Skip to content
OpenAdvisories
High ELSA-2026-4672 3 CVEs

Important: container-tools:rhel8 security update (Oracle Linux 8)

Published Mar 17, 2026 · Updated Mar 17, 2026

Summary

aardvark-dns
[2:1.10.1-2]
- build off the RHEL maintenance branch
- Resolves: RHEL-59129

[2:1.10.0-1]
- update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0
- Related: Jira:RHEL-2110

[2:1.9.0-1]
- update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0
- Related: Jira:RHEL-2110

[2:1.8.0-1]
- update to https://github.com/containers/aardvark-dns/releases/tag/v1.8.0
- Related: Jira:RHEL-2110

[2:1.7.0-1]
- update to https://github.com/containers/aardvark-dns/releases/tag/v1.7.0
- Related: #2176055

[2:1.6.0-1]
- update to https://github.com/containers/aardvark-dns/releases/tag/v1.6.0
- Related: #2176055

[2:1.5.0-2]
- always stay offline during build
- Related: #2123641

[2:1.5.0-1]
- update to https://github.com/containers/aardvark-dns/releases/tag/v1.5.0
- Related: #2123641

[2:1.4.0-1]
- update to https://github.com/containers/aardvark-dns/releases/tag/v1.4.0
- Related: #2123641

[2:1.3.0-1]
- update to https://github.com/containers/aardvark-dns/releases/tag/v1.3.0
- Related: #2123641

buildah
[2:1.33.14-3]
- rebuild for CVE-2025-68121
- Resolves: RHEL-149262

[2:1.33.14-2]
- rebuild for CVE-2025-61729
- Resolves: RHEL-140529

[2:1.33.14-1]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.33
(https://github.com/containers/buildah/commit/a7f8179)
- fixes 'CVE-2025-47913 container-tools:rhel8/buildah: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS [rhel-8.10.z]'
- Resolves: RHEL-130974

[2:1.33.13-1]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.33
(https://github.com/containers/buildah/commit/65707d0)
- fixes '[Minor Incident] CVE-2025-52881 container-tools:rhel8/buildah: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [rhel-8.10.z]'
- Resolves: RHEL-126916

[2:1.33.12-3]
- rebuild for CVE-2025-58183
- Resolves: RHEL-125644

[2:1.33.12-2]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.33
(https://github.com/containers/buildah/commit/cf49e7c)
- fixes 'CVE-2025-22871 container-tools:rhel8/buildah: Request smuggling due to acceptance of invalid chunked data in net/http [rhel-8.10.z]'
- Resolves: RHEL-89239

[2:1.33.12-1]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.33
(https://github.com/containers/buildah/commit/58af1cd)
- Resolves: RHEL-67612

[2:1.33.11-1]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.33
(https://github.com/containers/buildah/commit/fe85f0d)
- Resolves: RHEL-61853

[2:1.33.10-1]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.33
(https://github.com/containers/buildah/commit/bd85c17)
- Resolves: RHEL-61835

[2:1.33.8-4]
- rebuild for golang fixes
- Related: RHEL-28452

cockpit-podman
[84.1-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1
- Related: Jira:RHEL-25557

[84-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84
- Related: Jira:RHEL-2110

[83-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/83
- Related: Jira:RHEL-2110

[82-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/82
- Related: Jira:RHEL-2110

[81-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/81
- Related: Jira:RHEL-2110

[80-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/80
- Related: Jira:RHEL-2110

[79-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/79
- Related: Jira:RHEL-2110

[78-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/78
- Related: Jira:RHEL-2110

[77-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/77
- Related: Jira:RHEL-2110

[75-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/75
- Related: #2176055

conmon
[3:2.1.10-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.10
- Related: Jira:RHEL-2110

[3:2.1.8-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.8
- Related: #2176055

[3:2.1.7-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.7
- Related: #2176055

[3:2.1.6-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.6
- Related: #2176055

[3:2.1.5-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.5
- Related: #2123641

[3:2.1.4-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.4
- Related: #2061390

[3:2.1.2-2]
- revert conmon to 2.1.2
- Related: #2061390

[2:2.1.3-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.3
- Related: #2061390

[2:2.1.2-2]
- update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
(https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
- Related: #2061390

[2:2.1.2-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.2
- Related: #2061390

containernetworking-plugins
[1:1.4.0-8]
- rebuild for CVE-2025-68121
- Resolves: RHEL-149265

[1:1.4.0-7]
- rebuild for CVE-2025-61729
- Resolves: RHEL-140529

[1:1.4.0-6]
- rebuild for CVE-2025-22871
- Resolves: RHEL-89244

[1:1.4.0-5]
- rebuild for golang fixes
- Related: RHEL-28452

[1:1.4.0-4]
- rebuild for golang fixes
- Related: RHEL-28452

[1:1.4.0-3]
- rebuild for CVE-2024-1394
- Resolves: RHEL-24294

[1:1.4.0-2]
- rebuild
- Resolves: RHEL-18390

[1:1.4.0-1]
- update to https://github.com/containernetworking/plugins/releases/tag/v1.4.0
- Related: Jira:RHEL-2110

[1:1.3.0-5]
- fix path to dhcp service
- Resolves: #RHEL-3789

[1:1.3.0-4]
- add Epoch in Provides
- Related: #2176055

containers-common
[1-82.0.1]
- Updated removed references [Orabug: 33473101] (Alex Burmashev)
- Adjust registries.conf (Nikita Gerasimov)
- remove references to RedHat re

Fixed packages 32

ReleasePackageFixed in
Oracle Linux · 8 aardvark-dns 2:1.10.1-2.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 buildah 2:1.33.14-3.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 buildah-tests 2:1.33.14-3.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 cockpit-podman 0:84.1-1.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 conmon 3:2.1.10-1.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 container-selinux 2:2.229.0-2.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 containernetworking-plugins 1:1.4.0-8.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 containers-common 2:1-82.0.1.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 crit 0:3.18-5.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 criu 0:3.18-5.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 criu-devel 0:3.18-5.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 criu-libs 0:3.18-5.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 crun 0:1.14.3-2.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 fuse-overlayfs 0:1.13-1.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 libslirp 0:4.4.0-2.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 libslirp-devel 0:4.4.0-2.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 netavark 2:1.10.3-1.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 oci-seccomp-bpf-hook 0:1.2.10-1.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 podman 4:4.9.4-30.0.1.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 podman-catatonit 4:4.9.4-30.0.1.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 podman-docker 4:4.9.4-30.0.1.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 podman-gvproxy 4:4.9.4-30.0.1.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 podman-plugins 4:4.9.4-30.0.1.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 podman-remote 4:4.9.4-30.0.1.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 podman-tests 4:4.9.4-30.0.1.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 python3-criu 0:3.18-5.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 python3-podman 0:4.9.0-3.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 runc 4:1.2.9-4.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 skopeo 2:1.14.5-7.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 skopeo-tests 2:1.14.5-7.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 slirp4netns 0:1.2.3-1.module+el8.10.0+90844+cf83192e
Oracle Linux · 8 udica 0:0.2.6-21.module+el8.10.0+90844+cf83192e

Vulnerabilities 3