RLSA-2026:38504

Опубликовано: 13 июл. 2026

Источник: rocky

Оценка: Important

Описание

Important: container-tools:rhel8 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
podman: Podman: Information disclosure via malicious container image environment variables (CVE-2026-57231)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

Rocky Linux 8

Наименование	Архитектура	Релиз	RPM
aardvark-dns	x86_64	2.module+el8.10.0+40133+32c21f88	aardvark-dns-1.10.1-2.module+el8.10.0+40133+32c21f88.x86_64.rpm
cockpit-podman	noarch	1.module+el8.10.0+40133+32c21f88	cockpit-podman-84.1-1.module+el8.10.0+40133+32c21f88.noarch.rpm
conmon	x86_64	1.module+el8.10.0+40133+32c21f88	conmon-2.1.10-1.module+el8.10.0+40133+32c21f88.x86_64.rpm
containernetworking-plugins	x86_64	8.module+el8.10.0+40133+32c21f88	containernetworking-plugins-1.4.0-8.module+el8.10.0+40133+32c21f88.x86_64.rpm
containers-common	x86_64	82.module+el8.10.0+40133+32c21f88	containers-common-1-82.module+el8.10.0+40133+32c21f88.x86_64.rpm
crit	x86_64	5.module+el8.10.0+40133+32c21f88	crit-3.18-5.module+el8.10.0+40133+32c21f88.x86_64.rpm
criu	x86_64	5.module+el8.10.0+40133+32c21f88	criu-3.18-5.module+el8.10.0+40133+32c21f88.x86_64.rpm
criu-devel	x86_64	5.module+el8.10.0+40133+32c21f88	criu-devel-3.18-5.module+el8.10.0+40133+32c21f88.x86_64.rpm
criu-libs	x86_64	5.module+el8.10.0+40133+32c21f88	criu-libs-3.18-5.module+el8.10.0+40133+32c21f88.x86_64.rpm
crun	x86_64	2.module+el8.10.0+40133+32c21f88	crun-1.14.3-2.module+el8.10.0+40133+32c21f88.x86_64.rpm