[El-errata] ELSA-2026-63163-0 Important: Oracle Linux 8 container-tools:ol8 security update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Mon Sep 7 12:50:52 UTC 2026


Oracle Linux Security Advisory ELSA-2026-63163-0

http://linux.oracle.com/errata/ELSA-2026-63163-0.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
aardvark-dns-1.10.1-2.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
buildah-1.33.14-6.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
buildah-tests-1.33.14-6.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
cockpit-podman-84.1-1.module+el8.10.0+91022+ea2ec71c.noarch.rpm
conmon-2.1.10-1.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
containernetworking-plugins-1.4.0-10.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
containers-common-1-82.0.1.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
container-selinux-2.229.0-3.module+el8.10.0+91022+ea2ec71c.noarch.rpm
crit-3.18-5.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
criu-3.18-5.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
criu-devel-3.18-5.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
criu-libs-3.18-5.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
crun-1.14.3-4.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
fuse-overlayfs-1.13-1.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
libslirp-4.4.0-2.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
libslirp-devel-4.4.0-2.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
netavark-1.10.3-1.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
oci-seccomp-bpf-hook-1.2.10-3.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
podman-4.9.4-37.0.1.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
podman-catatonit-4.9.4-37.0.1.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
podman-docker-4.9.4-37.0.1.module+el8.10.0+91022+ea2ec71c.noarch.rpm
podman-gvproxy-4.9.4-37.0.1.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
podman-plugins-4.9.4-37.0.1.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
podman-remote-4.9.4-37.0.1.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
podman-tests-4.9.4-37.0.1.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
python3-criu-3.18-5.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
python3-podman-4.9.0-3.module+el8.10.0+91022+ea2ec71c.noarch.rpm
runc-1.2.9-6.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
skopeo-1.14.6-4.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
skopeo-tests-1.14.6-4.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
slirp4netns-1.2.3-1.module+el8.10.0+91022+ea2ec71c.x86_64.rpm
udica-0.2.6-21.module+el8.10.0+91022+ea2ec71c.noarch.rpm

aarch64:
aardvark-dns-1.10.1-2.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
buildah-1.33.14-6.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
buildah-tests-1.33.14-6.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
cockpit-podman-84.1-1.module+el8.10.0+91022+ea2ec71c.noarch.rpm
conmon-2.1.10-1.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
containernetworking-plugins-1.4.0-10.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
containers-common-1-82.0.1.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
container-selinux-2.229.0-3.module+el8.10.0+91022+ea2ec71c.noarch.rpm
crit-3.18-5.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
criu-3.18-5.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
criu-devel-3.18-5.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
criu-libs-3.18-5.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
crun-1.14.3-4.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
fuse-overlayfs-1.13-1.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
libslirp-4.4.0-2.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
libslirp-devel-4.4.0-2.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
netavark-1.10.3-1.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
oci-seccomp-bpf-hook-1.2.10-3.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
podman-4.9.4-37.0.1.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
podman-catatonit-4.9.4-37.0.1.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
podman-docker-4.9.4-37.0.1.module+el8.10.0+91022+ea2ec71c.noarch.rpm
podman-gvproxy-4.9.4-37.0.1.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
podman-plugins-4.9.4-37.0.1.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
podman-remote-4.9.4-37.0.1.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
podman-tests-4.9.4-37.0.1.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
python3-criu-3.18-5.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
python3-podman-4.9.0-3.module+el8.10.0+91022+ea2ec71c.noarch.rpm
runc-1.2.9-6.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
skopeo-1.14.6-4.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
skopeo-tests-1.14.6-4.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
slirp4netns-1.2.3-1.module+el8.10.0+91022+ea2ec71c.aarch64.rpm
udica-0.2.6-21.module+el8.10.0+91022+ea2ec71c.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/aardvark-dns-1.10.1-2.module+el8.10.0+91022+ea2ec71c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/buildah-1.33.14-6.module+el8.10.0+91022+ea2ec71c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/cockpit-podman-84.1-1.module+el8.10.0+91022+ea2ec71c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/conmon-2.1.10-1.module+el8.10.0+91022+ea2ec71c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/containernetworking-plugins-1.4.0-10.module+el8.10.0+91022+ea2ec71c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/containers-common-1-82.0.1.module+el8.10.0+91022+ea2ec71c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/container-selinux-2.229.0-3.module+el8.10.0+91022+ea2ec71c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/criu-3.18-5.module+el8.10.0+91022+ea2ec71c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/crun-1.14.3-4.module+el8.10.0+91022+ea2ec71c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/fuse-overlayfs-1.13-1.module+el8.10.0+91022+ea2ec71c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/libslirp-4.4.0-2.module+el8.10.0+91022+ea2ec71c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/netavark-1.10.3-1.module+el8.10.0+91022+ea2ec71c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/oci-seccomp-bpf-hook-1.2.10-3.module+el8.10.0+91022+ea2ec71c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/podman-4.9.4-37.0.1.module+el8.10.0+91022+ea2ec71c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/python-podman-4.9.0-3.module+el8.10.0+91022+ea2ec71c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/runc-1.2.9-6.module+el8.10.0+91022+ea2ec71c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/skopeo-1.14.6-4.module+el8.10.0+91022+ea2ec71c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/slirp4netns-1.2.3-1.module+el8.10.0+91022+ea2ec71c.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/udica-0.2.6-21.module+el8.10.0+91022+ea2ec71c.src.rpm

Related CVEs:

CVE-2026-33818
CVE-2026-42499
CVE-2026-56853
CVE-2026-56858
CVE-2026-56859
CVE-2026-56860
CVE-2026-56862




Description of changes:

aardvark-dns
[2:1.10.1-2]
- build off the RHEL maintenance branch
- Resolves: RHEL-59129

[2:1.10.0-1]
- update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0
- Related: Jira:RHEL-2110

[2:1.9.0-1]
- update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0
- Related: Jira:RHEL-2110

[2:1.8.0-1]
- update to https://github.com/containers/aardvark-dns/releases/tag/v1.8.0
- Related: Jira:RHEL-2110

[2:1.7.0-1]
- update to https://github.com/containers/aardvark-dns/releases/tag/v1.7.0
- Related: #2176055

[2:1.6.0-1]
- update to https://github.com/containers/aardvark-dns/releases/tag/v1.6.0
- Related: #2176055

[2:1.5.0-2]
- always stay offline during build
- Related: #2123641

[2:1.5.0-1]
- update to https://github.com/containers/aardvark-dns/releases/tag/v1.5.0
- Related: #2123641

[2:1.4.0-1]
- update to https://github.com/containers/aardvark-dns/releases/tag/v1.4.0
- Related: #2123641

[2:1.3.0-1]
- update to https://github.com/containers/aardvark-dns/releases/tag/v1.3.0
- Related: #2123641

buildah
[2:1.33.14-6]
- rebuild with updated Go to fix CVE-2026-42499
- Resolves: RHEL-241668 RHEL-242027 RHEL-242107 RHEL-242222 RHEL-242343 RHEL-242382 RHEL-251834

cockpit-podman
[84.1-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1
- Related: Jira:RHEL-25557

[84-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84
- Related: Jira:RHEL-2110

[83-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/83
- Related: Jira:RHEL-2110

[82-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/82
- Related: Jira:RHEL-2110

[81-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/81
- Related: Jira:RHEL-2110

[80-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/80
- Related: Jira:RHEL-2110

[79-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/79
- Related: Jira:RHEL-2110

[78-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/78
- Related: Jira:RHEL-2110

[77-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/77
- Related: Jira:RHEL-2110

[75-1]
- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/75
- Related: #2176055

conmon
[3:2.1.10-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.10
- Related: Jira:RHEL-2110

[3:2.1.8-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.8
- Related: #2176055

[3:2.1.7-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.7
- Related: #2176055

[3:2.1.6-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.6
- Related: #2176055

[3:2.1.5-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.5
- Related: #2123641

[3:2.1.4-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.4
- Related: #2061390

[3:2.1.2-2]
- revert conmon to 2.1.2
- Related: #2061390

[2:2.1.3-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.3
- Related: #2061390

[2:2.1.2-2]
- update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
  (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
- Related: #2061390

[2:2.1.2-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.2
- Related: #2061390

containernetworking-plugins
[1:1.4.0-10]
- rebuild with updated Go to fix CVE-2026-42499
- Resolves: RHEL-241534 RHEL-241902 RHEL-242024 RHEL-242099 RHEL-242217 RHEL-242335

[1:1.4.0-9]
- rebuild with Go 1.25.11 to fix CVE-2026-33818, CVE-2026-56853, CVE-2026-56858,
  CVE-2026-56859, CVE-2026-56860, CVE-2026-56862

[1:1.4.0-8]
- rebuild for CVE-2025-68121
- Resolves: RHEL-149265

[1:1.4.0-7]
- rebuild for CVE-2025-61729
- Resolves: RHEL-140529

[1:1.4.0-6]
- rebuild for CVE-2025-22871
- Resolves: RHEL-89244

[1:1.4.0-5]
- rebuild for  golang fixes
- Related: RHEL-28452

[1:1.4.0-4]
- rebuild for  golang fixes
- Related: RHEL-28452

[1:1.4.0-3]
- rebuild for CVE-2024-1394
- Resolves: RHEL-24294

[1:1.4.0-2]
- rebuild
- Resolves: RHEL-18390

[1:1.4.0-1]
- update to https://github.com/containernetworking/plugins/releases/tag/v1.4.0
- Related: Jira:RHEL-2110

containers-common
[1-82.0.1]
- Updated removed references [Orabug: 33473101] (Alex Burmashev)
- Adjust registries.conf (Nikita Gerasimov)
- remove references to RedHat registry (Nikita Gerasimov)

container-selinux
[2:2.229.0-3]
- add user_t confined user container support (cherry-pick of upstream PR #443)
- Resolves: RHEL-135342

[2:2.229.0-2]
- remove watch statements properly for RHEL8 and lower
- Related: Jira:RHEL-2110

[2:2.229.0-1]
- update to https://github.com/containers/container-selinux/releases/tag/v2.229.0
- Related: Jira:RHEL-2110

[2:2.228.1-1]
- update to https://github.com/containers/container-selinux/releases/tag/v2.228.1
- Related: Jira:RHEL-2110

[2:2.228.0-1]
- update to https://github.com/containers/container-selinux/releases/tag/v2.228.0
- Related: Jira:RHEL-2110

[2:2.227.0-1]
- update to https://github.com/containers/container-selinux/releases/tag/v2.227.0
- Related: Jira:RHEL-2110

[2:2.226.0-1]
- update to https://github.com/containers/container-selinux/releases/tag/v2.226.0
- remove dependency on policycoreutils-python-utils as it pulls in python
- Related: Jira:RHEL-2110

[2:2.224.0-1]
- update to https://github.com/containers/container-selinux/releases/tag/v2.224.0
- Related: Jira:RHEL-2110

[2:2.222.0-1]
- update to https://github.com/containers/container-selinux/releases/tag/v2.222.0
- Related: Jira:RHEL-2110

[2:2.221.1-1]
- update to https://github.com/containers/container-selinux/releases/tag/v2.221.1
- Related: Jira:RHEL-2110

criu
[3.18-5]
- rebuild to preserve upgrade path
- Related: RHEL-32671

[3.18-4]
- switch to egg-info on 8.9
- Related: #2176055

[3.18-3]
- remove --progress-bar option
- Related: #2176055

[3.18-2]
- update to 3.18
- Related: #2176055

[3.17-1]
- update to 3.17
- Resolves: #2175794

[3.15-2]
- add gating tests
- Related: #1971718

[3.15-1]
- add -devel and -libs subpackages
- Resolves: #1971718

[3.12-9]
- Added additional fixup patches for the socket labelling

[3.12-8]
- Patch for socket labelling has changed upstream

[3.12-4]
- Applied patch to correctly restore socket()s

crun
[1.14.3-4]
- rebuild with updated Go to fix CVE-2026-42499
- Resolves: RHEL-241893

[1.14.3-3]
- rebuild with Go 1.25.11 to fix CVE-2026-33818, CVE-2026-56853, CVE-2026-56858,
  CVE-2026-56859, CVE-2026-56860, CVE-2026-56862

[1.14.3-2]
- remove BR libgcrypt-devel, no longer needed
- Related: Jira:RHEL-2110

[1.14.3-1]
- update to https://github.com/containers/crun/releases/tag/1.14.3
- Related: Jira:RHEL-2110

[1.14.1-1]
- update to https://github.com/containers/crun/releases/tag/1.14.1
- Related: Jira:RHEL-2110

[1.14-1]
- update to https://github.com/containers/crun/releases/tag/1.14
- Related: Jira:RHEL-2110

[1.13-1]
- update to https://github.com/containers/crun/releases/tag/1.13
- Related: Jira:RHEL-2110

[1.12-1]
- update to https://github.com/containers/crun/releases/tag/1.12
- Related: Jira:RHEL-2110

[1.11.2-1]
- update to https://github.com/containers/crun/releases/tag/1.11.2
- Related: Jira:RHEL-2110

[1.11.1-1]
- update to https://github.com/containers/crun/releases/tag/1.11.1
- Related: Jira:RHEL-2110

fuse-overlayfs
[1.13-1]
- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.13
- Related: Jira:RHEL-2110

[1.12-1]
- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.12
- Related: #2176055

[1.11-1]
- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.11
- Related: #2176055

[1.10-2]
- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.10
- Related: #2176055

[1.10-1]
- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.10
- Related: #2123641

[1.9-1]
- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.9
- Related: #2061390

[1.8.2-2]
- BuildRequires: /usr/bin/go-md2man
- Related: #2061390

[1.8.2-1]
- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.8.2
- Related: #2001445

[1.8.1-1]
- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.8.1
- Related: #2001445

[1.8-1]
- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.8
- Related: #2001445

libslirp
[4.4.0-2]
- rebuild to preserve upgrade path 8.9 -> 8.10
- Related: RHEL-32671

[4.4.0-1]
- Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
- Related: #1934415

[4.3.1-1]
- update to https://gitlab.freedesktop.org/slirp/libslirp/-/releases/v4.3.1
- Related: #1821193

[4.3.0-5]
- replace patch for CVE-2020-10756 with dedicated upstream one
- Related: #1821193

[4.3.0-4]
- fix "CVE-2020-10756 QEMU: slirp: networking out-of-bounds read information disclosure vulnerability"
- Related: #1821193

[4.3.0-3]
- fix static analysis issues merged upstream
  (https://gitlab.freedesktop.org/slirp/libslirp/-/merge_requests/41)
- Related: #1821193

[4.3.0-2]
- initial libslirp build for container-tools 8.3.0 module
- Resolves: #1821193

[4.3.0-1]
- New v4.3.0 release

[4.2.0-2]
- CVE-2020-1983 fix

[4.2.0-1]
- New v4.2.0 release

netavark
[2:1.10.3-1]
- update to https://github.com/containers/netavark/releases/tag/v1.10.3
- Related: Jira:RHEL-2110

[2:1.10.2-1]
- update to https://github.com/containers/netavark/releases/tag/v1.10.2
- Related: Jira:RHEL-2110

[2:1.10.1-1]
- update to https://github.com/containers/netavark/releases/tag/v1.10.1
- Related: Jira:RHEL-2110

[2:1.10.0-1]
- update to https://github.com/containers/netavark/releases/tag/v1.10.0
- Related: Jira:RHEL-2110

[2:1.9.0-1]
- update to https://github.com/containers/netavark/releases/tag/v1.9.0
- Related: Jira:RHEL-2110

[2:1.8.0-2]
- fix directory for systemd units
- Related: Jira:RHEL-2110

[2:1.8.0-1]
- update to https://github.com/containers/netavark/releases/tag/v1.8.0
- Related: Jira:RHEL-2110

[2:1.7.0-1]
- update to https://github.com/containers/netavark/releases/tag/v1.7.0
- Related: #2176055

[2:1.6.0-1]
- update to https://github.com/containers/netavark/releases/tag/v1.6.0
- Related: #2176055

[2:1.5.0-5]
- fix --dns-add command is not functioning
- Resolves: #2182897

oci-seccomp-bpf-hook
[1.2.10-3]
- rebuild with updated Go to fix CVE-2026-42499
- Resolves: RHEL-241530 RHEL-241898 RHEL-242095 RHEL-242331

[1.2.10-2]
- rebuild with Go 1.25.11 to fix CVE-2026-33818, CVE-2026-56853, CVE-2026-56858,
  CVE-2026-56859, CVE-2026-56860, CVE-2026-56862

[1.2.10-1]
- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
- Related: Jira:RHEL-2110

[1.2.9-1]
- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
- Related: #2176055

[1.2.8-2]
- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
- Related: #2176055

[1.2.8-1]
- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
- Related: #2123641

[1.2.7-1]
- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.7
- Related: #2123641

[1.2.6-1]
- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
- Related: #2061390

[1.2.5-2]
- BuildRequires: /usr/bin/go-md2man
- Related: #2061390

[1.2.5-1]
- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
- Related: #2061390

podman
[4.9.4-37.0.1]
- Fixes issue of container created in cgroupv2 not start in cgroupv1 [Orabug: 36136813]
- Fixes container memory limit not set after host is rebooted with cgroupv2 [Orabug: 36136802]
- Fixes issue of podman execvp error while using podmansh [Orabug: 36756665]

python-podman
[4.9.0-3]
- sync with release-4.9 branch
- Resolves: RHEL-31069

[4.9.0-2]
- depend directly on urllib3
- Resolves: RHEL-43567

[4.9.0-1]
- update to https://github.com/containers/podman-py/releases/tag/v4.9.0
- Related: Jira:RHEL-2110

[4.8.2-1]
- update to https://github.com/containers/podman-py/releases/tag/v4.8.2
- Related: Jira:RHEL-2110

[4.8.0.post1-1]
- update to https://github.com/containers/podman-py/releases/tag/v4.8.0.post1
- Related: Jira:RHEL-2110

[4.7.0-1]
- update to https://github.com/containers/podman-py/releases/tag/v4.7.0
- Related: Jira:RHEL-2110

[4.6.0-1]
- update to https://github.com/containers/podman-py/releases/tag/v4.6.0
- Related: #2176055

[4.5.1-1]
- update to https://github.com/containers/podman-py/releases/tag/v4.5.1
- Related: #2176055

[4.5.0-1]
- update to https://github.com/containers/podman-py/releases/tag/v4.5.0
- Related: #2176055

[4.4.1-1]
- update to https://github.com/containers/podman-py/releases/tag/v4.4.1
- Related: #2176055

runc
[4:1.2.9-6]
- rebuild with updated Go to fix CVE-2026-42499
- Resolves: RHEL-241537 RHEL-241905 RHEL-242338

[4:1.2.9-5]
- rebuild with Go 1.25.11 to fix CVE-2026-33818, CVE-2026-56853, CVE-2026-56858,
  CVE-2026-56859, CVE-2026-56860, CVE-2026-56862

[4:1.2.9-4]
- rebuild for CVE-2025-68121
- Resolves: RHEL-149266

[4:1.2.9-3]
- rebuild for CVE-2025-61729
- Resolves: RHEL-140533

[4:1.2.9-2]
- update to https://github.com/opencontainers/runc/releases/tag/v1.2.9
- Resolves: RHEL-132818

[4:1.2.5-2]
- fix permission regression
- Related: RHEL-122384

[4:1.2.5-1]
- fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881
- Resolves: RHEL-122384

[1:1.1.12-6]
- Add CPU affinity feature from Kir Kolishkin
- Resolves: RHEL-74865

[1:1.1.12-5]
- bump golang buildrequires
- add no_openssl build tag
- Resolves RHEL-55757

[1:1.1.12-4]
- rebuild for  golang fixes
- Related: RHEL-28452

skopeo
[2:1.14.6-4]
- rebuild with updated Go to fix CVE-2026-42499
- Resolves: RHEL-241531 RHEL-241899 RHEL-242023 RHEL-242096 RHEL-242216 RHEL-242332 RHEL-251848

[2:1.14.6-3]
- rebuild with Go 1.25.11 to fix CVE-2026-33818, CVE-2026-56853, CVE-2026-56858,
  CVE-2026-56859, CVE-2026-56860, CVE-2026-56862

[2:1.14.6-2]
- Rebuild for CVE-2026-32281
- Resolves: RHEL-177067

[2:1.14.6-1]
- update to 1.14.6 to fix CVE-2026-34986
- Resolves: RHEL-164976

[2:1.14.5-9]
- rebuild for CVE-2026-34986
- Resolves: RHEL-164976

[2:1.14.5-8]
- rebuild for CVE-2026-25679
- Resolves: RHEL-156633

[2:1.14.5-7]
- rebuild for CVE-2025-68121
- Resolves: RHEL-149267

[2:1.14.5-6]
- rebuild for CVE-2025-61729
- Resolves: RHEL-140534

[2:1.14.5-5]
- rebuild for CVE-2025-58183
- Resolves: RHEL-125659

[2:1.14.5-4]
- rebuild for CVE-2025-22871
- Resolves: RHEL-89254

slirp4netns
[1.2.3-1]
- update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3
- Related: Jira:RHEL-2110

[1.2.2-1]
- update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2
- Related: Jira:RHEL-2110

[1.2.1-1]
- update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.1
- Related: #2176055

[1.2.0-3]
- BuildRequires: /usr/bin/go-md2man
- Related: #2176055

[1.2.0-2]
- BuildRequires: /usr/bin/go-md2man
- Related: #2061390

[1.2.0-1]
- update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.0
- Related: #2061390

[1.1.8-2]
- fix gating - don't use insecure functions - thanks to Marc-André Lureau
- Related: #2001445

[1.1.8-1]
- update to
  https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
- Related: #1883490

[1.1.7-2]
- exclude i686 because of build failures
- Related: #1883490

[1.1.7-1]
- update to
  https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
- Related: #1883490

udica
[0.2.6-21]
- bump release to preserve update path
- Resolves: RHEL-32671




More information about the El-errata mailing list