Summary
aardvark-dns
[2:1.10.1-2]
- build off the RHEL maintenance branch
- Resolves: RHEL-59129
buildah
[2:1.33.15-2]
- Rebuild for CVE-2026-78667 and CVE-2026-111943
- Resolves: RHEL-278949 RHEL-287628 RHEL-272014
[2:1.33.15-1]
- fix Version to match the upstream release-1.33 branch content - Resolves:
RHEL-272014
cockpit-podman
[84.1-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1
- Related: Jira:RHEL-25557
conmon
[3:2.1.10-2]
- Rebuild for CVE-2026-78667 and CVE-2026-111943
- Resolves: RHEL-278824 RHEL-287445
containernetworking-plugins
[1:1.4.0-11]
- Rebuild for CVE-2026-78667
- Resolves: RHEL-278904
containers-common
[1-82.0.1]
- Updated removed references [Orabug: 33473101] (Alex Burmashev)
- Adjust registries.conf (Nikita Gerasimov)
- remove references to RedHat registry (Nikita Gerasimov)
container-selinux
[2:2.229.0-3]
- add user_t confined user container support (cherry-pick of upstream PR #443)
- Resolves: RHEL-135342
criu
[3.18-5]
- rebuild to preserve upgrade path
- Related: RHEL-32671
crun
[1.14.3-4]
- rebuild with updated Go to fix CVE-2026-42499
- Resolves: RHEL-241893
[1.14.3-3]
- rebuild with Go 1.25.11 to fix CVE-2026-33818, CVE-2026-56853, CVE-2026-56858,
CVE-2026-56859, CVE-2026-56860, CVE-2026-56862
fuse-overlayfs
[1.13-1]
- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.13
- Related: Jira:RHEL-2110
libslirp
[4.4.0-2]
- rebuild to preserve upgrade path 8.9 -> 8.10
- Related: RHEL-32671
netavark
[2:1.10.3-1]
- update to https://github.com/containers/netavark/releases/tag/v1.10.3
- Related: Jira:RHEL-2110
oci-seccomp-bpf-hook
[1.2.10-4]
- Rebuild for CVE-2026-78667 and CVE-2026-111943
- Resolves: RHEL-278897 RHEL-287578
podman
[4.9.4-38.0.1]
- Fixes issue of container created in cgroupv2 not start in cgroupv1 [Orabug: 36136813]
- Fixes container memory limit not set after host is rebooted with cgroupv2 [Orabug: 36136802]
- Fixes issue of podman execvp error while using podmansh [Orabug: 36756665]
[4:4.9.4-38]
- Rebuild for CVE-2026-78667 and CVE-2026-111943
- Resolves: RHEL-278827 RHEL-287448
python-podman
[4.9.0-3]
- sync with release-4.9 branch
- Resolves: RHEL-31069
runc
[4:1.2.9-9]
- Fix GOPATH to use absolute path for Go 1.26.x FIPS module compatibility
- Resolves: RHEL-287598
[4:1.2.9-8]
- Fix GOPATH ordering for Go 1.26.x compatibility
- Resolves: RHEL-287598
[4:1.2.9-7]
- Rebuild for CVE-2026-111943
- Resolves: RHEL-287598
skopeo
[2:1.14.6-5]
- Rebuild for CVE-2026-78667 and CVE-2026-111943
- Resolves: RHEL-278899 RHEL-287580
slirp4netns
[1.2.3-1]
- update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3
- Related: Jira:RHEL-2110
udica
[0.2.6-21]
- bump release to preserve update path
- Resolves: RHEL-32671
Fixed packages 32
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | buildah | 2:1.33.15-2.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | buildah-tests | 2:1.33.15-2.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | cockpit-podman | 0:84.1-1.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | conmon | 3:2.1.10-2.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | container-selinux | 2:2.229.0-3.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | containernetworking-plugins | 1:1.4.0-11.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | containers-common | 2:1-82.0.1.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | crit | 0:3.18-5.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | criu | 0:3.18-5.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | criu-devel | 0:3.18-5.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | criu-libs | 0:3.18-5.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | crun | 0:1.14.3-4.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | libslirp | 0:4.4.0-2.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | libslirp-devel | 0:4.4.0-2.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | netavark | 2:1.10.3-1.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | oci-seccomp-bpf-hook | 0:1.2.10-4.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | podman | 4:4.9.4-38.0.1.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | podman-catatonit | 4:4.9.4-38.0.1.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | podman-docker | 4:4.9.4-38.0.1.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | podman-gvproxy | 4:4.9.4-38.0.1.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | podman-plugins | 4:4.9.4-38.0.1.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | podman-remote | 4:4.9.4-38.0.1.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | podman-tests | 4:4.9.4-38.0.1.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | python3-criu | 0:3.18-5.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | python3-podman | 0:4.9.0-3.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | runc | 4:1.2.9-9.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | skopeo | 2:1.14.6-5.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | skopeo-tests | 2:1.14.6-5.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | slirp4netns | 0:1.2.3-1.module+el8.10.0+91087+698d4460 |
| Oracle Linux · 8 | udica | 0:0.2.6-21.module+el8.10.0+91087+698d4460 |
Vulnerabilities 2
-
High 7.5
Lack of limit on size of parsed Range headers in net/http
When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU.
-
Medium 6.8CVE-2026-111943 Public exploit
Distrust compromised intermediate certificates in crypto/x509
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in cr…