{
  "cves": [
    "CVE-2026-111943",
    "CVE-2026-78667"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "aardvark-dns\n[2:1.10.1-2]\n- build off the RHEL maintenance branch\n- Resolves: RHEL-59129\n\nbuildah\n[2:1.33.15-2]\n- Rebuild for CVE-2026-78667 and CVE-2026-111943\n- Resolves: RHEL-278949 RHEL-287628 RHEL-272014\n\n[2:1.33.15-1]\n- fix Version to match the upstream release-1.33 branch content - Resolves:\nRHEL-272014\n\ncockpit-podman\n[84.1-1]\n- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1\n- Related: Jira:RHEL-25557\n\nconmon\n[3:2.1.10-2]\n- Rebuild for CVE-2026-78667 and CVE-2026-111943\n- Resolves: RHEL-278824 RHEL-287445\n\ncontainernetworking-plugins\n[1:1.4.0-11]\n- Rebuild for CVE-2026-78667\n- Resolves: RHEL-278904\n\ncontainers-common\n[1-82.0.1]\n- Updated removed references [Orabug: 33473101] (Alex Burmashev)\n- Adjust registries.conf (Nikita Gerasimov)\n- remove references to RedHat registry (Nikita Gerasimov)\n\ncontainer-selinux\n[2:2.229.0-3]\n- add user_t confined user container support (cherry-pick of upstream PR #443)\n- Resolves: RHEL-135342\n\ncriu\n[3.18-5]\n- rebuild to preserve upgrade path\n- Related: RHEL-32671\n\ncrun\n[1.14.3-4]\n- rebuild with updated Go to fix CVE-2026-42499\n- Resolves: RHEL-241893\n\n[1.14.3-3]\n- rebuild with Go 1.25.11 to fix CVE-2026-33818, CVE-2026-56853, CVE-2026-56858,\nCVE-2026-56859, CVE-2026-56860, CVE-2026-56862\n\nfuse-overlayfs\n[1.13-1]\n- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.13\n- Related: Jira:RHEL-2110\n\nlibslirp\n[4.4.0-2]\n- rebuild to preserve upgrade path 8.9 - 8.10\n- Related: RHEL-32671\n\nnetavark\n[2:1.10.3-1]\n- update to https://github.com/containers/netavark/releases/tag/v1.10.3\n- Related: Jira:RHEL-2110\n\noci-seccomp-bpf-hook\n[1.2.10-4]\n- Rebuild for CVE-2026-78667 and CVE-2026-111943\n- Resolves: RHEL-278897 RHEL-287578\n\npodman\n[4.9.4-38.0.1]\n- Fixes issue of container created in cgroupv2 not start in cgroupv1 [Orabug: 36136813]\n- Fixes container memory limit not set after host is rebooted with cgroupv2 [Orabug: 36136802]\n- Fixes issue of podman execvp error while using podmansh [Orabug: 36756665]\n\n[4:4.9.4-38]\n- Rebuild for CVE-2026-78667 and CVE-2026-111943\n- Resolves: RHEL-278827 RHEL-287448\n\npython-podman\n[4.9.0-3]\n- sync with release-4.9 branch\n- Resolves: RHEL-31069\n\nrunc\n[4:1.2.9-9]\n- Fix GOPATH to use absolute path for Go 1.26.x FIPS module compatibility\n- Resolves: RHEL-287598\n\n[4:1.2.9-8]\n- Fix GOPATH ordering for Go 1.26.x compatibility\n- Resolves: RHEL-287598\n\n[4:1.2.9-7]\n- Rebuild for CVE-2026-111943\n- Resolves: RHEL-287598\n\nskopeo\n[2:1.14.6-5]\n- Rebuild for CVE-2026-78667 and CVE-2026-111943\n- Resolves: RHEL-278899 RHEL-287580\n\nslirp4netns\n[1.2.3-1]\n- update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3\n- Related: Jira:RHEL-2110\n\nudica\n[0.2.6-21]\n- bump release to preserve update path\n- Resolves: RHEL-32671",
  "id": "ELSA-2026-89760",
  "ovalId": "oval:com.oracle.elsa:def:202689760",
  "source": "oracle_linux",
  "title": "ELSA-2026-89760:  container-tools:ol8 security, bug fix, and enhancement update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-89760.html"
}