container-tools:ol8 security, bug fix, and enhancement update

aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah 2:1.33.14-3 - rebuild for CVE-2025-68121 - Resolves: RHEL-149262 cockpit-podman 84.1-1 - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1 - Related: Jira:RHEL-25557 conmon...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: gatekeeper, rancher-agent, neuvector-scanner, docker-cli-buildx, helm, steampipe, rancher, wolfictl, buildkitd, docker, dagger, scorecard, opa, skaffold, eksctl, tigera-operator, gogatekeeper, rancher-helm, chartmuseum, kubescape-operator, zot,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: k8ssandra-client-fips, containerd, tw, kube-arangodb, trivy, docker-cli-buildx-fips, livekit-cli, kubescape, kube-mgmt-fips, kubescape-server, wolfictl, trivy-fips, cloudbeat-fips, rancher-agent, amazon-ecs-agent, chainctl, steampipe, buildkitd-fips, chainctl-fips,...

SUSE CVE-2026-31465

In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SBINODATAINTEGRITY superblock flag for filesystems that cannot guarantee data persistence on sync eg fuse. For superblocks with this flag set, sy...

EUVD-2026-24809

In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SBINODATAINTEGRITY superblock flag for filesystems that cannot guarantee data persistence on sync eg fuse. For superblocks with this flag set, sy...

CVE-2026-31465

CVE-2026-31465 in the Linux kernel concerns the writeback path for filesystems without data integrity guarantees (e.g., fuse). The fix adds a SB_I_NO_DATA_INTEGRITY superblock flag; when set, sync kicks off writeback of dirty inodes but does not wait for flusher threads to finish. The change move...

PT-2026-34370

In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SB I NO DATA INTEGRITY superblock flag for filesystems that cannot guarantee data persistence on sync eg fuse. For superblocks with this flag set...

GHSA-W4GW-W5JQ-G9JH vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, gitness, k3s, wuzz, runc, aws-load-balancer-controller, fuse-overlayfs-snapshotter, cilium-envoy...

GHSA-W4GW-W5JQ-G9JH vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, cilium-envoy, aws-load-balancer-controller, runc, gitness, localstack, etcd-fips, etcd, rke2-runtime, k8s-device-plugin, nvidia-gpu-operator-validator, gitlab-rails-ce, k3s, cilium-envoy-fips, wuzz, fuse-overlayfs-snapshotter, gendesk, terraform,...

CVE-2025-47911 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, cilium-envoy, aws-load-balancer-controller, runc, gitness, localstack, etcd-fips, etcd, rke2-runtime, k8s-device-plugin, nvidia-gpu-operator-validator, gitlab-rails-ce, k3s, cilium-envoy-fips, wuzz, fuse-overlayfs-snapshotter, gendesk, terraform,...

CVE-2025-58190 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, cilium-envoy, aws-load-balancer-controller, runc, gitness, localstack, etcd-fips, etcd, rke2-runtime, k8s-device-plugin, nvidia-gpu-operator-validator, gitlab-rails-ce, k3s, cilium-envoy-fips, wuzz, fuse-overlayfs-snapshotter, gendesk, terraform,...

CVE-2025-47911 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, gitness, k3s, wuzz, runc, aws-load-balancer-controller, fuse-overlayfs-snapshotter, cilium-envoy...

CVE-2025-58190 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, gitness, k3s, wuzz, runc, aws-load-balancer-controller, fuse-overlayfs-snapshotter, cilium-envoy...

MiracleLinux 8 : container-tools: rhel8 (AXSA:2020-295:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-295:01 advisory. QEMU: Slirp: potential OOB access due to unsafe snprintf usages CVE-2020-8608 Bug Fixes: useradd and groupadd fail under rootless Buildah and podman Podman...

container-tools:rhel8 security update

aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah 2:1.33.14-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 https://github.com/containers/buildah/commit/a7f8179 - fixes 'CVE-2025-47913...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: eks-distro-fips, nrdot-collector-k8s-fips, container-object-storage-interface-fips, nri-discovery-kubernetes-fips, k8ssandra-client-fips, amazon-cloudwatch-agent-fips, nfpm, gotestsum, apache-exporter, consul-fips, tekton-chains, yunikorn-k8shim-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: gatekeeper, rancher-system-upgrade-controller, incert, telegraf, grafana-agent-operator, scorecard, kubelet-csr-approver, harbor-registry, terraform-mcp-server, seaweedfs, newrelic-infra-operator, multus-cni, gotestsum, kube-rbac-proxy, opensearch-k8s-operator,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: gatekeeper, neuvector-scanner, docker-cli-buildx, helm, flux-helm-controller, cert-manager-cmctl, rancher-fleet, rancher, wolfictl, buildkitd, docker, dagger, opa, skaffold, eksctl, chartmuseum, zot, newrelic-infrastructure-agent, trivy, k8ssandra-client,...

fuse-overlayfs bug fix and enhancement update

An update is available for fuse-overlayfs. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Lin...

container-tools:ol8 security update

aardvark-dns buildah 2:1.33.11-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 https://github.com/containers/buildah/commit/fe85f0d - Resolves: RHEL-61853 2:1.33.10-1 - update to the latest content of...