Summary
aardvark-dns
[2:1.10.1-2]
- build off the RHEL maintenance branch
- Resolves: RHEL-59129
buildah
[2:1.33.14-3]
- rebuild for CVE-2025-68121
- Resolves: RHEL-149262
cockpit-podman
[84.1-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1
- Related: Jira:RHEL-25557
conmon
[3:2.1.10-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.10
- Related: Jira:RHEL-2110
containernetworking-plugins
[1:1.4.0-8]
- rebuild for CVE-2025-68121
- Resolves: RHEL-149265
containers-common
[1-82.0.1]
- Updated removed references [Orabug: 33473101] (Alex Burmashev)
- Adjust registries.conf (Nikita Gerasimov)
- remove references to RedHat registry (Nikita Gerasimov)
container-selinux
[2:2.229.0-2]
- remove watch statements properly for RHEL8 and lower
- Related: Jira:RHEL-2110
criu
[3.18-5]
- rebuild to preserve upgrade path
- Related: RHEL-32671
crun
[1.14.3-2]
- remove BR libgcrypt-devel, no longer needed
- Related: Jira:RHEL-2110
fuse-overlayfs
[1.13-1]
- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.13
- Related: Jira:RHEL-2110
libslirp
[4.4.0-2]
- rebuild to preserve upgrade path 8.9 -> 8.10
- Related: RHEL-32671
netavark
[2:1.10.3-1]
- update to https://github.com/containers/netavark/releases/tag/v1.10.3
- Related: Jira:RHEL-2110
oci-seccomp-bpf-hook
[1.2.10-1]
- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
- Related: Jira:RHEL-2110
podman
[4.9.4-31.0.1]
- Fixes issue of container created in cgroupv2 not start in cgroupv1 [Orabug: 36136813]
- Fixes container memory limit not set after host is rebooted with cgroupv2 [Orabug: 36136802]
- Fixes issue of podman execvp error while using podmansh [Orabug: 36756665]
python-podman
[4.9.0-3]
- sync with release-4.9 branch
- Resolves: RHEL-31069
runc
[4:1.2.9-4]
- rebuild for CVE-2025-68121
- Resolves: RHEL-149266
skopeo
[2:1.14.6-2]
- Rebuild for CVE-2026-32281
- Resolves: RHEL-177067
[2:1.14.6-1]
- update to 1.14.6 to fix CVE-2026-34986
- Resolves: RHEL-164976
slirp4netns
[1.2.3-1]
- update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3
- Related: Jira:RHEL-2110
udica
[0.2.6-21]
- bump release to preserve update path
- Resolves: RHEL-32671
Fixed packages 32
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | buildah | 2:1.33.14-3.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | buildah-tests | 2:1.33.14-3.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | cockpit-podman | 0:84.1-1.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | conmon | 3:2.1.10-1.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | containernetworking-plugins | 1:1.4.0-8.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | containers-common | 2:1-82.0.1.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | crit | 0:3.18-5.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | criu | 0:3.18-5.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | criu-devel | 0:3.18-5.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | criu-libs | 0:3.18-5.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | crun | 0:1.14.3-2.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | libslirp | 0:4.4.0-2.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | libslirp-devel | 0:4.4.0-2.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | netavark | 2:1.10.3-1.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | podman | 4:4.9.4-31.0.1.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | podman-catatonit | 4:4.9.4-31.0.1.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | podman-docker | 4:4.9.4-31.0.1.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | podman-gvproxy | 4:4.9.4-31.0.1.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | podman-plugins | 4:4.9.4-31.0.1.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | podman-remote | 4:4.9.4-31.0.1.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | podman-tests | 4:4.9.4-31.0.1.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | python3-criu | 0:3.18-5.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | python3-podman | 0:4.9.0-3.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | runc | 4:1.2.9-4.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | skopeo | 2:1.14.6-2.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | skopeo-tests | 2:1.14.6-2.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | slirp4netns | 0:1.2.3-1.module+el8.10.0+90937+f3690799 |
| Oracle Linux · 8 | udica | 0:0.2.6-21.module+el8.10.0+90937+f3690799 |
Vulnerabilities 5
-
High 7.5
Incorrect parsing of IPv6 host literals in net/url
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
-
High 7.5
Unexpected work during chain building in crypto/x509
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 an…
-
High 7.5
Inefficient policy validation in crypto/x509
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chain…
-
High 7.5
Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls
If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.
-
High 7.5
Go JOSE affect by a panic in JWE decryption
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JS…