Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:89760

Опубликовано: 26 окт. 2026
Источник: rocky
Оценка: Important

Описание

Important: container-tools:rhel8 security, bug fix, and enhancement update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • net/http: golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667)

  • crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943)

Bug Fix(es) and Enhancement(s):

  • container-tools:rhel8: buildah RPM has the wrong version (JIRA:Rocky Linux-272014)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
aardvark-dnsaarch642.module+el8.10.0+1880+8e896d1baardvark-dns-1.10.1-2.module+el8.10.0+1880+8e896d1b.aarch64.rpm
aardvark-dnsaarch642.module+el8.10.0+1948+4b5cd4a9aardvark-dns-1.10.1-2.module+el8.10.0+1948+4b5cd4a9.aarch64.rpm
aardvark-dnsaarch642.module+el8.10.0+40133+32c21f88aardvark-dns-1.10.1-2.module+el8.10.0+40133+32c21f88.aarch64.rpm
aardvark-dnsaarch642.module+el8.10.0+1896+b18fa106aardvark-dns-1.10.1-2.module+el8.10.0+1896+b18fa106.aarch64.rpm
aardvark-dnsaarch642.module+el8.10.0+40047+0c0a73f4aardvark-dns-1.10.1-2.module+el8.10.0+40047+0c0a73f4.aarch64.rpm
aardvark-dnsaarch642.module+el8.10.0+1874+ce489889aardvark-dns-1.10.1-2.module+el8.10.0+1874+ce489889.aarch64.rpm
aardvark-dnsaarch642.module+el8.10.0+2001+6a33db9faardvark-dns-1.10.1-2.module+el8.10.0+2001+6a33db9f.aarch64.rpm
cockpit-podmannoarch1.module+el8.10.0+1872+2e18eb19cockpit-podman-84.1-1.module+el8.10.0+1872+2e18eb19.noarch.rpm
cockpit-podmannoarch1.module+el8.10.0+1843+6892ab28cockpit-podman-84.1-1.module+el8.10.0+1843+6892ab28.noarch.rpm
cockpit-podmannoarch1.module+el8.10.0+1948+4b5cd4a9cockpit-podman-84.1-1.module+el8.10.0+1948+4b5cd4a9.noarch.rpm

Показывать по

Связанные CVE

CVE-2026-111943
CVE-2026-78667

Ссылки на источники

Исправления

Связанные уязвимости

oracle-oval логотип

ELSA-2026-89760

oracle-oval
13 дней назад

ELSA-2026-89760: container-tools:ol8 security, bug fix, and enhancement update (IMPORTANT)

rocky логотип

RLSA-2026:90462

rocky
11 дней назад

Important: skopeo security update

rocky логотип

RLSA-2026:90362

rocky
11 дней назад

Important: podman security update

rocky логотип

RLSA-2026:89761

rocky
13 дней назад

Important: skopeo security update

rocky логотип

RLSA-2026:89752

rocky
13 дней назад

Important: oci-seccomp-bpf-hook security update