Description:
OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes.
Security Fix(es):
* net/[http:](http:) golang: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)
* net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667)
* crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
| Architecture |
Package |
Checksum |
| aarch64 |
oci-seccomp-bpf-hook-1.2.11-3.el10_2.aarch64.rpm |
fd38c0143b562ba75c97c90a8f9ef1698dcd4941bc6c17477516755a32ec5981 |
| ppc64le |
oci-seccomp-bpf-hook-1.2.11-3.el10_2.ppc64le.rpm |
97d71a7c424d83f7c10ab384f74e3b863c87693a231e00149a122c4f6922bbcb |
| s390x |
oci-seccomp-bpf-hook-1.2.11-3.el10_2.s390x.rpm |
e0c493732ece18ccf5237a26073675f844d89b46f570f514bb0cde09c11c3d9d |
| x86_64 |
oci-seccomp-bpf-hook-1.2.11-3.el10_2.x86_64.rpm |
3e7c984c7e1f543ee57f93baa182f0acc0a1cc8c2ccac5de7e92a8127013a969 |
| x86_64_v2 |
oci-seccomp-bpf-hook-1.2.11-3.el10_2.x86_64_v2.rpm |
025dcdd41f12a5491f9f22e9b584c3ff0bc35e9e348e8a9a9d6c5551664e23a2 |