Red Hat Product Errata RHSA-2026:36617 - Security Advisory Issued: 2026-07-08 Updated: 2026-07-08 RHSA-2026:36617 - Security Advisory Overview Updated Packages Synopsis Important: oci-seccomp-bpf-hook security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for oci-seccomp-bpf-hook is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes. Security Fix(es): net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2467822 - CVE-2026-33811 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME CVEs CVE-2026-33811 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM oci-seccomp-bpf-hook-1.2.11-2.el9_8.src.rpm SHA-256: 0f6a3544550981e3058c104809fc67cc47aae03a1dc768191f27baaa3c1af88b x86_64 oci-seccomp-bpf-hook-1.2.11-2.el9_8.x86_64.rpm SHA-256: d0d0d2147073674b339b1b79d15eeaa4e5bfe61714ff1a7685a7456e838b9d17 oci-seccomp-bpf-hook-debuginfo-1.2.11-2.el9_8.x86_64.rpm SHA-256: aa95b050c4829c6a6a9b55ac592008ccfa67978abba03697e249d5ea57d3b29c oci-seccomp-bpf-hook-debugsource-1.2.11-2.el9_8.x86_64.rpm SHA-256: 2733648270b626bbce42a3cc9adf7990f7d327057111ebc075978d76a679779c Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM oci-seccomp-bpf-hook-1.2.11-2.el9_8.src.rpm SHA-256: 0f6a3544550981e3058c104809fc67cc47aae03a1dc768191f27baaa3c1af88b x86_64 oci-seccomp-bpf-hook-1.2.11-2.el9_8.x86_64.rpm SHA-256: d0d0d2147073674b339b1b79d15eeaa4e5bfe61714ff1a7685a7456e838b9d17 oci-seccomp-bpf-hook-debuginfo-1.2.11-2.el9_8.x86_64.rpm SHA-256: aa95b050c4829c6a6a9b55ac592008ccfa67978abba03697e249d5ea57d3b29c oci-seccomp-bpf-hook-debugsource-1.2.11-2.el9_8.x86_64.rpm SHA-256: 2733648270b626bbce42a3cc9adf7990f7d327057111ebc075978d76a679779c Red Hat Enterprise Linux for IBM z Systems 9 SRPM oci-seccomp-bpf-hook-1.2.11-2.el9_8.src.rpm SHA-256: 0f6a3544550981e3058c104809fc67cc47aae03a1dc768191f27baaa3c1af88b s390x oci-seccomp-bpf-hook-1.2.11-2.el9_8.s390x.rpm SHA-256: 33e3674a53ac14a27f0b4b4f14a4db2821f15bb0ae33a7968e362a00eada8c60 oci-seccomp-bpf-hook-debuginfo-1.2.11-2.el9_8.s390x.rpm SHA-256: 9259d09de8e198e4fe9576b8d27d449d394003a3485f248f40e4709d2eba3dd4 oci-seccomp-bpf-hook-debugsource-1.2.11-2.el9_8.s390x.rpm SHA-256: 672bb594bebd485137426d4585b39e4dd51ff9039c9130a57ed94137f94697de Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM oci-seccomp-bpf-hook-1.2.11-2.el9_8.src.rpm SHA-256: 0f6a3544550981e3058c104809fc67cc47aae03a1dc768191f27baaa3c1af88b s390x oci-seccomp-bpf-hook-1.2.11-2.el9_8.s390x.rpm SHA-256: 33e3674a53ac14a27f0b4b4f14a4db2821f15bb0ae33a7968e362a00eada8c60 oci-seccomp-bpf-hook-debuginfo-1.2.11-2.el9_8.s390x.rpm SHA-256: 9259d09de8e198e4fe9576b8d27d449d394003a3485f248f40e4709d2eba3dd4 oci-seccomp-bpf-hook-debugsource-1.2.11-2.el9_8.s390x.rpm SHA-256: 672bb594bebd485137426d4585b39e4dd51ff9039c9130a57ed94137f94697de Red Hat Enterprise Linux for Power, little endian 9 SRPM oci-seccomp-bpf-hook-1.2.11-2.el9_8.src.rpm SHA-256: 0f6a3544550981e3058c104809fc67cc47aae03a1dc768191f27baaa3c1af88b ppc64le oci-seccomp-bpf-hook-1.2.11-2.el9_8.ppc64le.rpm SHA-256: f8166340b200aecb549376dc2ae72be67e0bc3f4d7799cf361296ab45b68a7dc oci-seccomp-bpf-hook-debuginfo-1.2.11-2.el9_8.ppc64le.rpm SHA-256: 4917ed4ae589c4df1691b599cff782cc04e4f8de623f8f440cf2ab4cc0798e83 oci-seccomp-bpf-hook-debugsource-1.2.11-2.el9_8.ppc64le.rpm SHA-256: f76da27c060ebbc904604be5c059bc7a61f5339476a503ef96bceda2e9542ded Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM oci-seccomp-bpf-hook-1.2.11-2.el9_8.src.rpm SHA-256: 0f6a3544550981e3058c104809fc67cc47aae03a1dc768191f27baaa3c1af88b ppc64le oci-seccomp-bpf-hook-1.2.11-2.el9_8.ppc64le.rpm SHA-256: f8166340b200aecb549376dc2ae72be67e0bc3f4d7799cf361296ab45b68a7dc oci-seccomp-bpf-hook-debuginfo-1.2.11-2.el9_8.ppc64le.rpm SHA-256: 4917ed4ae589c4df1691b599cff782cc04e4f8de623f8f440cf2ab4cc0798e83 oci-seccomp-bpf-hook-debugsource-1.2.11-2.el9_8.ppc64le.rpm SHA-256: f76da27c060ebbc904604be5c059bc7a61f5339476a503ef96bceda2e9542ded Red Hat Enterprise Linux for ARM 64 9 SRPM oci-seccomp-bpf-hook-1.2.11-2.el9_8.src.rpm SHA-256: 0f6a3544550981e3058c104809fc67cc47aae03a1dc768191f27baaa3c1af88b aarch64 oci-seccomp-bpf-hook-1.2.11-2.el9_8.aarch64.rpm SHA-256: c31f40dff0f43b2eea285319bbeec59bc370786537391917a9e6f9864e1a60e2 oci-seccomp-bpf-hook-debuginfo-1.2.11-2.el9_8.aarch64.rpm SHA-256: 59f951bf4db308623de4d2ae9565f693da21c27330c6dded09e16ab3a59185ee oci-seccomp-bpf-hook-debugsource-1.2.11-2.el9_8.aarch64.rpm SHA-256: 9ff4c67cf133e9740312fce255fecc730714d1be407dcea75875d07cbb8cfaa6 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 SRPM oci-seccomp-bpf-hook-1.2.11-2.el9_8.src.rpm SHA-256: 0f6a3544550981e3058c104809fc67cc47aae03a1dc768191f27baaa3c1af88b aarch64 oci-seccomp-bpf-hook-1.2.11-2.el9_8.aarch64.rpm SHA-256: c31f40dff0f43b2eea285319bbeec59bc370786537391917a9e6f9864e1a60e2 oci-seccomp-bpf-hook-debuginfo-1.2.11-2.el9_8.aarch64.rpm SHA-256: 59f951bf4db308623de4d2ae9565f693da21c27330c6dded09e16ab3a59185ee oci-seccomp-bpf-hook-debugsource-1.2.11-2.el9_8.aarch64.rpm SHA-256: 9ff4c67cf133e9740312fce255fecc730714d1be407dcea75875d07cbb8cfaa6 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM oci-seccomp-bpf-hook-1.2.11-2.el9_8.src.rpm SHA-256: 0f6a3544550981e3058c104809fc67cc47aae03a1dc768191f27baaa3c1af88b ppc64le oci-seccomp-bpf-hook-1.2.11-2.el9_8.ppc64le.rpm SHA-256: f8166340b200aecb549376dc2ae72be67e0bc3f4d7799cf361296ab45b68a7dc oci-seccomp-bpf-hook-debuginfo-1.2.11-2.el9_8.ppc64le.rpm SHA-256: 4917ed4ae589c4df1691b599cff782cc04e4f8de623f8f440cf2ab4cc0798e83 oci-seccomp-bpf-hook-debugsource-1.2.11-2.el9_8.ppc64le.rpm SHA-256: f76da27c060ebbc904604be5c059bc7a61f5339476a503ef96bceda2e9542ded Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 SRPM oci-seccomp-bpf-hook-1.2.11-2.el9_8.src.rpm SHA-256: 0f6a3544550981e3058c104809fc67cc47aae03a1dc768191f27baaa3c1af88b x86_64 oci-seccomp-bpf-hook-1.2.11-2.el9_8.x86_64.rpm SHA-256: d0d0d2147073674b339b1b79d15eeaa4e5bfe61714ff1a7685a7456e838b9d17 oci-seccomp-bpf-hook-debuginfo-1.2.11-2.el9_8.x86_64.rpm SHA-256: aa95b050c4829c6a6a9b55ac592008ccfa67978abba03697e249d5ea57d3b29c oci-seccomp-bpf-hook-debugsource-1.2.11-2.el9_8.x86_64.rpm SHA-256: 2733648270b626bbce42a3cc9adf7990f7d327057111ebc075978d76a679779c Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 SRPM oci-seccomp-bpf-hook-1.2.11-2.el9_8.src.rpm SHA-256: 0f6a3544550981e3058c104809fc67cc47aae03a1dc768191f27baaa3c1af88b aarch64 oci-seccomp-bpf-hook-1.2.11-2.el9_8.aarch64.rpm SHA-256: c31f40dff0f43b2eea285319bbeec59bc370786537391917a9e6f9864e1a60e2 oci-seccomp-bpf-hook-debuginfo-1.2.11-2.el9_8.aarch64.rpm SHA-256: 59f951bf4db308623de4d2ae9565f693da21c27330c6dded09e16ab3a59185ee oci-seccomp-bpf-hook-debugsource-1.2.11-2.el9_8.aarch64.rpm SHA-256: 9ff4c67cf133e9740312fce255fecc730714d1be407dcea75875d07cbb8cfaa6 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 SRPM oci-seccomp-bpf-hook-1.2.11-2.el9_8.src.rpm SHA-256: 0f6a3544550981e3058c104809fc67cc47aae03a1dc768191f27baaa3c1af88b s390x oci-seccomp-bpf-hook-1.2.11-2.el9_8.s390x.rpm SHA-256: 33e3674a53ac14a27f0b4b4f14a4db2821f15bb0ae33a7968e362a00eada8c60 oci-seccomp-bpf-hook-debuginfo-1.2.11-2.el9_8.s390x.rpm SHA-256: 9259d09de8e198e4fe9576b8d27d449d394003a3485f248f40e4709d2eba3dd4 oci-seccomp-bpf-hook-debugsource-1.2.11-2.el9_8.s390x.rpm SHA-256: 672bb594bebd485137426d4585b39e4dd51ff9039c9130a57ed94137f94697de Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 SRPM oci-seccomp-bpf-hook-1.2.11-2.el9_8.src.rpm SHA-256: 0f6a3544550981e3058c104809fc67cc47aae03a1dc76819