[ALSA-2026:89752] Important: oci-seccomp-bpf-hook security update
Type:
security
Severity:
important
Release date:
2026-10-26
Description:
OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes. Security Fix(es): * net/[http:](http:) golang: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 oci-seccomp-bpf-hook-1.2.11-3.el10_2.aarch64.rpm fd38c0143b562ba75c97c90a8f9ef1698dcd4941bc6c17477516755a32ec5981
ppc64le oci-seccomp-bpf-hook-1.2.11-3.el10_2.ppc64le.rpm 97d71a7c424d83f7c10ab384f74e3b863c87693a231e00149a122c4f6922bbcb
s390x oci-seccomp-bpf-hook-1.2.11-3.el10_2.s390x.rpm e0c493732ece18ccf5237a26073675f844d89b46f570f514bb0cde09c11c3d9d
x86_64 oci-seccomp-bpf-hook-1.2.11-3.el10_2.x86_64.rpm 3e7c984c7e1f543ee57f93baa182f0acc0a1cc8c2ccac5de7e92a8127013a969
x86_64_v2 oci-seccomp-bpf-hook-1.2.11-3.el10_2.x86_64_v2.rpm 025dcdd41f12a5491f9f22e9b584c3ff0bc35e9e348e8a9a9d6c5551664e23a2
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.