container-tools:ol8 security, bug fix, and enhancement update

aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah 2:1.33.14-3 - rebuild for CVE-2025-68121 - Resolves: RHEL-149262 cockpit-podman 84.1-1 - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1 - Related: Jira:RHEL-25557 conmon...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, docker-compose, skaffold, ctop, consul-k8s, helm-set-status, headlamp, linkerd2, scorecard, kubescape, docker, cluster-api-helm-controller, buildkitd, k9s, opa-envoy, kubevela, wolfictl, tigera-operator, opa, manifest-tool, neuvector-scanner,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: docker-compose-fips, headlamp, fuse-overlayfs-snapshotter, linkerd2-fips, helm-push, zarf, rancher-helm, eks-node-monitoring-agent-fips, envoy-gateway-fips, spegel, docker, chartmuseum, neuvector-scanner, osv-scanner, headlamp-fips, helm-set-status, scorecard,...

SUSE CVE-2026-31465

In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SBINODATAINTEGRITY superblock flag for filesystems that cannot guarantee data persistence on sync eg fuse. For superblocks with this flag set, sy...

EUVD-2026-24809

In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SBINODATAINTEGRITY superblock flag for filesystems that cannot guarantee data persistence on sync eg fuse. For superblocks with this flag set, sy...

CVE-2026-31465

CVE-2026-31465 in the Linux kernel concerns the writeback path for filesystems without data integrity guarantees (e.g., fuse). The fix adds a SB_I_NO_DATA_INTEGRITY superblock flag; when set, sync kicks off writeback of dirty inodes but does not wait for flusher threads to finish. The change move...

PT-2026-34370

In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SB I NO DATA INTEGRITY superblock flag for filesystems that cannot guarantee data persistence on sync eg fuse. For superblocks with this flag set...

GHSA-W4GW-W5JQ-G9JH vulnerabilities

Vulnerabilities for packages: wuzz, runc, fuse-overlayfs-snapshotter, aws-load-balancer-controller, k3s, k8s-device-plugin, gitness...

GHSA-W4GW-W5JQ-G9JH vulnerabilities

Vulnerabilities for packages: terraform, cilium-envoy-fips, fuse-overlayfs-snapshotter, k8s-device-plugin, cilium-envoy, gendesk, wuzz, localstack, nvidia-gpu-operator-validator, k3s, etcd-fips, aws-load-balancer-controller, gitness, rke2-runtime-fips, backup-restore-operator, gitlab-rails-ce,...

CVE-2025-47911 vulnerabilities

Vulnerabilities for packages: terraform, cilium-envoy-fips, fuse-overlayfs-snapshotter, k8s-device-plugin, cilium-envoy, gendesk, wuzz, localstack, nvidia-gpu-operator-validator, k3s, etcd-fips, aws-load-balancer-controller, gitness, rke2-runtime-fips, backup-restore-operator, gitlab-rails-ce,...

CVE-2025-58190 vulnerabilities

Vulnerabilities for packages: terraform, cilium-envoy-fips, fuse-overlayfs-snapshotter, k8s-device-plugin, cilium-envoy, gendesk, wuzz, localstack, nvidia-gpu-operator-validator, k3s, etcd-fips, aws-load-balancer-controller, gitness, rke2-runtime-fips, backup-restore-operator, gitlab-rails-ce,...

CVE-2025-47911 vulnerabilities

Vulnerabilities for packages: wuzz, runc, fuse-overlayfs-snapshotter, aws-load-balancer-controller, k3s, k8s-device-plugin, gitness...

CVE-2025-58190 vulnerabilities

Vulnerabilities for packages: wuzz, runc, fuse-overlayfs-snapshotter, aws-load-balancer-controller, k3s, k8s-device-plugin, gitness...

MiracleLinux 8 : container-tools: rhel8 (AXSA:2020-295:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-295:01 advisory. QEMU: Slirp: potential OOB access due to unsafe snprintf usages CVE-2020-8608 Bug Fixes: useradd and groupadd fail under rootless Buildah and podman Podman...

container-tools:rhel8 security update

aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah 2:1.33.14-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 https://github.com/containers/buildah/commit/a7f8179 - fixes 'CVE-2025-47913...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: authservice-fips, aws-privateca-issuer-fips, elastic-agent, opentofu, aws-efs-csi-driver-fips, crossplane-provider-sql-fips, restic, sftpgo-plugin-geoipfilter, node-feature-discovery-fips, terraform-provider-tls-fips, cluster-autoscaler-fips, thanos-operator, telegra...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, http-echo, kube-fluentd-operator, go-discover, scorecard, kube-metrics-adapter, kube-rbac-proxy, gobump, grafana, nfs-subdir-external-provisioner, syft, k8sgpt, s5cmd, prometheus-alertmanager, cert-manager-webhook-pdns, steampipe...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, docker-compose, skaffold, ctop, linkerd2, flux-helm-controller, docker, kubescape, cluster-api-helm-controller, buildkitd, opa-envoy, kubevela, wolfictl, opa, nerdctl, neuvector-scanner, syft, flux-source-controller, k8sgpt, kots, envoy-gateway,...

fuse-overlayfs bug fix and enhancement update

An update is available for fuse-overlayfs. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Lin...

container-tools:ol8 security update

aardvark-dns buildah 2:1.33.11-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 https://github.com/containers/buildah/commit/fe85f0d - Resolves: RHEL-61853 2:1.33.10-1 - update to the latest content of...