elsa-2026-35833

{
  "cves": [
    "CVE-2026-34986",
    "CVE-2026-39829",
    "CVE-2026-39830",
    "CVE-2026-39832",
    "CVE-2026-42508"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "aardvark-dns\n[2:1.10.1-2]\n- build off the RHEL maintenance branch\n- Resolves: RHEL-59129\n\n[2:1.10.0-1]\n- update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0\n- Related: Jira:RHEL-2110\n\n[2:1.9.0-1]\n- update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0\n- Related: Jira:RHEL-2110\n\n[2:1.8.0-1]\n- update to https://github.com/containers/aardvark-dns/releases/tag/v1.8.0\n- Related: Jira:RHEL-2110\n\n[2:1.7.0-1]\n- update to https://github.com/containers/aardvark-dns/releases/tag/v1.7.0\n- Related: #2176055\n\n[2:1.6.0-1]\n- update to https://github.com/containers/aardvark-dns/releases/tag/v1.6.0\n- Related: #2176055\n\n[2:1.5.0-2]\n- always stay offline during build\n- Related: #2123641\n\n[2:1.5.0-1]\n- update to https://github.com/containers/aardvark-dns/releases/tag/v1.5.0\n- Related: #2123641\n\n[2:1.4.0-1]\n- update to https://github.com/containers/aardvark-dns/releases/tag/v1.4.0\n- Related: #2123641\n\n[2:1.3.0-1]\n- update to https://github.com/containers/aardvark-dns/releases/tag/v1.3.0\n- Related: #2123641\n\nbuildah\n[2:1.33.14-4]\n- switch source URL from GitHub to the internal GitLab sustaining-engineering repo\n- update to the latest content of release-1.33 (commit 2cbee78)\n- bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39829, CVE-2026-39830, CVE-2026-39832\n\n[2:1.33.14-3]\n- rebuild for CVE-2025-68121\n- Resolves: RHEL-149262\n\n[2:1.33.14-2]\n- rebuild for CVE-2025-61729\n- Resolves: RHEL-140529\n\n[2:1.33.14-1]\n- update to the latest content of https://github.com/containers/buildah/tree/release-1.33\n  (https://github.com/containers/buildah/commit/a7f8179)\n- fixes 'CVE-2025-47913 container-tools:rhel8/buildah: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS [rhel-8.10.z]'\n- Resolves: RHEL-130974\n\n[2:1.33.13-1]\n- update to the latest content of https://github.com/containers/buildah/tree/release-1.33\n  (https://github.com/containers/buildah/commit/65707d0)\n- fixes '[Minor Incident] CVE-2025-52881 container-tools:rhel8/buildah: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [rhel-8.10.z]'\n- Resolves: RHEL-126916\n\n[2:1.33.12-3]\n- rebuild for CVE-2025-58183\n- Resolves: RHEL-125644\n\n[2:1.33.12-2]\n- update to the latest content of https://github.com/containers/buildah/tree/release-1.33\n  (https://github.com/containers/buildah/commit/cf49e7c)\n- fixes 'CVE-2025-22871 container-tools:rhel8/buildah: Request smuggling due to acceptance of invalid chunked data in net/http [rhel-8.10.z]'\n- Resolves: RHEL-89239\n\n[2:1.33.12-1]\n- update to the latest content of https://github.com/containers/buildah/tree/release-1.33\n  (https://github.com/containers/buildah/commit/58af1cd)\n- Resolves: RHEL-67612\n\n[2:1.33.11-1]\n- update to the latest content of https://github.com/containers/buildah/tree/release-1.33\n  (https://github.com/containers/buildah/commit/fe85f0d)\n- Resolves: RHEL-61853\n\n[2:1.33.10-1]\n- update to the latest content of https://github.com/containers/buildah/tree/release-1.33\n  (https://github.com/containers/buildah/commit/bd85c17)\n- Resolves: RHEL-61835\n\ncockpit-podman\n[84.1-1]\n- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1\n- Related: Jira:RHEL-25557\n\n[84-1]\n- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84\n- Related: Jira:RHEL-2110\n\n[83-1]\n- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/83\n- Related: Jira:RHEL-2110\n\n[82-1]\n- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/82\n- Related: Jira:RHEL-2110\n\n[81-1]\n- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/81\n- Related: Jira:RHEL-2110\n\n[80-1]\n- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/80\n- Related: Jira:RHEL-2110\n\n[79-1]\n- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/79\n- Related: Jira:RHEL-2110\n\n[78-1]\n- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/78\n- Related: Jira:RHEL-2110\n\n[77-1]\n- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/77\n- Related: Jira:RHEL-2110\n\n[75-1]\n- update to https://github.com/cockpit-project/cockpit-podman/releases/tag/75\n- Related: #2176055\n\nconmon\n[3:2.1.10-1]\n- update to https://github.com/containers/conmon/releases/tag/v2.1.10\n- Related: Jira:RHEL-2110\n\n[3:2.1.8-1]\n- update to https://github.com/containers/conmon/releases/tag/v2.1.8\n- Related: #2176055\n\n[3:2.1.7-1]\n- update to https://github.com/containers/conmon/releases/tag/v2.1.7\n- Related: #2176055\n\n[3:2.1.6-1]\n- update to https://github.com/containers/conmon/releases/tag/v2.1.6\n- Related: #2176055\n\n[3:2.1.5-1]\n- update to https://github.com/containers/conmon/releases/tag/v2.1.5\n- Related: #2123641\n\n[3:2.1.4-1]\n- update to https://github.com/containers/conmon/releases/tag/v2.1.4\n- Related: #2061390\n\n[3:2.1.2-2]\n- revert conmon to 2.1.2\n- Related: #2061390\n\n[2:2.1.3-1]\n- update to https://github.com/containers/conmon/releases/tag/v2.1.3\n- Related: #2061390\n\n[2:2.1.2-2]\n- update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2\n  (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)\n- Related: #2061390\n\n[2:2.1.2-1]\n- update to https://github.com/containers/conmon/releases/tag/v2.1.2\n- Related: #2061390\n\ncontainernetworking-plugins\n[1:1.4.0-8]\n- rebuild for CVE-2025-68121\n- Resolves: RHEL-149265\n\n[1:1.4.0-7]\n- rebuild for CVE-2025-61729\n- Resolves: RHEL-140529\n\n[1:1.4.0-6]\n- rebuild for CVE-2025-22871\n- Resolves: RHEL-89244\n\n[1:1.4.0-5]\n- rebuild for  golang fixes\n- Related: RHEL-28452\n\n[1:1.4.0-4]\n- rebuild for  golang fixes\n- Related: RHEL-28452\n\n[1:1.4.0-3]\n- rebuild for CVE-2024-1394\n- Resolves: RHEL-24294\n\n[1:1.4.0-2]\n- rebuild\n- Resolves: RHEL-18390\n\n[1:1.4.0-1]\n- update to https://github.com/containernetworking/plugins/releases/tag/v1.4.0\n- Related: Jira:RHEL-2110\n\n[1:1.3.0-5]\n- fix path to dhcp service\n- Resolves: #RHEL-3789\n\n[1:1.3.0-4]\n- add Epoch in Provides\n- Related: #2176055\n\ncontainers-common\n[1-82.0.1]\n- Updated removed references [Orabug: 33473101] (Alex Burmashev)\n- Adjust registries.conf (Nikita Gerasimov)\n- remove references to RedHat registry (Nikita Gerasimov)\n\n[2:1-82]\n- update vendored components\n- Resolves: RHEL-40801\n\n[2:1-81]\n- Update shortnames from Pyxis\n- Related: Jira:RHEL-2110\n\n[2:1-80]\n- bump release to preserve upgrade path\n- Resolves: Jira:RHEL-12277\n\n[2:1-59]\n- update vendored components\n- Related: Jira:RHEL-2110\n\n[2:1-58]\n- update vendored components\n- Related: Jira:RHEL-2110\n\n[2:1-57]\n- fix shortnames for rhel-minimal\n- Related: Jira:RHEL-2110\n\n[2:1-56]\n- implement GPG auto updating mechanism from redhat-release\n- Resolves: #RHEL-2110\n\n[2:1-55]\n- update GPG keys to the current content of redhat-release\n- Resolves: #RHEL-3164\n\n[2:1-54]\n- update vendored components and shortnames\n- Related: #2176055\n\ncontainer-selinux\n[2:2.229.0-3]\n- add user_t confined user container support (cherry-pick of upstream PR #443)\n- Resolves: RHEL-135342\n\n[2:2.229.0-2]\n- remove watch statements properly for RHEL8 and lower\n- Related: Jira:RHEL-2110\n\n[2:2.229.0-1]\n- update to https://github.com/containers/container-selinux/releases/tag/v2.229.0\n- Related: Jira:RHEL-2110\n\n[2:2.228.1-1]\n- update to https://github.com/containers/container-selinux/releases/tag/v2.228.1\n- Related: Jira:RHEL-2110\n\n[2:2.228.0-1]\n- update to https://github.com/containers/container-selinux/releases/tag/v2.228.0\n- Related: Jira:RHEL-2110\n\n[2:2.227.0-1]\n- update to https://github.com/containers/container-selinux/releases/tag/v2.227.0\n- Related: Jira:RHEL-2110\n\n[2:2.226.0-1]\n- update to https://github.com/containers/container-selinux/releases/tag/v2.226.0\n- remove dependency on policycoreutils-python-utils as it pulls in python\n- Related: Jira:RHEL-2110\n\n[2:2.224.0-1]\n- update to https://github.com/containers/container-selinux/releases/tag/v2.224.0\n- Related: Jira:RHEL-2110\n\n[2:2.222.0-1]\n- update to https://github.com/containers/container-selinux/releases/tag/v2.222.0\n- Related: Jira:RHEL-2110\n\n[2:2.221.1-1]\n- update to https://github.com/containers/container-selinux/releases/tag/v2.221.1\n- Related: Jira:RHEL-2110\n\ncriu\n[3.18-5]\n- rebuild to preserve upgrade path\n- Related: RHEL-32671\n\n[3.18-4]\n- switch to egg-info on 8.9\n- Related: #2176055\n\n[3.18-3]\n- remove --progress-bar option\n- Related: #2176055\n\n[3.18-2]\n- update to 3.18\n- Related: #2176055\n\n[3.17-1]\n- update to 3.17\n- Resolves: #2175794\n\n[3.15-2]\n- add gating tests\n- Related: #1971718\n\n[3.15-1]\n- add -devel and -libs subpackages\n- Resolves: #1971718\n\n[3.12-9]\n- Added additional fixup patches for the socket labelling\n\n[3.12-8]\n- Patch for socket labelling has changed upstream\n\n[3.12-4]\n- Applied patch to correctly restore socket()s\n\ncrun\n[1.14.3-2]\n- remove BR libgcrypt-devel, no longer needed\n- Related: Jira:RHEL-2110\n\n[1.14.3-1]\n- update to https://github.com/containers/crun/releases/tag/1.14.3\n- Related: Jira:RHEL-2110\n\n[1.14.1-1]\n- update to https://github.com/containers/crun/releases/tag/1.14.1\n- Related: Jira:RHEL-2110\n\n[1.14-1]\n- update to https://github.com/containers/crun/releases/tag/1.14\n- Related: Jira:RHEL-2110\n\n[1.13-1]\n- update to https://github.com/containers/crun/releases/tag/1.13\n- Related: Jira:RHEL-2110\n\n[1.12-1]\n- update to https://github.com/containers/crun/releases/tag/1.12\n- Related: Jira:RHEL-2110\n\n[1.11.2-1]\n- update to https://github.com/containers/crun/releases/tag/1.11.2\n- Related: Jira:RHEL-2110\n\n[1.11.1-1]\n- update to https://github.com/containers/crun/releases/tag/1.11.1\n- Related: Jira:RHEL-2110\n\n[1.11-1]\n- update to https://github.com/containers/crun/releases/tag/1.11\n- Related: Jira:RHEL-2110\n\n[1.9.2-1]\n- update to https://github.com/containers/crun/releases/tag/1.9.2\n- Related: Jira:RHEL-2110\n\nfuse-overlayfs\n[1.13-1]\n- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.13\n- Related: Jira:RHEL-2110\n\n[1.12-1]\n- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.12\n- Related: #2176055\n\n[1.11-1]\n- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.11\n- Related: #2176055\n\n[1.10-2]\n- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.10\n- Related: #2176055\n\n[1.10-1]\n- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.10\n- Related: #2123641\n\n[1.9-1]\n- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.9\n- Related: #2061390\n\n[1.8.2-2]\n- BuildRequires: /usr/bin/go-md2man\n- Related: #2061390\n\n[1.8.2-1]\n- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.8.2\n- Related: #2001445\n\n[1.8.1-1]\n- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.8.1\n- Related: #2001445\n\n[1.8-1]\n- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.8\n- Related: #2001445\n\nlibslirp\n[4.4.0-2]\n- rebuild to preserve upgrade path 8.9 - 8.10\n- Related: RHEL-32671\n\n[4.4.0-1]\n- Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access\n- Related: #1934415\n\n[4.3.1-1]\n- update to https://gitlab.freedesktop.org/slirp/libslirp/-/releases/v4.3.1\n- Related: #1821193\n\n[4.3.0-5]\n- replace patch for CVE-2020-10756 with dedicated upstream one\n- Related: #1821193\n\n[4.3.0-4]\n- fix 'CVE-2020-10756 QEMU: slirp: networking out-of-bounds read information disclosure vulnerability'\n- Related: #1821193\n\n[4.3.0-3]\n- fix static analysis issues merged upstream\n  (https://gitlab.freedesktop.org/slirp/libslirp/-/merge_requests/41)\n- Related: #1821193\n\n[4.3.0-2]\n- initial libslirp build for container-tools 8.3.0 module\n- Resolves: #1821193\n\n[4.3.0-1]\n- New v4.3.0 release\n\n[4.2.0-2]\n- CVE-2020-1983 fix\n\n[4.2.0-1]\n- New v4.2.0 release\n\nnetavark\n[2:1.10.3-1]\n- update to https://github.com/containers/netavark/releases/tag/v1.10.3\n- Related: Jira:RHEL-2110\n\n[2:1.10.2-1]\n- update to https://github.com/containers/netavark/releases/tag/v1.10.2\n- Related: Jira:RHEL-2110\n\n[2:1.10.1-1]\n- update to https://github.com/containers/netavark/releases/tag/v1.10.1\n- Related: Jira:RHEL-2110\n\n[2:1.10.0-1]\n- update to https://github.com/containers/netavark/releases/tag/v1.10.0\n- Related: Jira:RHEL-2110\n\n[2:1.9.0-1]\n- update to https://github.com/containers/netavark/releases/tag/v1.9.0\n- Related: Jira:RHEL-2110\n\n[2:1.8.0-2]\n- fix directory for systemd units\n- Related: Jira:RHEL-2110\n\n[2:1.8.0-1]\n- update to https://github.com/containers/netavark/releases/tag/v1.8.0\n- Related: Jira:RHEL-2110\n\n[2:1.7.0-1]\n- update to https://github.com/containers/netavark/releases/tag/v1.7.0\n- Related: #2176055\n\n[2:1.6.0-1]\n- update to https://github.com/containers/netavark/releases/tag/v1.6.0\n- Related: #2176055\n\n[2:1.5.0-5]\n- fix --dns-add command is not functioning\n- Resolves: #2182897\n\noci-seccomp-bpf-hook\n[1.2.10-1]\n- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10\n- Related: Jira:RHEL-2110\n\n[1.2.9-1]\n- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9\n- Related: #2176055\n\n[1.2.8-2]\n- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8\n- Related: #2176055\n\n[1.2.8-1]\n- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8\n- Related: #2123641\n\n[1.2.7-1]\n- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.7\n- Related: #2123641\n\n[1.2.6-1]\n- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6\n- Related: #2061390\n\n[1.2.5-2]\n- BuildRequires: /usr/bin/go-md2man\n- Related: #2061390\n\n[1.2.5-1]\n- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5\n- Related: #2061390\n\n[1.2.3-3]\n- change runc dependency to conflict\n- Related: #1934415\n\n[1.2.3-2]\n- remove unneeded patch\n- Related: #1934415\n\npodman\n[4.9.4-32.0.1]\n- Fixes issue of container created in cgroupv2 not start in cgroupv1 [Orabug: 36136813]\n- Fixes container memory limit not set after host is rebooted with cgroupv2 [Orabug: 36136802]\n- Fixes issue of podman execvp error while using podmansh [Orabug: 36756665]\n\n[4:4.9.4-32]\n- switch source URL from GitHub to the internal GitLab sustaining-engineering repo\n- update to the latest content of v4.9-rhel (commit 48ede9e)\n- bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39829, CVE-2026-39830, CVE-2026-39832, CVE-2026-42508\n\n[4:4.9.4-31]\n- update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel\n  (https://github.com/containers/podman/commit/11de97d)\n- Resolves: RHEL-173978\n\n[4:4.9.4-30]\n- update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel\n  (https://github.com/containers/podman/commit/79517c7)\n- fixes 'When using a volume mount that is RO in podman it throws error because runc automatically appends RW to it which throws an error [rhel-8.10.z]'\n- Resolves: RHEL-152630\n\n[4:4.9.4-29]\n- rebuild for CVE-2025-68121\n- Resolves: RHEL-149265\n\n[4:4.9.4-28]\n- rebuild\n- Resolves: RHEL-140532\n\n[4:4.9.4-27]\n- update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel\n  (https://github.com/containers/podman/commit/702415d)\n- fixes 'CVE-2025-47913 container-tools:rhel8/podman: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS [rhel-8.10.z]'\n- Resolves: RHEL-130976\n\n[4:4.9.4-26]\n- update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel\n  (https://github.com/containers/podman/commit/837a65c)\n- fixes 'do not pass volume options as bind mounts options to runtime'\n- Resolves: RHEL-132859\n\n[4:4.9.4-25]\n- update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel\n  (https://github.com/containers/podman/commit/638f1d2)\n- fixes '[Minor Incident] CVE-2025-52881 container-tools:rhel8/podman: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [rhel-8.10.z]'\n- Resolves: RHEL-126904\n\n[4:4.9.4-24]\n- rebuild for CVE-2025-58183\n- Resolves: RHEL-125654\n\npython-podman\n[4.9.0-3]\n- sync with release-4.9 branch\n- Resolves: RHEL-31069\n\n[4.9.0-2]\n- depend directly on urllib3\n- Resolves: RHEL-43567\n\n[4.9.0-1]\n- update to https://github.com/containers/podman-py/releases/tag/v4.9.0\n- Related: Jira:RHEL-2110\n\n[4.8.2-1]\n- update to https://github.com/containers/podman-py/releases/tag/v4.8.2\n- Related: Jira:RHEL-2110\n\n[4.8.0.post1-1]\n- update to https://github.com/containers/podman-py/releases/tag/v4.8.0.post1\n- Related: Jira:RHEL-2110\n\n[4.7.0-1]\n- update to https://github.com/containers/podman-py/releases/tag/v4.7.0\n- Related: Jira:RHEL-2110\n\n[4.6.0-1]\n- update to https://github.com/containers/podman-py/releases/tag/v4.6.0\n- Related: #2176055\n\n[4.5.1-1]\n- update to https://github.com/containers/podman-py/releases/tag/v4.5.1\n- Related: #2176055\n\n[4.5.0-1]\n- update to https://github.com/containers/podman-py/releases/tag/v4.5.0\n- Related: #2176055\n\n[4.4.1-1]\n- update to https://github.com/containers/podman-py/releases/tag/v4.4.1\n- Related: #2176055\n\nrunc\n[4:1.2.9-4]\n- rebuild for CVE-2025-68121\n- Resolves: RHEL-149266\n\n[4:1.2.9-3]\n- rebuild for CVE-2025-61729\n- Resolves: RHEL-140533\n\n[4:1.2.9-2]\n- update to https://github.com/opencontainers/runc/releases/tag/v1.2.9\n- Resolves: RHEL-132818\n\n[4:1.2.5-2]\n- fix permission regression\n- Related: RHEL-122384\n\n[4:1.2.5-1]\n- fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881\n- Resolves: RHEL-122384\n\n[1:1.1.12-6]\n- Add CPU affinity feature from Kir Kolishkin\n- Resolves: RHEL-74865\n\n[1:1.1.12-5]\n- bump golang buildrequires\n- add no_openssl build tag\n- Resolves RHEL-55757\n\n[1:1.1.12-4]\n- rebuild for  golang fixes\n- Related: RHEL-28452\n\n[1:1.1.12-3]\n- rebuild for  golang fixes\n- Related: RHEL-28452\n\n[1:1.1.12-2]\n- rebuild for CVE-2024-1394\n- Resolves: RHEL-24297\n\nskopeo\n[2:1.14.6-2]\n- Rebuild for CVE-2026-32281\n- Resolves: RHEL-177067\n\n[2:1.14.6-1]\n- update to 1.14.6 to fix CVE-2026-34986\n- Resolves: RHEL-164976\n\n[2:1.14.5-9]\n- rebuild for CVE-2026-34986\n- Resolves: RHEL-164976\n\n[2:1.14.5-8]\n- rebuild for CVE-2026-25679\n- Resolves: RHEL-156633\n\n[2:1.14.5-7]\n- rebuild for CVE-2025-68121\n- Resolves: RHEL-149267\n\n[2:1.14.5-6]\n- rebuild for CVE-2025-61729\n- Resolves: RHEL-140534\n\n[2:1.14.5-5]\n- rebuild for CVE-2025-58183\n- Resolves: RHEL-125659\n\n[2:1.14.5-4]\n- rebuild for CVE-2025-22871\n- Resolves: RHEL-89254\n\n[2:1.14.5-3]\n- rebuild for  golang fixes\n- Related: RHEL-28452\n\n[2:1.14.5-2]\n- rebuild for  golang fixes\n- Related: RHEL-28452\n\nslirp4netns\n[1.2.3-1]\n- update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3\n- Related: Jira:RHEL-2110\n\n[1.2.2-1]\n- update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2\n- Related: Jira:RHEL-2110\n\n[1.2.1-1]\n- update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.1\n- Related: #2176055\n\n[1.2.0-3]\n- BuildRequires: /usr/bin/go-md2man\n- Related: #2176055\n\n[1.2.0-2]\n- BuildRequires: /usr/bin/go-md2man\n- Related: #2061390\n\n[1.2.0-1]\n- update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.0\n- Related: #2061390\n\n[1.1.8-2]\n- fix gating - don't use insecure functions - thanks to Marc-Andre Lureau\n- Related: #2001445\n\n[1.1.8-1]\n- update to\n  https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8\n- Related: #1883490\n\n[1.1.7-2]\n- exclude i686 because of build failures\n- Related: #1883490\n\n[1.1.7-1]\n- update to\n  https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7\n- Related: #1883490\n\nudica\n[0.2.6-21]\n- bump release to preserve update path\n- Resolves: RHEL-32671\n\n[0.2.6-20]\n- bump release to preserve update path\n- Related: #2139052\n\n[0.2.6-4]\n- Bump release to match latest release available in rhel-8.6.1\n- Resolves: #2139052\n\n[0.2.6-3]\n- Make sure each section of the inspect exists before accessing (#2027662)\n\n[0.2.6-2]\n- Require container-selinux shipping policy templates (#2005866)\n\n[0.2.6-1]\n- update to https://github.com/containers/udica/releases/tag/v0.2.6\n- Related: #2001445\n\n[0.2.5-2]\n- New rebase https://github.com/containers/udica/releases/tag/v0.2.5 (#1995041)\n- Replace capability dictionary with str.lower()\n- Enable udica to generate policies with fifo class\n- Sort container inspect data before processing\n- Update templates to work properly with new cil parser\n- Related: #1934415\n\n[0.2.5-1]\n- update to https://github.com/containers/udica/releases/tag/v0.2.5\n- Related: #1934415\n\n[0.2.4-2]\n- remove %check again and all related BRs\n- Related: #1934415\n\n[0.2.4-1]\n- update to https://github.com/containers/udica/releases/tag/v0.2.4\n- Related: #1883490",
  "id": "ELSA-2026-35833",
  "ovalId": "oval:com.oracle.elsa:def:202635833",
  "source": "oracle_linux",
  "title": "ELSA-2026-35833:  container-tools:ol8 security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-35833.html"
}