ALSA-2026:89760: Important: container-tools:rhel8 security, bug fix, and enhancement update

Q: Which installed packages should administrators inventory when assessing exposure to this update?

The advisory lists containers-common, criu-devel, criu-libs, fuse-overlayfs, libslirp, libslirp-devel, netavark, and python3-criu for AlmaLinux. The container-tools module also notably includes podman, buildah, skopeo, and runc.

Q: Does this update include a non-security correction?

Yes. It corrects a buildah RPM version issue tracked as AlmaLinux-272014.

Published Oct 26, 2026

Updated

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

net/http: golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943)

Bug Fix(es) and Enhancement(s):

container-tools:rhel8: buildah RPM has the wrong version (JIRA:AlmaLinux-272014)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

65 affected componentsFixes available

almalinux/aardvark-dns<2:1.10.1-2.module_el8.10.0+4023+db236c53

2:1.10.1-2.module_el8.10.0+4023+db236c53

almalinux/aardvark-dns<2:1.10.1-2.module_el8.10.0+4047+545787c4

2:1.10.1-2.module_el8.10.0+4047+545787c4

almalinux/aardvark-dns<2:1.10.1-2.module_el8.10.0+3901+4b80ecd7

2:1.10.1-2.module_el8.10.0+3901+4b80ecd7

almalinux/buildah<2:1.33.15-2.module_el8.10.0+4327+ab8e4068

2:1.33.15-2.module_el8.10.0+4327+ab8e4068

almalinux/buildah-tests<2:1.33.15-2.module_el8.10.0+4327+ab8e4068

2:1.33.15-2.module_el8.10.0+4327+ab8e4068

almalinux/cockpit-podman<84.1-1.module_el8.10.0+4102+6c76e544

84.1-1.module_el8.10.0+4102+6c76e544

almalinux/conmon<3:2.1.10-2.module_el8.10.0+4327+ab8e4068

3:2.1.10-2.module_el8.10.0+4327+ab8e4068

almalinux/container-selinux<2:2.229.0-3.module_el8.10.0+4213+0493256b

2:2.229.0-3.module_el8.10.0+4213+0493256b

almalinux/containernetworking-plugins<1:1.4.0-11.module_el8.10.0+4327+ab8e4068

1:1.4.0-11.module_el8.10.0+4327+ab8e4068

almalinux/containers-common<2:1-82.module_el8.10.0+4016+efd18bf8

2:1-82.module_el8.10.0+4016+efd18bf8

almalinux/containers-common<2:1-82.module_el8.10.0+3876+e55593a8

2:1-82.module_el8.10.0+3876+e55593a8

almalinux/containers-common<2:1-82.module_el8.10.0+4120+03ad4b47

2:1-82.module_el8.10.0+4120+03ad4b47

almalinux/containers-common<2:1-82.module_el8.10.0+4089+ce72bbbe

2:1-82.module_el8.10.0+4089+ce72bbbe

almalinux/crit<3.18-5.module_el8.10.0+4047+545787c4

3.18-5.module_el8.10.0+4047+545787c4

almalinux/crit<3.18-5.module_el8.10.0+3845+87b84552

3.18-5.module_el8.10.0+3845+87b84552

almalinux/crit<3.18-5.module_el8.10.0+4120+03ad4b47

3.18-5.module_el8.10.0+4120+03ad4b47

almalinux/criu<3.18-5.module_el8.10.0+3876+e55593a8

3.18-5.module_el8.10.0+3876+e55593a8

almalinux/criu-devel<3.18-5.module_el8.10.0+4016+efd18bf8

3.18-5.module_el8.10.0+4016+efd18bf8

almalinux/criu-devel<3.18-5.module_el8.10.0+3845+87b84552

3.18-5.module_el8.10.0+3845+87b84552

almalinux/criu-devel<3.18-5.module_el8.10.0+4089+ce72bbbe

3.18-5.module_el8.10.0+4089+ce72bbbe

almalinux/criu-devel<3.18-5.module_el8.10.0+4068+0e21408f

3.18-5.module_el8.10.0+4068+0e21408f

almalinux/criu-libs<3.18-5.module_el8.10.0+3845+87b84552

3.18-5.module_el8.10.0+3845+87b84552

almalinux/criu-libs<3.18-5.module_el8.10.0+3970+8445edf6

3.18-5.module_el8.10.0+3970+8445edf6

almalinux/criu-libs<3.18-5.module_el8.10.0+3909+6e1c1eb7

3.18-5.module_el8.10.0+3909+6e1c1eb7

almalinux/criu-libs<3.18-5.module_el8.10.0+4082+f7f0c95e

3.18-5.module_el8.10.0+4082+f7f0c95e

almalinux/crun<1.14.3-4.module_el8.10.0+4269+94686149

1.14.3-4.module_el8.10.0+4269+94686149

almalinux/fuse-overlayfs<1.13-1.module_el8.10.0+4082+f7f0c95e

1.13-1.module_el8.10.0+4082+f7f0c95e

almalinux/fuse-overlayfs<1.13-1.module_el8.10.0+4068+0e21408f

1.13-1.module_el8.10.0+4068+0e21408f

almalinux/fuse-overlayfs<1.13-1.module_el8.10.0+3909+6e1c1eb7

1.13-1.module_el8.10.0+3909+6e1c1eb7

almalinux/fuse-overlayfs<1.13-1.module_el8.10.0+3792+03eaed9c

1.13-1.module_el8.10.0+3792+03eaed9c

almalinux/libslirp<4.4.0-2.module_el8.10.0+4016+efd18bf8

4.4.0-2.module_el8.10.0+4016+efd18bf8

almalinux/libslirp<4.4.0-2.module_el8.10.0+3845+87b84552

4.4.0-2.module_el8.10.0+3845+87b84552

almalinux/libslirp<4.4.0-2.module_el8.10.0+4090+91932338

4.4.0-2.module_el8.10.0+4090+91932338

almalinux/libslirp<4.4.0-2.module_el8.10.0+4120+03ad4b47

4.4.0-2.module_el8.10.0+4120+03ad4b47

almalinux/libslirp-devel<4.4.0-2.module_el8.10.0+4102+6c76e544

4.4.0-2.module_el8.10.0+4102+6c76e544

almalinux/libslirp-devel<4.4.0-2.module_el8.10.0+3845+87b84552

4.4.0-2.module_el8.10.0+3845+87b84552

almalinux/libslirp-devel<4.4.0-2.module_el8.10.0+4068+0e21408f

4.4.0-2.module_el8.10.0+4068+0e21408f

almalinux/libslirp-devel<4.4.0-2.module_el8.10.0+4082+f7f0c95e

4.4.0-2.module_el8.10.0+4082+f7f0c95e

almalinux/netavark<2:1.10.3-1.module_el8.10.0+3926+f12484f5

2:1.10.3-1.module_el8.10.0+3926+f12484f5

almalinux/netavark<2:1.10.3-1.module_el8.10.0+3845+87b84552

2:1.10.3-1.module_el8.10.0+3845+87b84552

almalinux/netavark<2:1.10.3-1.module_el8.10.0+4082+f7f0c95e

2:1.10.3-1.module_el8.10.0+4082+f7f0c95e

almalinux/netavark<2:1.10.3-1.module_el8.10.0+4047+545787c4

2:1.10.3-1.module_el8.10.0+4047+545787c4

almalinux/oci-seccomp-bpf-hook<1.2.10-4.module_el8.10.0+4327+ab8e4068

1.2.10-4.module_el8.10.0+4327+ab8e4068

almalinux/podman<4:4.9.4-38.module_el8.10.0+4327+ab8e4068