skopeo security update

1:1.22.2-8 - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 - Resolves: RHEL-242042 - Resolves: RHEL-241280 - Resolves: RHEL-241460 - Resolves: RHEL-241825 - Resolves: RHEL-242268...

buildah security update

1.43.3-2.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.43.3-2 - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 - Resolves: RHEL-241114 RHEL-241310 RHEL-241620 RHEL-241779 RHEL-242275 2:1.43.3-1 - Update to buildah...

containernetworking-plugins security update

1:1.9.0-4 - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-56862 CVE-2026-56860 CVE-2026-33818 - Resolves: RHEL-241203 - Resolves: RHEL-241309 - Resolves: RHEL-241445 - Resolves: RHEL-241826 - Resolves: RHEL-242374...

podman security update

5.8.2-7.0.1 - Rework CNI/Netavark detection logic JIRA: EVG-3769 - Rebuild on new golang to support experimental GODEBUG fipsnoenforceems - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 6:5.8.2-7 - update to the latest upstream commit 66780e9b - rebuild with...

RHEL 10 : podman (RHSA-2026:70201)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70201 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use...

ALSA-2026:70201 Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: podman: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint...

Oracle Linux 8 : ELSA-2026-67161-0: / git-lfs (ELSA-2026-671610)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-671610 advisory. 3.4.1-13 - Rebuild with new Golang - Resolves: RHEL-241521, RHEL-242322, RHEL-241889 Tenable has extracted the preceding description block directly...

BELL-CVE-2026-56862

Bulletin has no description...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller-fips, crossplane-provider-aws-licensemanager, apm-server-fips, vault-k8s-fips, cfssl, crossplane-provider-aws-codeguruprofiler, helm, cert-manager-fips, grafana-alloy, opentelemetry-operator-fips, juicefs, opensearch-datasource,...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: hcloud, maru, crossplane-provider-aws-sns, redis-operator, frp, crossplane-provider-aws-rds, victoriametrics, slsa-verifier, task, nri-mssql, mongo-tools, local-static-provisioner, terraform-provider-acme, azure-service-operator, docker-credential-ecr-login, helm,...

CVE-2026-56862

creationtimestamp| type| source ---|---|--- 2026-08-14 12:01:14+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mt24dvdrwe2w 2026-08-22 12:01:22+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mtoa3gkdqm2e 2026-09-20 05:20:06+00:00| seen|...

CVE-2026-56862

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...