Back to Security Advisories

Container-Tools:rhel8 Security Update — AlmaLinux 8 (ALSA-2026:38504)

This is a security release for AlmaLinux 8. Update the product on every affected server to the patched release — there is no workaround, and unpatched servers remain exposed until updated.

High
AlmaLinux 8

Fix Commands

EL8+ (AlmaLinux/CloudLinux/Rocky)

sudo dnf update

What this means under a SharedLicense license

net: on AlmaLinux 8 is the exposure surface; the advisory's own severity data tops out at CVSS .

aarch64 criu-devel-3.18-5.module_el8.10.0+4016+efd18bf8.aarch64.rpm 0e730ac82633539d3f4e0d2d81d65cf07fb348abfbfce1aadf8303dd3944af04 aarch64 toolbox-tests-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.aarch64.rpm 0ff33c7c6a59456d0928d97d5fb0512b649928927cb4f3762c311b66d9501181 aarch64 skopeo-1.14.6-2.module_el8.10.0+4211+49ea0979.aarch64.rpm 15a248b0bfc997d95015c9cc1e36a45b46b9622286b814e25bafc059784e5e9b aarch64 fuse-overlayfs-1.13-1.module_el8.10.0+4082+f7f0c95e.aarch64.rpm 2efd6add9bb5da02518c7915a33b1c63add715fccf44b6d1ed0105e09270597c aarch64 aardvark-dns-1.10.1-2.module_el8.10.0+4089+ce72bbbe.aarch64.rpm 3389dfa984a3939dba65cbc7f69079ddd993e4dab589f71c49884ad6636bce49 aarch64 containernetworking-plugins-1.4.0-8.module_el8.10.0+4136+16425343.aarch64.rpm 48ddc296c38e755906b6f32dd325ad5a3b0f00cb71dbaf8cdefc5a18a0c9f792 aarch64 criu-libs-3.18-5.module_el8.10.0+3970+8445edf6.aarch64.rpm 50d3f039e473a77d8a020a1e6dacb28670ab9885ee66e83f6c71da7148b90b52 aarch64 podman-plugins-4.9.4-34.module_el8.10.0+4227+f1240cfc.aarch64.rpm 5130c9366afc9401fc439ab7c0d3721f9096ef67bcd67f58f66c73fe84cb01e4 aarch64 libslirp-4.4.0-2.module_el8.10.0+4089+ce72bbbe.aarch64.rpm 611c8fa3e06c8a421c4279d9c6f5931325e81dbfc47a6f7d40620c4695a3998e aarch64 podman-gvproxy-4.9.4-34.module_el8.10.0+4227+f1240cfc.aarch64.rpm 7a9140e54ce613b24f9269907f6e5c2494625db499cd89eadcfe829e6b745e5e aarch64 conmon-2.1.10-1.module_el8.10.0+3970+8445edf6.aarch64.rpm 853259671c9f31f70ab5de96bc46ebb9f8799ce214d3ef8946ac17e3ccd24ba4 aarch64 buildah-tests-1.33.14-4.module_el8.10.0+4213+0493256b.aarch64.rpm 9154c906fa9a930cf5af70699d9612f14974b0405dd4641aa5a9c8a30d58591b aarch64 runc-1.2.9-4.module_el8.10.0+4136+16425343.aarch64.rpm 9f04c48c8e2dc7805fa3c1d8b2ea6b4b4ad4a914671db780d96b1f674f7feae3 aarch64 slirp4netns-1.2.3-1.module_el8.10.0+3926+f12484f5.aarch64.rpm 9ff9fb6bdca07365e5d3db636da9db661e329c62bc900e83437d0c65a54219b6 aarch64 crit-3.18-5.module_el8.10.0+3845+87b84552.aarch64.rpm a02b06f956c3b3806e1628ac34d0402d18912dcf134a3f76aca6c0940e03e7d4 aarch64 oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+3909+6e1c1eb7.aarch64.rpm a1461112ff2d1e46462ca0c479ac8f976bc77f05ebdbc64aa23e1f4983628084 aarch64 podman-remote-4.9.4-34.module_el8.10.0+4227+f1240cfc.aarch64.rpm a1597f58dbd82258a41de513cf1979c9b5f6e416c159a81d75fbc7bb96988bbf aarch64 netavark-1.10.3-1.module_el8.10.0+3970+8445edf6.aarch64.rpm a35e5a102f83a34e86e249c7d7747d4c262abb28db1ba76ec88263280c157034 aarch64 crun-1.14.3-2.module_el8.10.0+4102+6c76e544.aarch64.rpm a65164c23a3c1c54116b94bfa76ca964627e101d62002c0fd410842e9f0ee1c7 aarch64 podman-tests-4.9.4-34.module_el8.10.0+4227+f1240cfc.aarch64.rpm a9689b223b7fb136712537025317ec667fba4596b3814986db2fb09d50096f0e aarch64 buildah-1.33.14-4.module_el8.10.0+4213+0493256b.aarch64.rpm aff55d7dc23d24c67a7687961b3549f9e757501381791c160af43feec95a70da aarch64 podman-catatonit-4.9.4-34.module_el8.10.0+4227+f1240cfc.aarch64.rpm b90328b6e715cd57b610e4fe739d02a6468188d3bbe5b7a03836ed99c939ee11 aarch64 skopeo-tests-1.14.6-2.module_el8.10.0+4211+49ea0979.aarch64.rpm cc5e0e374be04bcdfce55333a576aeafbbe192e1847d8bb98a40a13c058993d1 aarch64 podman-4.9.4-34.module_el8.10.0+4227+f1240cfc.aarch64.rpm dbf9cc79995a03065364590cf9e3ce7e5e0a65e2bc836dafc0393af407121aec aarch64 python3-criu-3.18-5.module_el8.10.0+3876+e55593a8.aarch64.rpm e105dbf7ba725b6560928604b2df9079953a34b0dc397a667e902a1b667e80aa aarch64 toolbox-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.aarch64.rpm e6f5a11fa05e84e6928bc7d566b5b13cb10a6723d91d1ef09965a5171cb5beda aarch64 criu-3.18-5.module_el8.10.0+3909+6e1c1eb7.aarch64.rpm ea4e514e087dd054a190fceb886438e269c0aac65c7eef63944273b602bec9a9 aarch64 libslirp-devel-4.4.0-2.module_el8.10.0+4082+f7f0c95e.aarch64.rpm f0f0bb332aae6719123e78c2218dd2ef7c318f9756ae998133a7832f383064b3 aarch64 containers-common-1-82.module_el8.10.0+4089+ce72bbbe.aarch64.rpm fc68335e4648e3a10ee543963e4ce4e7d485af4cd025b24918bce4f0616e411a noarch python3-podman-4.9.0-3.module_el8.10.0+4016+efd18bf8.noarch.rpm 087549428650af46817206c5d5ddd54bace235c2932b3e2004ac93e3b466cb6d noarch podman-docker-4.9.4-34.module_el8.10.0+4227+f1240cfc.noarch.rpm 650530a7b12e3ea9e4e2c2997c4d68f05faf8570eec15630aef5981ad782b92a noarch udica-0.2.6-21.module_el8.10.0+4068+0e21408f.noarch.rpm 79a48c91cfda7b53eceaf7fc427f6b428b66680f0441fed06fc3bb55a0327feb noarch cockpit-podman-84.1-1.module_el8.10.0+4102+6c76e544.noarch.rpm 7ebfd9c6721f16e93505c790faf678779b529dd5d380e17887b0ba1629de4871 noarch container-selinux-2.229.0-3.module_el8.10.0+4213+0493256b.noarch.rpm abac2d39c2a5230679fceaee40500c93c3318bc39553ee68bfc09e4796b10791 ppc64le containernetworking-plugins-1.4.0-8.module_el8.10.0+4136+16425343.ppc64le.rpm 0ab6514edd1dfb58a0db3696ab8005b2732496a49ddeab0f113e0e1e04c5a1d9 ppc64le podman-tests-4.9.4-34.module_el8.10.0+4227+f1240cfc.ppc64le.rpm 0f688c9b1dba5c1f23cfaca8b2c6245163a97ecb62d760bd736044aee46169f2 ppc64le fuse-overlayfs-1.13-1.module_el8.10.0+4047+545787c4.ppc64le.rpm 17c29288c6a085639b9e4ae57cd1679aeeacb8c9efa0e22064b2365a88136709 ppc64le python3-criu-3.18-5.module_el8.10.0+3970+8445edf6.ppc64le.rpm 18d88b5c2b124704fbf3f9eec1e5c9265f847773ac6e07d02f558ea790bdad1a ppc64le criu-3.18-5.module_el8.10.0+4089+ce72bbbe.ppc64le.rpm 1a83e0d2e6d729c46a3e29a09dcb07035825ef085bf97d1fef8fd7c796d55c45 ppc64le netavark-1.10.3-1.module_el8.10.0+4023+db236c53.ppc64le.rpm 21428de194e4051998b9a6b7575896ea458dd628f9985577caa9faf7e32937be ppc64le toolbox-tests-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.ppc64le.rpm 21bc5f28cb8c0df288afd77e96cafc1665e36cccb140e8d54ba469228ea4563c ppc64le aardvark-dns-1.10.1-2.module_el8.10.0+3909+6e1c1eb7.ppc64le.rpm 22ded5e9c51345c574903e25047ca2208151676469bde3bceef39e8564c57b6a ppc64le crit-3.18-5.module_el8.10.0+3901+4b80ecd7.ppc64le.rpm 2a899d2b235f4b6d029b660e73846eb3464e7ef6f2a0042227b9bb0e7390325a ppc64le libslirp-4.4.0-2.module_el8.10.0+4090+91932338.ppc64le.rpm 312d56f4cd1ff5133377135f341804d5f4fec79eb2729ce0eeda0f191f71830e ppc64le slirp4netns-1.2.3-1.module_el8.10.0+4047+545787c4.ppc64le.rpm 3bc154158ba8c9583eaebc5c22950c60484bd0f2fb30eefec0c6e31ce47c71c4 ppc64le oci-seccomp-bpf-hook-1.2.10-1.module_el8.10.0+4047+545787c4.ppc64le.rpm 3cf1c42e15ebf1d76658f397284737487ad64a4a5a6bfefad422821e4b9b0475 ppc64le containers-common-1-82.module_el8.10.0+3876+e55593a8.ppc64le.rpm 3fa672fa8258f5356fbeb5cc681c9f357a0e976bbef3e1446882bd06bb6c4707 ppc64le podman-remote-4.9.4-34.module_el8.10.0+4227+f1240cfc.ppc64le.rpm 4878702b0181bfd58a89c18de9a5c523675b6479957d756833be6d9cdf6abd93 ppc64le buildah-1.33.14-4.module_el8.10.0+4213+0493256b.ppc64le.rpm 6478134507c3a34c63e93bd8bdaddfe44a0a6d3d114b562222a8feb9baff31cc ppc64le toolbox-0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47.ppc64le.rpm 8e2721abab98a599cd8a7d34249921c276ad91a9684223bed5a425bb27430084 ppc64le podman-plugins-4.9.4-34.module_el8.10.0+4227+f1240cfc.ppc64le.rpm 9b3fb13929a6c9a057395746da380817018f759fd3ddabc0777d65c5fc39c7b8 ppc64le runc-1.2.9-4.module_el8.10.0+4136+16425343.ppc64le.rpm 9cfb33d891e32b9d1aac2049ee50e810e5dd1aa9df80e90a5b1c2b9293e82091 ppc64le skopeo-1.14.6-2.module_el8.10.0+4211+49ea0979.ppc64le.rpm a5645332bf84a8e74e0ed5b4b825fc0e34d7937e84c5a743d5e8f4e4b8c6dbdc ppc64le conmon-2.1.10-1.module_el8.10.0+4090+91932338.ppc64le.rpm a5fc20a2af20bcc3fe6029ae07755382afb21a59bd66429a856bcbc36d8d1f07 ppc64le criu-libs-3.18-5.module_el8.10.0+3926+f12484f5.ppc64le.rpm b126d2f01f5d89f7526a6b593eeb7c81813c71a7050ffb0c19d2373340f5a770 ppc64le criu-devel-3.18-5.module_el8.10.0+3858+6ad51f9f.ppc64le.rpm b832a8cc39494d3f092087625ee0e813f89035d1a3df0035b6281ac0f1d66852 ppc64le libslirp-devel-4.4.0-2.module_el8.10.0+3970+8445edf6.ppc64le.rpm c83c54d5d05551432f08006060d74691049f25ffef7b6d9b880673513b8b5fca ppc64le skopeo-tests-1.14.6-2.module_el8.10.0+4211+49ea0979.ppc64le.rpm db6d163f86527639407b2ff75f3fe952c54e83cefbd38d7ae37181c6736db92e

Frequently Asked Questions

What does ALSA-2026:38504 fix?
1 CVEs in net:, including golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811).
Which release is covered?
AlmaLinux 8.
How do I apply it?
dnf update net: — restart the service if it runs persistently.

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System