This Red Hat security advisory addresses three vulnerabilities in the runc container runtime for RHEL 9, rated Important. The vulnerabilities include an IPv6 host parsing flaw (CVE-2026-25679, CVSS 7.5) and two denial-of-service issues in Go's certificate chain validation (CVE-2026-32280 & CVE-2026-32281, both CVSS 7.5). The underlying Go language fixes require upgrading to versions 1.25.8 or 1.25.9 for the 1.25 stream, and to version 1.26.2 for the 1.26 stream.
Errata des produits Red Hat RHSA-2026:29702 - Security Advisory Publié : 2026-06-25 Mis à jour : 2026-06-25 RHSA-2026:29702 - Security Advisory Aperçu général Paquets mis à jour Synopsis Important: runc security update Type / Sévérité Security Advisory: Important Analyse des correctifs dans Red Hat Insights Identifiez et remédiez aux systèmes concernés par cette alerte. Voir les systèmes concernés Sujet An update for runc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Produits concernés Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Correctifs BZ - 2445356 - CVE-2026-25679 net/url: Incorrect parsing of IPv6 host literals in net/url BZ - 2456333 - CVE-2026-32281 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation BZ - 2456339 - CVE-2026-32280 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building CVE CVE-2026-25679 CVE-2026-32280 CVE-2026-32281 Références https://access.redhat.com/security/updates/classification/#important Remarque: Il existe peut-être des versions plus récentes de ces paquets. Cliquer sur un nom de paquet pour obtenir plus de détails. Red Hat Enterprise Linux for x86_64 9 SRPM runc-1.4.2-2.el9_8.src.rpm SHA-256: 2b76042fd511cf0f4721b4a68da559483cf18818537009bc3187472019cf25c9 x86_64 runc-1.4.2-2.el9_8.x86_64.rpm SHA-256: b5b9f4399253b52c7ce9feb954eed9ad9f9b5aa1056fcac4badce1d59f942802 runc-debuginfo-1.4.2-2.el9_8.x86_64.rpm SHA-256: 4342fd553744e0f79ef7c9310f48ef027d3bc7bb991d9648c2c27c65b3a0c3b0 runc-debugsource-1.4.2-2.el9_8.x86_64.rpm SHA-256: 7ec76a3e3045d2a6a96eb1b8495988250b865ce29230452d7920cf374e95425d Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM runc-1.4.2-2.el9_8.src.rpm SHA-256: 2b76042fd511cf0f4721b4a68da559483cf18818537009bc3187472019cf25c9 x86_64 runc-1.4.2-2.el9_8.x86_64.rpm SHA-256: b5b9f4399253b52c7ce9feb954eed9ad9f9b5aa1056fcac4badce1d59f942802 runc-debuginfo-1.4.2-2.el9_8.x86_64.rpm SHA-256: 4342fd553744e0f79ef7c9310f48ef027d3bc7bb991d9648c2c27c65b3a0c3b0 runc-debugsource-1.4.2-2.el9_8.x86_64.rpm SHA-256: 7ec76a3e3045d2a6a96eb1b8495988250b865ce29230452d7920cf374e95425d Red Hat Enterprise Linux for IBM z Systems 9 SRPM runc-1.4.2-2.el9_8.src.rpm SHA-256: 2b76042fd511cf0f4721b4a68da559483cf18818537009bc3187472019cf25c9 s390x runc-1.4.2-2.el9_8.s390x.rpm SHA-256: cde2b7c1a71b5ad6f50ca453018ab62a0e07f0bdefc4a985e6ca6aa64327c3b3 runc-debuginfo-1.4.2-2.el9_8.s390x.rpm SHA-256: 5162aa6ab830e5737b3eb40b99ec8a7044af9dd6a689f4b19a5d65ec7803d5dc runc-debugsource-1.4.2-2.el9_8.s390x.rpm SHA-256: 5ef623391983fe9629ab22a29a3d6abcab733b0aa99bd714ed58d598b0021779 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM runc-1.4.2-2.el9_8.src.rpm SHA-256: 2b76042fd511cf0f4721b4a68da559483cf18818537009bc3187472019cf25c9 s390x runc-1.4.2-2.el9_8.s390x.rpm SHA-256: cde2b7c1a71b5ad6f50ca453018ab62a0e07f0bdefc4a985e6ca6aa64327c3b3 runc-debuginfo-1.4.2-2.el9_8.s390x.rpm SHA-256: 5162aa6ab830e5737b3eb40b99ec8a7044af9dd6a689f4b19a5d65ec7803d5dc runc-debugsource-1.4.2-2.el9_8.s390x.rpm SHA-256: 5ef623391983fe9629ab22a29a3d6abcab733b0aa99bd714ed58d598b0021779 Red Hat Enterprise Linux for Power, little endian 9 SRPM runc-1.4.2-2.el9_8.src.rpm SHA-256: 2b76042fd511cf0f4721b4a68da559483cf18818537009bc3187472019cf25c9 ppc64le runc-1.4.2-2.el9_8.ppc64le.rpm SHA-256: 0864e5b1acf781ed098392b39a62c4709590a212f78e53dfbf14fa29b26599c8 runc-debuginfo-1.4.2-2.el9_8.ppc64le.rpm SHA-256: f09a4672f6d8f95860935e0ab6df8d12e141f455d07625e53cd4d31db4562e13 runc-debugsource-1.4.2-2.el9_8.ppc64le.rpm SHA-256: a409f82a4a04d88a77343815d08823ae355df93bba32720d9c45aeaa3da7027b Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM runc-1.4.2-2.el9_8.src.rpm SHA-256: 2b76042fd511cf0f4721b4a68da559483cf18818537009bc3187472019cf25c9 ppc64le runc-1.4.2-2.el9_8.ppc64le.rpm SHA-256: 0864e5b1acf781ed098392b39a62c4709590a212f78e53dfbf14fa29b26599c8 runc-debuginfo-1.4.2-2.el9_8.ppc64le.rpm SHA-256: f09a4672f6d8f95860935e0ab6df8d12e141f455d07625e53cd4d31db4562e13 runc-debugsource-1.4.2-2.el9_8.ppc64le.rpm SHA-256: a409f82a4a04d88a77343815d08823ae355df93bba32720d9c45aeaa3da7027b Red Hat Enterprise Linux for ARM 64 9 SRPM runc-1.4.2-2.el9_8.src.rpm SHA-256: 2b76042fd511cf0f4721b4a68da559483cf18818537009bc3187472019cf25c9 aarch64 runc-1.4.2-2.el9_8.aarch64.rpm SHA-256: bbeabe459318132f2ded1f9b0791f1acd1d272e9e401d103d9d77772effc048b runc-debuginfo-1.4.2-2.el9_8.aarch64.rpm SHA-256: 42ed39cc1952f287950b253dc03c7e989c22086976a677f361b619c7ac08c656 runc-debugsource-1.4.2-2.el9_8.aarch64.rpm SHA-256: 675dce6dbd7e81c6eec08cefb7586d485d73901bb421210bfa92e84ab5a10028 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 SRPM runc-1.4.2-2.el9_8.src.rpm SHA-256: 2b76042fd511cf0f4721b4a68da559483cf18818537009bc3187472019cf25c9 aarch64 runc-1.4.2-2.el9_8.aarch64.rpm SHA-256: bbeabe459318132f2ded1f9b0791f1acd1d272e9e401d103d9d77772effc048b runc-debuginfo-1.4.2-2.el9_8.aarch64.rpm SHA-256: 42ed39cc1952f287950b253dc03c7e989c22086976a677f361b619c7ac08c656 runc-debugsource-1.4.2-2.el9_8.aarch64.rpm SHA-256: 675dce6dbd7e81c6eec08cefb7586d485d73901bb421210bfa92e84ab5a10028 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM runc-1.4.2-2.el9_8.src.rpm SHA-256: 2b76042fd511cf0f4721b4a68da559483cf18818537009bc3187472019cf25c9 ppc64le runc-1.4.2-2.el9_8.ppc64le.rpm SHA-256: 0864e5b1acf781ed098392b39a62c4709590a212f78e53dfbf14fa29b26599c8 runc-debuginfo-1.4.2-2.el9_8.ppc64le.rpm SHA-256: f09a4672f6d8f95860935e0ab6df8d12e141f455d07625e53cd4d31db4562e13 runc-debugsource-1.4.2-2.el9_8.ppc64le.rpm SHA-256: a409f82a4a04d88a77343815d08823ae355df93bba32720d9c45aeaa3da7027b Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 SRPM runc-1.4.2-2.el9_8.src.rpm SHA-256: 2b76042fd511cf0f4721b4a68da559483cf18818537009bc3187472019cf25c9 x86_64 runc-1.4.2-2.el9_8.x86_64.rpm SHA-256: b5b9f4399253b52c7ce9feb954eed9ad9f9b5aa1056fcac4badce1d59f942802 runc-debuginfo-1.4.2-2.el9_8.x86_64.rpm SHA-256: 4342fd553744e0f79ef7c9310f48ef027d3bc7bb991d9648c2c27c65b3a0c3b0 runc-debugsource-1.4.2-2.el9_8.x86_64.rpm SHA-256: 7ec76a3e3045d2a6a96eb1b8495988250b865ce29230452d7920cf374e95425d Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 SRPM runc-1.4.2-2.el9_8.src.rpm SHA-256: 2b76042fd511cf0f4721b4a68da559483cf18818537009bc3187472019cf25c9 aarch64 runc-1.4.2-2.el9_8.aarch64.rpm SHA-256: bbeabe459318132f2ded1f9b0791f1acd1d272e9e401d103d9d77772effc048b runc-debuginfo-1.4.2-2.el9_8.aarch64.rpm SHA-256: 42ed39cc1952f287950b253dc03c7e989c22086976a677f361b619c7ac08c656 runc-debugsource-1.4.2-2.el9_8.aarch64.rpm SHA-256: 675dce6dbd7e81c6eec08cefb7586d485d73901bb421210bfa92e84ab5a10028 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 SRPM runc-1.4.2-2.el9_8.src.rpm SHA-256: 2b76042fd511cf0f4721b4a68da559483cf18818537009bc3187472019cf25c9 s390x runc-1.4.2-2.el9_8.s390x.rpm SHA-256: cde2b7c1a71b5ad6f50ca453018ab62a0e07f0bdefc4a985e6ca6aa64327c3b3 runc-debuginfo-1.4.2-2.el9_8.s390x.rpm SHA-256: 5162aa6ab830e5737b3eb40b99ec8a7044af9dd6a689f4b19a5d65ec7803d5dc runc-debugsource-1.4.2-2.el9_8.s390x.rpm SHA-256: 5ef623391983fe9629ab22a29a3d6abcab733b0aa99bd714ed58d598b0021779 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 SRPM runc-1.4.2-2.el9_8.src.rpm SHA-256: 2b76042fd511cf0f4721b4a68da559483cf18818537009bc3187472019cf25c9 x86_64 runc-1.4.2-2.el9_8.x86_64.rpm SHA-256: b5b9f4399253b52c7ce9feb954eed9ad9f9b5aa1056fcac4badce1d59f942802 runc-debuginfo-1.4.2-2.el9_8.x86_64.rpm SHA-256: 4342fd553744e0f79ef7c9310f48ef027d3bc7bb991d9648c2c27c65b3a0c3b0 runc-debugsource-1.4.2-2.el9_8.x86_64.rpm SHA-256: 7ec76a3e3045d2a6a96eb1b8495988250b865ce29230452d7920cf374e95425d Red Hat Enterprise Linux for ARM 64 - Ex