Oracle Errata System Oracle Linux 5.11 2026-10-28T15:40:53 Oracle Linux 8 aardvark-dns [2:1.10.1-2] - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah [2:1.33.15-2] - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-278949 RHEL-287628 RHEL-272014 [2:1.33.15-1] - fix Version to match the upstream release-1.33 branch content - Resolves: RHEL-272014 cockpit-podman [84.1-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1 - Related: Jira:RHEL-25557 conmon [3:2.1.10-2] - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-278824 RHEL-287445 containernetworking-plugins [1:1.4.0-11] - Rebuild for CVE-2026-78667 - Resolves: RHEL-278904 containers-common [1-82.0.1] - Updated removed references [Orabug: 33473101] (Alex Burmashev) - Adjust registries.conf (Nikita Gerasimov) - remove references to RedHat registry (Nikita Gerasimov) container-selinux [2:2.229.0-3] - add user_t confined user container support (cherry-pick of upstream PR #443) - Resolves: RHEL-135342 criu [3.18-5] - rebuild to preserve upgrade path - Related: RHEL-32671 crun [1.14.3-4] - rebuild with updated Go to fix CVE-2026-42499 - Resolves: RHEL-241893 [1.14.3-3] - rebuild with Go 1.25.11 to fix CVE-2026-33818, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862 fuse-overlayfs [1.13-1] - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.13 - Related: Jira:RHEL-2110 libslirp [4.4.0-2] - rebuild to preserve upgrade path 8.9 -> 8.10 - Related: RHEL-32671 netavark [2:1.10.3-1] - update to https://github.com/containers/netavark/releases/tag/v1.10.3 - Related: Jira:RHEL-2110 oci-seccomp-bpf-hook [1.2.10-4] - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-278897 RHEL-287578 podman [4.9.4-38.0.1] - Fixes issue of container created in cgroupv2 not start in cgroupv1 [Orabug: 36136813] - Fixes container memory limit not set after host is rebooted with cgroupv2 [Orabug: 36136802] - Fixes issue of podman execvp error while using podmansh [Orabug: 36756665] [4:4.9.4-38] - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-278827 RHEL-287448 python-podman [4.9.0-3] - sync with release-4.9 branch - Resolves: RHEL-31069 runc [4:1.2.9-9] - Fix GOPATH to use absolute path for Go 1.26.x FIPS module compatibility - Resolves: RHEL-287598 [4:1.2.9-8] - Fix GOPATH ordering for Go 1.26.x compatibility - Resolves: RHEL-287598 [4:1.2.9-7] - Rebuild for CVE-2026-111943 - Resolves: RHEL-287598 skopeo [2:1.14.6-5] - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-278899 RHEL-287580 slirp4netns [1.2.3-1] - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3 - Related: Jira:RHEL-2110 udica [0.2.6-21] - bump release to preserve update path - Resolves: RHEL-32671 IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-111943 CVE-2026-78667 cpe:/a:oracle:linux:8::appstream