RHSA-2026:16701 — Red Hat Security Advisory: container-tools:rhel8 security update

Fixed packages 130

Release	Package	Fixed in
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	aardvark-dns	2:1.5.0-2.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	buildah	1:1.29.7-1.module+el8.8.0+24026+ca15dd94
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	buildah-debuginfo	1:1.29.7-1.module+el8.8.0+24026+ca15dd94
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	buildah-debugsource	1:1.29.7-1.module+el8.8.0+24026+ca15dd94
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	buildah-tests	1:1.29.7-1.module+el8.8.0+24026+ca15dd94
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	buildah-tests-debuginfo	1:1.29.7-1.module+el8.8.0+24026+ca15dd94
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	cockpit-podman	0:63.1-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	conmon	3:2.1.6-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	conmon-debuginfo	3:2.1.6-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	conmon-debugsource	3:2.1.6-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	container-selinux	2:2.229.0-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	containernetworking-plugins	1:1.2.0-3.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	containernetworking-plugins-debuginfo	1:1.2.0-3.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	containernetworking-plugins-debugsource	1:1.2.0-3.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	containers-common	2:1-67.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	crit	0:3.15-4.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	criu	0:3.15-4.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	criu-debuginfo	0:3.15-4.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	criu-debugsource	0:3.15-4.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	criu-devel	0:3.15-4.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	criu-libs	0:3.15-4.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	criu-libs-debuginfo	0:3.15-4.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	crun	0:1.14.3-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	crun-debuginfo	0:1.14.3-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	crun-debugsource	0:1.14.3-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	fuse-overlayfs	0:1.11-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	fuse-overlayfs-debuginfo	0:1.11-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	fuse-overlayfs-debugsource	0:1.11-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	libslirp	0:4.4.0-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	libslirp-debuginfo	0:4.4.0-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	libslirp-debugsource	0:4.4.0-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	libslirp-devel	0:4.4.0-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	netavark	2:1.5.1-3.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	oci-seccomp-bpf-hook	0:1.2.10-1.module+el8.8.0+24130+2fde7a57
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	oci-seccomp-bpf-hook-debuginfo	0:1.2.10-1.module+el8.8.0+24130+2fde7a57
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	oci-seccomp-bpf-hook-debugsource	0:1.2.10-1.module+el8.8.0+24130+2fde7a57
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	podman	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	podman-catatonit	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	podman-catatonit-debuginfo	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	podman-debuginfo	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	podman-debugsource	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	podman-docker	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	podman-gvproxy	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	podman-gvproxy-debuginfo	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	podman-plugins	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	podman-plugins-debuginfo	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	podman-remote	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	podman-remote-debuginfo	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	podman-tests	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	python-podman	0:4.4.1-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	python3-criu	0:3.15-4.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	python3-podman	0:4.4.1-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	runc	1:1.2.9-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	runc-debuginfo	1:1.2.9-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	runc-debugsource	1:1.2.9-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	skopeo	2:1.11.4-0.1.module+el8.8.0+24130+2fde7a57
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	skopeo-tests	2:1.11.4-0.1.module+el8.8.0+24130+2fde7a57
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	slirp4netns	0:1.2.0-3.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	slirp4netns-debuginfo	0:1.2.0-3.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	slirp4netns-debugsource	0:1.2.0-3.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	toolbox	0:0.0.99.3-7.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	toolbox-debuginfo	0:0.0.99.3-7.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	toolbox-debugsource	0:0.0.99.3-7.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	toolbox-tests	0:0.0.99.3-7.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	udica	0:0.2.6-20.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	aardvark-dns	2:1.5.0-2.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	buildah	1:1.29.7-1.module+el8.8.0+24026+ca15dd94
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	buildah-debuginfo	1:1.29.7-1.module+el8.8.0+24026+ca15dd94
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	buildah-debugsource	1:1.29.7-1.module+el8.8.0+24026+ca15dd94
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	buildah-tests	1:1.29.7-1.module+el8.8.0+24026+ca15dd94
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	buildah-tests-debuginfo	1:1.29.7-1.module+el8.8.0+24026+ca15dd94
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	cockpit-podman	0:63.1-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	conmon	3:2.1.6-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	conmon-debuginfo	3:2.1.6-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	conmon-debugsource	3:2.1.6-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	container-selinux	2:2.229.0-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	containernetworking-plugins	1:1.2.0-3.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	containernetworking-plugins-debuginfo	1:1.2.0-3.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	containernetworking-plugins-debugsource	1:1.2.0-3.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	containers-common	2:1-67.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	crit	0:3.15-4.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	criu	0:3.15-4.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	criu-debuginfo	0:3.15-4.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	criu-debugsource	0:3.15-4.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	criu-devel	0:3.15-4.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	criu-libs	0:3.15-4.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	criu-libs-debuginfo	0:3.15-4.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	crun	0:1.14.3-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	crun-debuginfo	0:1.14.3-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	crun-debugsource	0:1.14.3-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	fuse-overlayfs	0:1.11-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	fuse-overlayfs-debuginfo	0:1.11-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	fuse-overlayfs-debugsource	0:1.11-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	libslirp	0:4.4.0-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	libslirp-debuginfo	0:4.4.0-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	libslirp-debugsource	0:4.4.0-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	libslirp-devel	0:4.4.0-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	netavark	2:1.5.1-3.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	oci-seccomp-bpf-hook	0:1.2.10-1.module+el8.8.0+24130+2fde7a57
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	oci-seccomp-bpf-hook-debuginfo	0:1.2.10-1.module+el8.8.0+24130+2fde7a57
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	oci-seccomp-bpf-hook-debugsource	0:1.2.10-1.module+el8.8.0+24130+2fde7a57
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	podman	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	podman-catatonit	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	podman-catatonit-debuginfo	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	podman-debuginfo	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	podman-debugsource	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	podman-docker	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	podman-gvproxy	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	podman-gvproxy-debuginfo	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	podman-plugins	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	podman-plugins-debuginfo	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	podman-remote	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	podman-remote-debuginfo	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	podman-tests	3:4.4.1-27.module+el8.8.0+24240+fe437f32.6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	python-podman	0:4.4.1-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	python3-criu	0:3.15-4.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	python3-podman	0:4.4.1-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	runc	1:1.2.9-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	runc-debuginfo	1:1.2.9-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	runc-debugsource	1:1.2.9-1.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	skopeo	2:1.11.4-0.1.module+el8.8.0+24130+2fde7a57
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	skopeo-tests	2:1.11.4-0.1.module+el8.8.0+24130+2fde7a57
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	slirp4netns	0:1.2.0-3.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	slirp4netns-debuginfo	0:1.2.0-3.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	slirp4netns-debugsource	0:1.2.0-3.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	toolbox	0:0.0.99.3-7.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	toolbox-debuginfo	0:0.0.99.3-7.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	toolbox-debugsource	0:0.0.99.3-7.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	toolbox-tests	0:0.0.99.3-7.module+el8.8.0+23884+2031fc78
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	udica	0:0.2.6-20.module+el8.8.0+23884+2031fc78

Vulnerabilities 1

High 7.5

CVE-2025-47913

Potential denial of service in golang.org/x/crypto/ssh/agent

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

golang.org/x/crypto golang.org/x/crypto/ssh/agent k3s-static-1.32 falco-no-driver Debian Ubuntu Azure Linux Wolfi Go

Nov 13, 2025

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2414943
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_16701.json
report
https://access.redhat.com/security/cve/CVE-2025-47913
advisory
https://www.cve.org/CVERecord?id=CVE-2025-47913
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-47913
advisory
https://github.com/advisories/GHSA-hcg3-q754-cr77
article
https://go.dev/cl/700295
article
https://go.dev/issue/75178
advisory
https://pkg.go.dev/vuln/GO-2025-4116

Red Hat Security Advisory: container-tools:rhel8 security update

Fixed packages 130

Vulnerabilities 1

Potential denial of service in golang.org/x/crypto/ssh/agent

References