container-tools:ol8 security, bug fix, and enhancement update

aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah 2:1.33.15-2 - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-278949 RHEL-287628 RHEL-272014 2:1.33.15-1 - fix Version to match the upstream release-1.33 branch content - Resolves:...

CVE-2026-47766

A flaw was found in crun, an OCI Container Runtime. When processing an OCI bundle where the container root filesystem's /dev directory is a symbolic link and /dev is not explicitly mounted, crun incorrectly follows this symlink outside the container's intended boundaries. This allows a local...

PT-2026-117126

These are all security issues fixed in the crun-1.30.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12162-1 crun-1.30.1-1.1 on GA media

These are all security issues fixed in the crun-1.30.1-1.1 package on the GA media of openSUSE Tumbleweed...

AlmaLinux 9.6 [TuxCare] Security Update: crun (ALMALINUX9.6:CLSA-2026:1776335959)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776335959 advisory. - crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the crun exec option -u --user is incorrect...

Rocky Linux 9.6 [TuxCare] Security Update: crun (ALMALINUX9.6:CLSA-2026:1776335959)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776335959 advisory. - crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the crun exec option -u --user is...

Rocky Linux 10.2 [CIQ] Security Update: crun / crun-debuginfo / crun-debugsource (crlsa-2026_19020)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202619020 advisory. crun: crun: Privilege escalation due to incorrect parsing of the --user option CVE-2026-30892 Tenable has extracted the preceding description block directly fro...

Rocky Linux 8.8 [CIQ] Security Update: crun / crun-debuginfo / crun-debugsource Multiple Vulnerabilities (ciqsa-2026_0797)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260797 advisory. This advisory aggregates security fixes for the crun SRPM in CIQ LTS 8.8. It addresses 39 CVEs: CVE-2020-10756, CVE-2021-3592, CVE-2021-3593,...

Rocky Linux 8.6 [CIQ] Security Update: crun Multiple Vulnerabilities (ciqsa-2026_1307)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261307 advisory. This advisory aggregates security fixes for the crun SRPM in CIQ LTS 8.6. It addresses 5 CVEs: CVE-2025-52881, CVE-2025-6032, CVE-2025-9566,...

Rocky Linux 9 [CIQ] Security Update: crun / crun-debuginfo / crun-debugsource (crlsa-2026_19178)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202619178 advisory. crun: crun: Privilege escalation due to incorrect parsing of the --user option CVE-2026-30892 Tenable has extracted the preceding description block directly from t...

Rocky Linux 8 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc (crlsa-2022_1793)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20221793 advisory. crun: Default inheritable capabilities for linux container should be empty CVE-2022-27650 Tenable has extracted the preceding description block directly from the CI...

Rocky Linux 8.6 [CIQ] Security Update: crun / crun-debuginfo / crun-debugsource (ciqsa-2026_1088)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261088 advisory. This advisory aggregates security fixes for the crun SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding description bloc...

Rocky Linux 9 [CIQ] Security Update: crun / crun-debuginfo / crun-debugsource (crlsa-2026_6621)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20266621 advisory. crun: crun: Privilege escalation due to incorrect parsing of the --user option CVE-2026-30892 Tenable has extracted the preceding description block directly from th...

Rocky Linux 10.1 [CIQ] Security Update: crun / crun-debuginfo / crun-debugsource (crlsa-2026_6622)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20266622 advisory. crun: crun: Privilege escalation due to incorrect parsing of the --user option CVE-2026-30892 Tenable has extracted the preceding description block directly from...

Rocky Linux 8 [CIQ] Security Update: aardvark-dns / buildah / buildah-debuginfo / buildah-debugsource / etc Multiple Vulnerabilities (crlsa-2022_1762)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221762 advisory. psgo: Privilege escalation in 'podman top' CVE-2022-1227 prometheus/clientgolang: Denial of service using InstrumentHandlerCounter CVE-2022-21698 podman:...

Rocky Linux 8.6 [CIQ] Security Update: crun / crun-debuginfo / crun-debugsource Multiple Vulnerabilities (ciqsa-2026_0026)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260026 advisory. This advisory aggregates security fixes for the crun SRPM in CIQ LTS 8.6. It addresses 33 CVEs: CVE-2018-25091, CVE-2024-34155, CVE-2021-33198,...

Rocky Linux 8.6 [CIQ] Security Update: crun / crun-debuginfo / crun-debugsource Multiple Vulnerabilities (ciqsa-2026_0853)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260853 advisory. This advisory aggregates security fixes for the crun SRPM in CIQ LTS 8.6. It addresses 37 CVEs: CVE-2021-36221, CVE-2021-41190, CVE-2022-1705,...

CLEANSTART-2024-YM37206 flaw was found in crun where containers were incorrectly started with non-empty default permissions

Security vulnerability affects the crun package. A flaw was found in crun where containers were incorrectly started with non-empty default permissions...

crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown

A flaw was found in crun. After pivotroot, reopening /dev/null for stdio can follow a symlink and attach a host file to container stdio, then change that file's ownership. Affected versions are crun 1.29.1 and earlier. Default configurations that mount a fresh /dev are not exposed. No fixed relea...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: crun: crun-1.30-1.hum1 aarch64, x8664 crun-krun-1.30-1.hum1 aarch64, x8664 crun-wasm-1.30-1.hum1 aarch64, x8664 crun-1.30-1.hum1.src src...