Oracle Linux Security Advisory ELSA-2025-23543 http://linux.oracle.com/errata/ELSA-2025-23543.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: aardvark-dns-1.10.1-2.module+el8.10.0+90735+426876b9.x86_64.rpm buildah-1.33.13-1.module+el8.10.0+90735+426876b9.x86_64.rpm buildah-tests-1.33.13-1.module+el8.10.0+90735+426876b9.x86_64.rpm cockpit-podman-84.1-1.module+el8.10.0+90735+426876b9.noarch.rpm conmon-2.1.10-1.module+el8.10.0+90735+426876b9.x86_64.rpm containernetworking-plugins-1.4.0-6.module+el8.10.0+90735+426876b9.x86_64.rpm containers-common-1-82.0.1.module+el8.10.0+90735+426876b9.x86_64.rpm container-selinux-2.229.0-2.module+el8.10.0+90735+426876b9.noarch.rpm crit-3.18-5.module+el8.10.0+90735+426876b9.x86_64.rpm criu-3.18-5.module+el8.10.0+90735+426876b9.x86_64.rpm criu-devel-3.18-5.module+el8.10.0+90735+426876b9.x86_64.rpm criu-libs-3.18-5.module+el8.10.0+90735+426876b9.x86_64.rpm crun-1.14.3-2.module+el8.10.0+90735+426876b9.x86_64.rpm fuse-overlayfs-1.13-1.module+el8.10.0+90735+426876b9.x86_64.rpm libslirp-4.4.0-2.module+el8.10.0+90735+426876b9.x86_64.rpm libslirp-devel-4.4.0-2.module+el8.10.0+90735+426876b9.x86_64.rpm netavark-1.10.3-1.module+el8.10.0+90735+426876b9.x86_64.rpm oci-seccomp-bpf-hook-1.2.10-1.module+el8.10.0+90735+426876b9.x86_64.rpm podman-4.9.4-25.0.1.module+el8.10.0+90735+426876b9.x86_64.rpm podman-catatonit-4.9.4-25.0.1.module+el8.10.0+90735+426876b9.x86_64.rpm podman-docker-4.9.4-25.0.1.module+el8.10.0+90735+426876b9.noarch.rpm podman-gvproxy-4.9.4-25.0.1.module+el8.10.0+90735+426876b9.x86_64.rpm podman-plugins-4.9.4-25.0.1.module+el8.10.0+90735+426876b9.x86_64.rpm podman-remote-4.9.4-25.0.1.module+el8.10.0+90735+426876b9.x86_64.rpm podman-tests-4.9.4-25.0.1.module+el8.10.0+90735+426876b9.x86_64.rpm python3-criu-3.18-5.module+el8.10.0+90735+426876b9.x86_64.rpm python3-podman-4.9.0-3.module+el8.10.0+90735+426876b9.noarch.rpm runc-1.2.9-2.module+el8.10.0+90735+426876b9.x86_64.rpm skopeo-1.14.5-5.module+el8.10.0+90735+426876b9.x86_64.rpm skopeo-tests-1.14.5-5.module+el8.10.0+90735+426876b9.x86_64.rpm slirp4netns-1.2.3-1.module+el8.10.0+90735+426876b9.x86_64.rpm udica-0.2.6-21.module+el8.10.0+90735+426876b9.noarch.rpm aarch64: aardvark-dns-1.10.1-2.module+el8.10.0+90735+426876b9.aarch64.rpm buildah-1.33.13-1.module+el8.10.0+90735+426876b9.aarch64.rpm buildah-tests-1.33.13-1.module+el8.10.0+90735+426876b9.aarch64.rpm cockpit-podman-84.1-1.module+el8.10.0+90735+426876b9.noarch.rpm conmon-2.1.10-1.module+el8.10.0+90735+426876b9.aarch64.rpm containernetworking-plugins-1.4.0-6.module+el8.10.0+90735+426876b9.aarch64.rpm containers-common-1-82.0.1.module+el8.10.0+90735+426876b9.aarch64.rpm container-selinux-2.229.0-2.module+el8.10.0+90735+426876b9.noarch.rpm crit-3.18-5.module+el8.10.0+90735+426876b9.aarch64.rpm criu-3.18-5.module+el8.10.0+90735+426876b9.aarch64.rpm criu-devel-3.18-5.module+el8.10.0+90735+426876b9.aarch64.rpm criu-libs-3.18-5.module+el8.10.0+90735+426876b9.aarch64.rpm crun-1.14.3-2.module+el8.10.0+90735+426876b9.aarch64.rpm fuse-overlayfs-1.13-1.module+el8.10.0+90735+426876b9.aarch64.rpm libslirp-4.4.0-2.module+el8.10.0+90735+426876b9.aarch64.rpm libslirp-devel-4.4.0-2.module+el8.10.0+90735+426876b9.aarch64.rpm netavark-1.10.3-1.module+el8.10.0+90735+426876b9.aarch64.rpm oci-seccomp-bpf-hook-1.2.10-1.module+el8.10.0+90735+426876b9.aarch64.rpm podman-4.9.4-25.0.1.module+el8.10.0+90735+426876b9.aarch64.rpm podman-catatonit-4.9.4-25.0.1.module+el8.10.0+90735+426876b9.aarch64.rpm podman-docker-4.9.4-25.0.1.module+el8.10.0+90735+426876b9.noarch.rpm podman-gvproxy-4.9.4-25.0.1.module+el8.10.0+90735+426876b9.aarch64.rpm podman-plugins-4.9.4-25.0.1.module+el8.10.0+90735+426876b9.aarch64.rpm podman-remote-4.9.4-25.0.1.module+el8.10.0+90735+426876b9.aarch64.rpm podman-tests-4.9.4-25.0.1.module+el8.10.0+90735+426876b9.aarch64.rpm python3-criu-3.18-5.module+el8.10.0+90735+426876b9.aarch64.rpm python3-podman-4.9.0-3.module+el8.10.0+90735+426876b9.noarch.rpm runc-1.2.9-2.module+el8.10.0+90735+426876b9.aarch64.rpm skopeo-1.14.5-5.module+el8.10.0+90735+426876b9.aarch64.rpm skopeo-tests-1.14.5-5.module+el8.10.0+90735+426876b9.aarch64.rpm slirp4netns-1.2.3-1.module+el8.10.0+90735+426876b9.aarch64.rpm udica-0.2.6-21.module+el8.10.0+90735+426876b9.noarch.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates/aardvark-dns-1.10.1-2.module+el8.10.0+90735+426876b9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/buildah-1.33.13-1.module+el8.10.0+90735+426876b9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/cockpit-podman-84.1-1.module+el8.10.0+90735+426876b9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/conmon-2.1.10-1.module+el8.10.0+90735+426876b9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/containernetworking-plugins-1.4.0-6.module+el8.10.0+90735+426876b9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/containers-common-1-82.0.1.module+el8.10.0+90735+426876b9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/container-selinux-2.229.0-2.module+el8.10.0+90735+426876b9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/criu-3.18-5.module+el8.10.0+90735+426876b9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/crun-1.14.3-2.module+el8.10.0+90735+426876b9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/fuse-overlayfs-1.13-1.module+el8.10.0+90735+426876b9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/libslirp-4.4.0-2.module+el8.10.0+90735+426876b9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/netavark-1.10.3-1.module+el8.10.0+90735+426876b9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/oci-seccomp-bpf-hook-1.2.10-1.module+el8.10.0+90735+426876b9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/podman-4.9.4-25.0.1.module+el8.10.0+90735+426876b9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/python-podman-4.9.0-3.module+el8.10.0+90735+426876b9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/runc-1.2.9-2.module+el8.10.0+90735+426876b9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/skopeo-1.14.5-5.module+el8.10.0+90735+426876b9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/slirp4netns-1.2.3-1.module+el8.10.0+90735+426876b9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates/udica-0.2.6-21.module+el8.10.0+90735+426876b9.src.rpm Related CVEs: CVE-2025-52881 Description of changes: aardvark-dns buildah [2:1.33.13-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 (https://github.com/containers/buildah/commit/65707d0) - fixes '[Minor Incident] CVE-2025-52881 container-tools:rhel8/buildah: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [rhel-8.10.z]' - Resolves: RHEL-126916 [2:1.33.12-3] - rebuild for CVE-2025-58183 - Resolves: RHEL-125644 cockpit-podman conmon containernetworking-plugins containers-common container-selinux criu crun fuse-overlayfs libslirp netavark oci-seccomp-bpf-hook podman [4.9.4-25.0.1] - Fixes issue of container created in cgroupv2 not start in cgroupv1 [Orabug: 36136813] - Fixes container memory limit not set after host is rebooted with cgroupv2 [Orabug: 36136802] - Fixes issue of podman execvp error while using podmansh [Orabug: 36756665] [4:4.9.4-25] - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel (https://github.com/containers/podman/commit/638f1d2) - fixes '[Minor Incident] CVE-2025-52881 container-tools:rhel8/podman: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [rhel-8.10.z]' - Resolves: RHEL-126904 python-podman runc skopeo slirp4netns udica _______________________________________________ El-errata mailing list [email protected] https://oss.oracle.com/mailman/listinfo/el-errata
