Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2026-4672

Опубликовано: 17 мар. 2026
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2026-4672: container-tools:rhel8 security update (IMPORTANT)

aardvark-dns [2:1.10.1-2]

  • build off the RHEL maintenance branch
  • Resolves: RHEL-59129

[2:1.10.0-1]

[2:1.9.0-1]

[2:1.8.0-1]

[2:1.7.0-1]

[2:1.6.0-1]

[2:1.5.0-2]

  • always stay offline during build
  • Related: #2123641

[2:1.5.0-1]

[2:1.4.0-1]

[2:1.3.0-1]

buildah [2:1.33.14-3]

  • rebuild for CVE-2025-68121
  • Resolves: RHEL-149262

[2:1.33.14-2]

  • rebuild for CVE-2025-61729
  • Resolves: RHEL-140529

[2:1.33.14-1]

[2:1.33.13-1]

[2:1.33.12-3]

  • rebuild for CVE-2025-58183
  • Resolves: RHEL-125644

[2:1.33.12-2]

[2:1.33.12-1]

[2:1.33.11-1]

[2:1.33.10-1]

[2:1.33.8-4]

  • rebuild for golang fixes
  • Related: RHEL-28452

cockpit-podman [84.1-1]

[84-1]

[83-1]

[82-1]

[81-1]

[80-1]

[79-1]

[78-1]

[77-1]

[75-1]

conmon [3:2.1.10-1]

[3:2.1.8-1]

[3:2.1.7-1]

[3:2.1.6-1]

[3:2.1.5-1]

[3:2.1.4-1]

[3:2.1.2-2]

  • revert conmon to 2.1.2
  • Related: #2061390

[2:2.1.3-1]

[2:2.1.2-2]

[2:2.1.2-1]

containernetworking-plugins [1:1.4.0-8]

  • rebuild for CVE-2025-68121
  • Resolves: RHEL-149265

[1:1.4.0-7]

  • rebuild for CVE-2025-61729
  • Resolves: RHEL-140529

[1:1.4.0-6]

  • rebuild for CVE-2025-22871
  • Resolves: RHEL-89244

[1:1.4.0-5]

  • rebuild for golang fixes
  • Related: RHEL-28452

[1:1.4.0-4]

  • rebuild for golang fixes
  • Related: RHEL-28452

[1:1.4.0-3]

  • rebuild for CVE-2024-1394
  • Resolves: RHEL-24294

[1:1.4.0-2]

  • rebuild
  • Resolves: RHEL-18390

[1:1.4.0-1]

[1:1.3.0-5]

  • fix path to dhcp service
  • Resolves: #RHEL-3789

[1:1.3.0-4]

  • add Epoch in Provides
  • Related: #2176055

containers-common [1-82.0.1]

  • Updated removed references [Orabug: 33473101] (Alex Burmashev)
  • Adjust registries.conf (Nikita Gerasimov)
  • remove references to RedHat registry (Nikita Gerasimov)

[2:1-82]

  • update vendored components
  • Resolves: RHEL-40801

[2:1-81]

  • Update shortnames from Pyxis
  • Related: Jira:RHEL-2110

[2:1-80]

  • bump release to preserve upgrade path
  • Resolves: Jira:RHEL-12277

[2:1-59]

  • update vendored components
  • Related: Jira:RHEL-2110

[2:1-58]

  • update vendored components
  • Related: Jira:RHEL-2110

[2:1-57]

  • fix shortnames for rhel-minimal
  • Related: Jira:RHEL-2110

[2:1-56]

  • implement GPG auto updating mechanism from redhat-release
  • Resolves: #RHEL-2110

[2:1-55]

  • update GPG keys to the current content of redhat-release
  • Resolves: #RHEL-3164

[2:1-54]

  • update vendored components and shortnames
  • Related: #2176055

container-selinux [2:2.229.0-2]

  • remove watch statements properly for RHEL8 and lower
  • Related: Jira:RHEL-2110

[2:2.229.0-1]

[2:2.228.1-1]

[2:2.228.0-1]

[2:2.227.0-1]

[2:2.226.0-1]

[2:2.224.0-1]

[2:2.222.0-1]

[2:2.221.1-1]

[2:2.221.0-1]

criu [3.18-5]

  • rebuild to preserve upgrade path
  • Related: RHEL-32671

[3.18-4]

  • switch to egg-info on 8.9
  • Related: #2176055

[3.18-3]

  • remove --progress-bar option
  • Related: #2176055

[3.18-2]

  • update to 3.18
  • Related: #2176055

[3.17-1]

  • update to 3.17
  • Resolves: #2175794

[3.15-2]

  • add gating tests
  • Related: #1971718

[3.15-1]

  • add -devel and -libs subpackages
  • Resolves: #1971718

[3.12-9]

  • Added additional fixup patches for the socket labelling

[3.12-8]

  • Patch for socket labelling has changed upstream

[3.12-4]

  • Applied patch to correctly restore socket()s

crun [1.14.3-2]

  • remove BR libgcrypt-devel, no longer needed
  • Related: Jira:RHEL-2110

[1.14.3-1]

[1.14.1-1]

[1.14-1]

[1.13-1]

[1.12-1]

[1.11.2-1]

[1.11.1-1]

[1.11-1]

[1.9.2-1]

fuse-overlayfs [1.13-1]

[1.12-1]

[1.11-1]

[1.10-2]

[1.10-1]

[1.9-1]

[1.8.2-2]

  • BuildRequires: /usr/bin/go-md2man
  • Related: #2061390

[1.8.2-1]

[1.8.1-1]

[1.8-1]

libslirp [4.4.0-2]

  • rebuild to preserve upgrade path 8.9 -> 8.10
  • Related: RHEL-32671

[4.4.0-1]

  • Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
  • Related: #1934415

[4.3.1-1]

[4.3.0-5]

  • replace patch for CVE-2020-10756 with dedicated upstream one
  • Related: #1821193

[4.3.0-4]

  • fix 'CVE-2020-10756 QEMU: slirp: networking out-of-bounds read information disclosure vulnerability'
  • Related: #1821193

[4.3.0-3]

[4.3.0-2]

  • initial libslirp build for container-tools 8.3.0 module
  • Resolves: #1821193

[4.3.0-1]

  • New v4.3.0 release

[4.2.0-2]

  • CVE-2020-1983 fix

[4.2.0-1]

  • New v4.2.0 release

netavark [2:1.10.3-1]

[2:1.10.2-1]

[2:1.10.1-1]

[2:1.10.0-1]

[2:1.9.0-1]

[2:1.8.0-2]

  • fix directory for systemd units
  • Related: Jira:RHEL-2110

[2:1.8.0-1]

[2:1.7.0-1]

[2:1.6.0-1]

[2:1.5.0-5]

  • fix --dns-add command is not functioning
  • Resolves: #2182897

oci-seccomp-bpf-hook [1.2.10-1]

[1.2.9-1]

[1.2.8-2]

[1.2.8-1]

[1.2.7-1]

[1.2.6-1]

[1.2.5-2]

  • BuildRequires: /usr/bin/go-md2man
  • Related: #2061390

[1.2.5-1]

[1.2.3-3]

  • change runc dependency to conflict
  • Related: #1934415

[1.2.3-2]

  • remove unneeded patch
  • Related: #1934415

podman [4.9.4-30.0.1]

  • Fixes issue of container created in cgroupv2 not start in cgroupv1 [Orabug: 36136813]
  • Fixes container memory limit not set after host is rebooted with cgroupv2 [Orabug: 36136802]
  • Fixes issue of podman execvp error while using podmansh [Orabug: 36756665]

[4:4.9.4-30]

[4:4.9.4-29]

  • rebuild for CVE-2025-68121
  • Resolves: RHEL-149265

[4:4.9.4-28]

  • rebuild
  • Resolves: RHEL-140532

[4:4.9.4-27]

[4:4.9.4-26]

[4:4.9.4-25]

[4:4.9.4-24]

  • rebuild for CVE-2025-58183
  • Resolves: RHEL-125654

[4:4.9.4-23]

[4:4.9.4-22]

python-podman [4.9.0-3]

  • sync with release-4.9 branch
  • Resolves: RHEL-31069

[4.9.0-2]

  • depend directly on urllib3
  • Resolves: RHEL-43567

[4.9.0-1]

[4.8.2-1]

[4.8.0.post1-1]

[4.7.0-1]

[4.6.0-1]

[4.5.1-1]

[4.5.0-1]

[4.4.1-1]

runc [4:1.2.9-4]

  • rebuild for CVE-2025-68121
  • Resolves: RHEL-149266

[4:1.2.9-3]

  • rebuild for CVE-2025-61729
  • Resolves: RHEL-140533

[4:1.2.9-2]

[4:1.2.5-2]

  • fix permission regression
  • Related: RHEL-122384

[4:1.2.5-1]

  • fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881
  • Resolves: RHEL-122384

[1:1.1.12-6]

  • Add CPU affinity feature from Kir Kolishkin
  • Resolves: RHEL-74865

[1:1.1.12-5]

  • bump golang buildrequires
  • add no_openssl build tag
  • Resolves RHEL-55757

[1:1.1.12-4]

  • rebuild for golang fixes
  • Related: RHEL-28452

[1:1.1.12-3]

  • rebuild for golang fixes
  • Related: RHEL-28452

[1:1.1.12-2]

  • rebuild for CVE-2024-1394
  • Resolves: RHEL-24297

skopeo [2:1.14.5-7]

  • rebuild for CVE-2025-68121
  • Resolves: RHEL-149267

[2:1.14.5-6]

  • rebuild for CVE-2025-61729
  • Resolves: RHEL-140534

[2:1.14.5-5]

  • rebuild for CVE-2025-58183
  • Resolves: RHEL-125659

[2:1.14.5-4]

  • rebuild for CVE-2025-22871
  • Resolves: RHEL-89254

[2:1.14.5-3]

  • rebuild for golang fixes
  • Related: RHEL-28452

[2:1.14.5-2]

  • rebuild for golang fixes
  • Related: RHEL-28452

[2:1.14.5-1]

[2:1.14.4-2]

  • rebuild for CVE-2024-24786
  • Resolves: RHEL-24297

[2:1.14.4-1]

[2:1.14.3-2]

slirp4netns [1.2.3-1]

[1.2.2-1]

[1.2.1-1]

[1.2.0-3]

  • BuildRequires: /usr/bin/go-md2man
  • Related: #2176055

[1.2.0-2]

  • BuildRequires: /usr/bin/go-md2man
  • Related: #2061390

[1.2.0-1]

[1.1.8-2]

  • fix gating - don't use insecure functions - thanks to Marc-Andre Lureau
  • Related: #2001445

[1.1.8-1]

[1.1.7-2]

  • exclude i686 because of build failures
  • Related: #1883490

[1.1.7-1]

udica [0.2.6-21]

  • bump release to preserve update path
  • Resolves: RHEL-32671

[0.2.6-20]

  • bump release to preserve update path
  • Related: #2139052

[0.2.6-4]

  • Bump release to match latest release available in rhel-8.6.1
  • Resolves: #2139052

[0.2.6-3]

  • Make sure each section of the inspect exists before accessing (#2027662)

[0.2.6-2]

  • Require container-selinux shipping policy templates (#2005866)

[0.2.6-1]

[0.2.5-2]

  • New rebase https://github.com/containers/udica/releases/tag/v0.2.5 (#1995041)
  • Replace capability dictionary with str.lower()
  • Enable udica to generate policies with fifo class
  • Sort container inspect data before processing
  • Update templates to work properly with new cil parser
  • Related: #1934415

[0.2.5-1]

[0.2.4-2]

  • remove %check again and all related BRs
  • Related: #1934415

[0.2.4-1]

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

Module container-tools:ol8 is enabled

aardvark-dns

1.10.1-2.module+el8.10.0+90844+cf83192e

buildah

1.33.14-3.module+el8.10.0+90844+cf83192e

buildah-tests

1.33.14-3.module+el8.10.0+90844+cf83192e

cockpit-podman

84.1-1.module+el8.10.0+90844+cf83192e

conmon

2.1.10-1.module+el8.10.0+90844+cf83192e

container-selinux

2.229.0-2.module+el8.10.0+90844+cf83192e

containernetworking-plugins

1.4.0-8.module+el8.10.0+90844+cf83192e

containers-common

1-82.0.1.module+el8.10.0+90844+cf83192e

crit

3.18-5.module+el8.10.0+90844+cf83192e

criu

3.18-5.module+el8.10.0+90844+cf83192e

criu-devel

3.18-5.module+el8.10.0+90844+cf83192e

criu-libs

3.18-5.module+el8.10.0+90844+cf83192e

crun

1.14.3-2.module+el8.10.0+90844+cf83192e

fuse-overlayfs

1.13-1.module+el8.10.0+90844+cf83192e

libslirp

4.4.0-2.module+el8.10.0+90844+cf83192e

libslirp-devel

4.4.0-2.module+el8.10.0+90844+cf83192e

netavark

1.10.3-1.module+el8.10.0+90844+cf83192e

oci-seccomp-bpf-hook

1.2.10-1.module+el8.10.0+90844+cf83192e

podman

4.9.4-30.0.1.module+el8.10.0+90844+cf83192e

podman-catatonit

4.9.4-30.0.1.module+el8.10.0+90844+cf83192e

podman-docker

4.9.4-30.0.1.module+el8.10.0+90844+cf83192e

podman-gvproxy

4.9.4-30.0.1.module+el8.10.0+90844+cf83192e

podman-plugins

4.9.4-30.0.1.module+el8.10.0+90844+cf83192e

podman-remote

4.9.4-30.0.1.module+el8.10.0+90844+cf83192e

podman-tests

4.9.4-30.0.1.module+el8.10.0+90844+cf83192e

python3-criu

3.18-5.module+el8.10.0+90844+cf83192e

python3-podman

4.9.0-3.module+el8.10.0+90844+cf83192e

runc

1.2.9-4.module+el8.10.0+90844+cf83192e

skopeo

1.14.5-7.module+el8.10.0+90844+cf83192e

skopeo-tests

1.14.5-7.module+el8.10.0+90844+cf83192e

slirp4netns

1.2.3-1.module+el8.10.0+90844+cf83192e

udica

0.2.6-21.module+el8.10.0+90844+cf83192e

Oracle Linux x86_64

Module container-tools:ol8 is enabled

aardvark-dns

1.10.1-2.module+el8.10.0+90844+cf83192e

buildah

1.33.14-3.module+el8.10.0+90844+cf83192e

buildah-tests

1.33.14-3.module+el8.10.0+90844+cf83192e

cockpit-podman

84.1-1.module+el8.10.0+90844+cf83192e

conmon

2.1.10-1.module+el8.10.0+90844+cf83192e

container-selinux

2.229.0-2.module+el8.10.0+90844+cf83192e

containernetworking-plugins

1.4.0-8.module+el8.10.0+90844+cf83192e

containers-common

1-82.0.1.module+el8.10.0+90844+cf83192e

crit

3.18-5.module+el8.10.0+90844+cf83192e

criu

3.18-5.module+el8.10.0+90844+cf83192e

criu-devel

3.18-5.module+el8.10.0+90844+cf83192e

criu-libs

3.18-5.module+el8.10.0+90844+cf83192e

crun

1.14.3-2.module+el8.10.0+90844+cf83192e

fuse-overlayfs

1.13-1.module+el8.10.0+90844+cf83192e

libslirp

4.4.0-2.module+el8.10.0+90844+cf83192e

libslirp-devel

4.4.0-2.module+el8.10.0+90844+cf83192e

netavark

1.10.3-1.module+el8.10.0+90844+cf83192e

oci-seccomp-bpf-hook

1.2.10-1.module+el8.10.0+90844+cf83192e

podman

4.9.4-30.0.1.module+el8.10.0+90844+cf83192e

podman-catatonit

4.9.4-30.0.1.module+el8.10.0+90844+cf83192e

podman-docker

4.9.4-30.0.1.module+el8.10.0+90844+cf83192e

podman-gvproxy

4.9.4-30.0.1.module+el8.10.0+90844+cf83192e

podman-plugins

4.9.4-30.0.1.module+el8.10.0+90844+cf83192e

podman-remote

4.9.4-30.0.1.module+el8.10.0+90844+cf83192e

podman-tests

4.9.4-30.0.1.module+el8.10.0+90844+cf83192e

python3-criu

3.18-5.module+el8.10.0+90844+cf83192e

python3-podman

4.9.0-3.module+el8.10.0+90844+cf83192e

runc

1.2.9-4.module+el8.10.0+90844+cf83192e

skopeo

1.14.5-7.module+el8.10.0+90844+cf83192e

skopeo-tests

1.14.5-7.module+el8.10.0+90844+cf83192e

slirp4netns

1.2.3-1.module+el8.10.0+90844+cf83192e

udica

0.2.6-21.module+el8.10.0+90844+cf83192e

Связанные уязвимости

rocky
9 дней назад

Important: container-tools:rhel8 security update

rocky
28 дней назад

Important: grafana security update

oracle-oval
около 1 месяца назад

ELSA-2026-3188: grafana security update (IMPORTANT)

rocky
28 дней назад

Important: podman security update

rocky
28 дней назад

Important: podman security update

Уязвимость ELSA-2026-4672