elsa-2026-89760

oracle_linux
Description

aardvark-dns [2:1.10.1-2] - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah [2:1.33.15-2] - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-278949 RHEL-287628 RHEL-272014 [2:1.33.15-1] - fix Version to match the upstream release-1.33 branch content - Resolves: RHEL-272014 cockpit-podman [84.1-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1 - Related: Jira:RHEL-25557 conmon [3:2.1.10-2] - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-278824 RHEL-287445 containernetworking-plugins [1:1.4.0-11] - Rebuild for CVE-2026-78667 - Resolves: RHEL-278904 containers-common [1-82.0.1] - Updated removed references [Orabug: 33473101] (Alex Burmashev) - Adjust registries.conf (Nikita Gerasimov) - remove references to RedHat registry (Nikita Gerasimov) container-selinux [2:2.229.0-3] - add user_t confined user container support (cherry-pick of upstream PR #443) - Resolves: RHEL-135342 criu [3.18-5] - rebuild to preserve upgrade path - Related: RHEL-32671 crun [1.14.3-4] - rebuild with updated Go to fix CVE-2026-42499 - Resolves: RHEL-241893 [1.14.3-3] - rebuild with Go 1.25.11 to fix CVE-2026-33818, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862 fuse-overlayfs [1.13-1] - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.13 - Related: Jira:RHEL-2110 libslirp [4.4.0-2] - rebuild to preserve upgrade path 8.9 - 8.10 - Related: RHEL-32671 netavark [2:1.10.3-1] - update to https://github.com/containers/netavark/releases/tag/v1.10.3 - Related: Jira:RHEL-2110 oci-seccomp-bpf-hook [1.2.10-4] - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-278897 RHEL-287578 podman [4.9.4-38.0.1] - Fixes issue of container created in cgroupv2 not start in cgroupv1 [Orabug: 36136813] - Fixes container memory limit not set after host is rebooted with cgroupv2 [Orabug: 36136802] - Fixes issue of podman execvp error while using podmansh [Orabug: 36756665] [4:4.9.4-38] - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-278827 RHEL-287448 python-podman [4.9.0-3] - sync with release-4.9 branch - Resolves: RHEL-31069 runc [4:1.2.9-9] - Fix GOPATH to use absolute path for Go 1.26.x FIPS module compatibility - Resolves: RHEL-287598 [4:1.2.9-8] - Fix GOPATH ordering for Go 1.26.x compatibility - Resolves: RHEL-287598 [4:1.2.9-7] - Rebuild for CVE-2026-111943 - Resolves: RHEL-287598 skopeo [2:1.14.6-5] - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-278899 RHEL-287580 slirp4netns [1.2.3-1] - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3 - Related: Jira:RHEL-2110 udica [0.2.6-21] - bump release to preserve update path - Resolves: RHEL-32671

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2026-111943",
    "CVE-2026-78667"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "aardvark-dns\n[2:1.10.1-2]\n- build off the RHEL maintenance branch\n- Resolves: RHEL-59129\n\nbuildah\n[2:1.33.15-2]\n- Rebuild for CVE-2026-78667 and CVE-2026-111943\n- Resolves: RHEL-278949 RHEL-287628 RHEL-272014\n\n[2:1.33.15-1]\n- fix Version to match the upstream release-1.33 branch content - Resolves:\nRHEL-272014\n\ncockpit-podman\n[84.1-1]\n- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1\n- Related: Jira:RHEL-25557\n\nconmon\n[3:2.1.10-2]\n- Rebuild for CVE-2026-78667 and CVE-2026-111943\n- Resolves: RHEL-278824 RHEL-287445\n\ncontainernetworking-plugins\n[1:1.4.0-11]\n- Rebuild for CVE-2026-78667\n- Resolves: RHEL-278904\n\ncontainers-common\n[1-82.0.1]\n- Updated removed references [Orabug: 33473101] (Alex Burmashev)\n- Adjust registries.conf (Nikita Gerasimov)\n- remove references to RedHat registry (Nikita Gerasimov)\n\ncontainer-selinux\n[2:2.229.0-3]\n- add user_t confined user container support (cherry-pick of upstream PR #443)\n- Resolves: RHEL-135342\n\ncriu\n[3.18-5]\n- rebuild to preserve upgrade path\n- Related: RHEL-32671\n\ncrun\n[1.14.3-4]\n- rebuild with updated Go to fix CVE-2026-42499\n- Resolves: RHEL-241893\n\n[1.14.3-3]\n- rebuild with Go 1.25.11 to fix CVE-2026-33818, CVE-2026-56853, CVE-2026-56858,\nCVE-2026-56859, CVE-2026-56860, CVE-2026-56862\n\nfuse-overlayfs\n[1.13-1]\n- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.13\n- Related: Jira:RHEL-2110\n\nlibslirp\n[4.4.0-2]\n- rebuild to preserve upgrade path 8.9 - 8.10\n- Related: RHEL-32671\n\nnetavark\n[2:1.10.3-1]\n- update to https://github.com/containers/netavark/releases/tag/v1.10.3\n- Related: Jira:RHEL-2110\n\noci-seccomp-bpf-hook\n[1.2.10-4]\n- Rebuild for CVE-2026-78667 and CVE-2026-111943\n- Resolves: RHEL-278897 RHEL-287578\n\npodman\n[4.9.4-38.0.1]\n- Fixes issue of container created in cgroupv2 not start in cgroupv1 [Orabug: 36136813]\n- Fixes container memory limit not set after host is rebooted with cgroupv2 [Orabug: 36136802]\n- Fixes issue of podman execvp error while using podmansh [Orabug: 36756665]\n\n[4:4.9.4-38]\n- Rebuild for CVE-2026-78667 and CVE-2026-111943\n- Resolves: RHEL-278827 RHEL-287448\n\npython-podman\n[4.9.0-3]\n- sync with release-4.9 branch\n- Resolves: RHEL-31069\n\nrunc\n[4:1.2.9-9]\n- Fix GOPATH to use absolute path for Go 1.26.x FIPS module compatibility\n- Resolves: RHEL-287598\n\n[4:1.2.9-8]\n- Fix GOPATH ordering for Go 1.26.x compatibility\n- Resolves: RHEL-287598\n\n[4:1.2.9-7]\n- Rebuild for CVE-2026-111943\n- Resolves: RHEL-287598\n\nskopeo\n[2:1.14.6-5]\n- Rebuild for CVE-2026-78667 and CVE-2026-111943\n- Resolves: RHEL-278899 RHEL-287580\n\nslirp4netns\n[1.2.3-1]\n- update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3\n- Related: Jira:RHEL-2110\n\nudica\n[0.2.6-21]\n- bump release to preserve update path\n- Resolves: RHEL-32671",
  "id": "ELSA-2026-89760",
  "ovalId": "oval:com.oracle.elsa:def:202689760",
  "source": "oracle_linux",
  "title": "ELSA-2026-89760:  container-tools:ol8 security, bug fix, and enhancement update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-89760.html"
}
View JSON API Download JSON