insertions(+), 3 deletions(-)
-
-diff --git a/libpod/container_internal.go b/libpod/container_internal.go
-index c37d6be2b1b..ee6a7b6cc2c 100644
---- a/libpod/container_internal.go
-+++ b/libpod/container_internal.go
-@@ -34,7 +34,7 @@ import (
- "github.com/containers/podman/v4/pkg/systemd/notifyproxy"
- "github.com/containers/podman/v4/pkg/util"
- "github.com/containers/storage"
-- "github.com/containers/storage/pkg/archive"
-+ "github.com/containers/storage/pkg/chrootarchive"
- "github.com/containers/storage/pkg/idtools"
- "github.com/containers/storage/pkg/lockfile"
- "github.com/containers/storage/pkg/mount"
-@@ -763,7 +763,7 @@ func (c *Container) export(out io.Writer) error {
- }()
- }
-
-- input, err := archive.Tar(mountPoint, archive.Uncompressed)
-+ input, err := chrootarchive.Tar(mountPoint, nil, mountPoint)
- if err != nil {
- return fmt.Errorf("reading container directory %q: %w", c.ID(), err)
- }
-diff --git a/utils/utils.go b/utils/utils.go
-index f9f96f2835e..81b77e544a3 100644
---- a/utils/utils.go
-+++ b/utils/utils.go
-@@ -13,6 +13,7 @@ import (
-
- "github.com/containers/common/pkg/cgroups"
- "github.com/containers/storage/pkg/archive"
-+ "github.com/containers/storage/pkg/chrootarchive"
- "github.com/godbus/dbus/v5"
- "github.com/sirupsen/logrus"
- )
-@@ -63,7 +64,7 @@ func CreateTarFromSrc(source string, dest string) error {
- return fmt.Errorf("could not create tarball file '%s': %w", dest, err)
- }
- defer file.Close()
-- return TarToFilesystem(source, file)
-+ return TarChrootToFilesystem(source, file)
- }
-
- // TarToFilesystem creates a tarball from source and writes to an os.file
-@@ -87,6 +88,28 @@ func Tar(source string) (io.ReadCloser, error) {
- return archive.Tar(source, archive.Uncompressed)
- }
-
-+// TarChrootToFilesystem creates a tarball from source and writes to an os.file
-+// provided while chrooted to the source.
-+func TarChrootToFilesystem(source string, tarball *os.File) error {
-+ tb, err := TarWithChroot(source)
-+ if err != nil {
-+ return err
-+ }
-+ _, err = io.Copy(tarball, tb)
-+ if err != nil {
-+ return err
-+ }
-+ logrus.Debugf("wrote tarball file %s", tarball.Name())
-+ return nil
-+}
-+
-+// TarWithChroot creates a tarball from source and returns a readcloser of it
-+// while chrooted to the source.
-+func TarWithChroot(source string) (io.ReadCloser, error) {
-+ logrus.Debugf("creating tarball of %s", source)
-+ return chrootarchive.Tar(source, nil, source)
-+}
-+
- // RemoveScientificNotationFromFloat returns a float without any
- // scientific notation if the number has any.
- // golang does not handle conversion of float64s that have scientific