Linux · Red Hat · Security advisory · October 27, 2026

RHSA-2026:89760: Security update for 34 packages

RHSA-2026:89760, released October 27, 2026, fixes 2 CVEs across 34 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Highest CVSS
8.1
Base score, 0 to 10
Highest EPSS
0.0066
51st percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
aardvark-dnsRHEL 82:1.10.1-2.module+el8.10.0+25171+d379b437
buildahRHEL 82:1.33.15-2.module+el8.10.0+25171+d379b437
buildah-testsRHEL 82:1.33.15-2.module+el8.10.0+25171+d379b437
cockpit-podmanRHEL 80:84.1-1.module+el8.10.0+25171+d379b437
conmonRHEL 83:2.1.10-2.module+el8.10.0+25171+d379b437
container-selinuxRHEL 82:2.229.0-3.module+el8.10.0+25171+d379b437
containernetworking-pluginsRHEL 81:1.4.0-11.module+el8.10.0+25171+d379b437
containers-commonRHEL 82:1-82.module+el8.10.0+25171+d379b437
critRHEL 80:3.18-5.module+el8.10.0+25171+d379b437
criuRHEL 80:3.18-5.module+el8.10.0+25171+d379b437
criu-develRHEL 80:3.18-5.module+el8.10.0+25171+d379b437
criu-libsRHEL 80:3.18-5.module+el8.10.0+25171+d379b437
crunRHEL 80:1.14.3-4.module+el8.10.0+25171+d379b437
fuse-overlayfsRHEL 80:1.13-1.module+el8.10.0+25171+d379b437
libslirpRHEL 80:4.4.0-2.module+el8.10.0+25171+d379b437
libslirp-develRHEL 80:4.4.0-2.module+el8.10.0+25171+d379b437
netavarkRHEL 82:1.10.3-1.module+el8.10.0+25171+d379b437
oci-seccomp-bpf-hookRHEL 80:1.2.10-4.module+el8.10.0+25171+d379b437
podmanRHEL 84:4.9.4-38.module+el8.10.0+25171+d379b437
podman-catatonitRHEL 84:4.9.4-38.module+el8.10.0+25171+d379b437
podman-dockerRHEL 84:4.9.4-38.module+el8.10.0+25171+d379b437
podman-gvproxyRHEL 84:4.9.4-38.module+el8.10.0+25171+d379b437
podman-pluginsRHEL 84:4.9.4-38.module+el8.10.0+25171+d379b437
podman-remoteRHEL 84:4.9.4-38.module+el8.10.0+25171+d379b437
podman-testsRHEL 84:4.9.4-38.module+el8.10.0+25171+d379b437
python3-criuRHEL 80:3.18-5.module+el8.10.0+25171+d379b437
python3-podmanRHEL 80:4.9.0-3.module+el8.10.0+25171+d379b437
runcRHEL 84:1.2.9-9.module+el8.10.0+25171+d379b437
skopeoRHEL 82:1.14.6-5.module+el8.10.0+25171+d379b437
skopeo-testsRHEL 82:1.14.6-5.module+el8.10.0+25171+d379b437
slirp4netnsRHEL 80:1.2.3-1.module+el8.10.0+25171+d379b437
toolboxRHEL 80:0.0.99.5.1-1.module+el8.10.0+25171+d379b437
toolbox-testsRHEL 80:0.0.99.5.1-1.module+el8.10.0+25171+d379b437
udicaRHEL 80:0.2.6-21.module+el8.10.0+25171+d379b437

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2026-78667 Lack of limit on size of parsed Range headers in net/http7.5 0.0066 None reported
High CVE-2026-111943 Go: CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x5098.1 0.0040 None reported
Showing 1 to 2 of 2 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.