71 matches found
Rocky Linux 8.6 [CIQ] Security Update: netavark Multiple Vulnerabilities (ciqsa-2026_0914)
The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260914 advisory. This advisory aggregates security fixes for the netavark SRPM in CIQ LTS 8.6. It addresses 20 CVEs: CVE-2022-2989, CVE-2022-2990, CVE-2022-41723,...
Rocky Linux 8.6 [CIQ] Security Update: netavark Multiple Vulnerabilities (ciqsa-2026_0116)
The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260116 advisory. This advisory aggregates security fixes for the netavark SRPM in CIQ LTS 8.6. It addresses 33 CVEs: CVE-2018-25091, CVE-2024-34155, CVE-2021-33198,...
Rocky Linux 8.6 [CIQ] Security Update: netavark Multiple Vulnerabilities (ciqsa-2026_0862)
The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260862 advisory. This advisory aggregates security fixes for the netavark SRPM in CIQ LTS 8.6. It addresses 37 CVEs: CVE-2021-36221, CVE-2021-41190, CVE-2022-1705,...
Rocky Linux 8.8 [CIQ] Security Update: netavark Multiple Vulnerabilities (ciqsa-2026_0794)
The Rocky Linux 8.8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260794 advisory. This advisory aggregates security fixes for the netavark SRPM in CIQ LTS 8.8. It addresses 39 CVEs: CVE-2020-10756, CVE-2021-3592, CVE-2021-3593,...
podman security update
5.8.2-7.0.1 - Rework CNI/Netavark detection logic JIRA: EVG-3769 - Rebuild on new golang to support experimental GODEBUG fipsnoenforceems - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 6:5.8.2-7 - update to the latest upstream commit 66780e9b - rebuild with...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: netavark: netavark-2.1.0-1.hum1 aarch64, x8664 netavark-tests-2.1.0-1.hum1 aarch64, x8664 netavark-2.1.0-1.hum1.src src...
podman security update
5.8.2-5.0.1 - Rework CNI/Netavark detection logic JIRA: EVG-3769 - Rebuild on new golang to support experimental GODEBUG fipsnoenforceems - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 6:5.8.2-5 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646...
Oracle Linux 9 : podman (ELSA-2026-37123)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-37123 advisory. 5.8.2-4.0.1 - Rework CNI/Netavark detection logic JIRA: EVG-3769 - Rebuild on new golang to support experimental GODEBUG fipsnoenforceems - Drop...
podman security, bug fix, and enhancement update
5.8.2-4.0.1 - Rework CNI/Netavark detection logic JIRA: EVG-3769 - Rebuild on new golang to support experimental GODEBUG fipsnoenforceems - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 6:5.8.2-4 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-3982...
container-tools:ol8 security, bug fix, and enhancement update
aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah 2:1.33.14-3 - rebuild for CVE-2025-68121 - Resolves: RHEL-149262 cockpit-podman 84.1-1 - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1 - Related: Jira:RHEL-25557 conmon...
podman security update
5.8.2-3.0.1 - Rework CNI/Netavark detection logic JIRA: EVG-3769 - Rebuild on new golang to support experimental GODEBUG fipsnoenforceems - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 6:5.8.2-3 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 6:5.8.2-2 - Rebui...
podman security update
5.8.2-3.0.1 - Rework CNI/Netavark detection logic JIRA: EVG-3769 - Rebuild on new golang to support experimental GODEBUG fipsnoenforceems - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 6:5.8.2-3 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 6:5.8.2-2 - Rebui...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: netavark: netavark-2.0.0-1.hum1 aarch64, x8664 netavark-tests-2.0.0-1.hum1 aarch64, x8664 netavark-2.0.0-1.hum1.src src...
CVE-2025-8283 affecting package netavark for versions less than 1.10.3-9
CVE-2025-8283 affecting package netavark for versions less than 1.10.3-9. A patched version of the package is available...
GHSA-CQ8V-F236-94QC vulnerabilities
Vulnerabilities for packages: cargo-audit, sdp-k8s-injector, zed, sccache, parseable, pgcat, pixi, rye, qdrant, starship, lychee, shadowsocks-rust, fish, mountpoint-s3, rustup, atuin, cargo-c, py3-xet-core, zizmor, xh, yara-x, linkerd2-proxy, wizer, sqlx, netavark, biome, wasmtime, vector, zola,...
GHSA-CQ8V-F236-94QC vulnerabilities
Vulnerabilities for packages: fnm, wasmcloud, mdbook, mountpoint-s3, watchexec, worktrunk, wadm, valkey-ldap, xh, zizmor, sdp-k8s-injector, netavark, ruff, rustup, lychee, py3-xet-core, garage, sentry-cli, ntpd-rs, shadowsocks-rust, apollo-router, qdrant, biome, uv, zola, cargo-c, sqlx, deno,...
EUVD-2026-19972
netavark has incorrect error handling for malformed tcp packets...
netavark has incorrect error handling for malformed tcp packets
Impact A truncated TCP DNS query followed by a connection reset causes aardvark-dns to enter an unrecoverable infinite error loop at 100% CPU. Patches https://github.com/containers/aardvark-dns/commit/3b49ea7b38bdea134b7f03256f2e13f44ce73bb1 Workarounds None Credits Thanks to @dkane01 for reporti...
GHSA-HFPQ-X728-986J netavark has incorrect error handling for malformed tcp packets
Impact A truncated TCP DNS query followed by a connection reset causes aardvark-dns to enter an unrecoverable infinite error loop at 100% CPU. Patches https://github.com/containers/aardvark-dns/commit/3b49ea7b38bdea134b7f03256f2e13f44ce73bb1 Workarounds None Credits Thanks to @dkane01 for reporti...