Red Hat Product Errata RHSA-2026:47905 - Security Advisory Issued: 2026-07-29 Updated: 2026-07-29 RHSA-2026:47905 - Security Advisory Overview Updated Packages Synopsis Moderate: container-selinux and crun security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for multiple packages is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The container-selinux package provides SELinux policies for container runtimes. Security Fix(es): crun: crun: Privilege escalation due to incorrect parsing of the `--user` option (CVE-2026-30892) Bug Fix(es) and Enhancement(s): [rhel-10.0.z] avc: denied { prog_run } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=unconfined_u:unconfined_r:container_runtime_t:s0 tclass=bpf (JIRA:RHEL-210644) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2451576 - CVE-2026-30892 crun: crun: Privilege escalation due to incorrect parsing of the `--user` option RHEL-210644 - [rhel-10.0.z] avc: denied { prog_run } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=unconfined_u:unconfined_r:container_runtime_t:s0 tclass=bpf CVEs CVE-2026-30892 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM container-selinux-2.246.0-1.el10_0.src.rpm SHA-256: 105a58005798b2a7fa83454a22c97b130e99dbfee2fe0686994ae11a361aaa5b crun-1.27.1-1.el10_0.src.rpm SHA-256: 56d156018abc996c8141040fb8b4b126293518f49bfd03aa89a2200c63ad7ead x86_64 container-selinux-2.246.0-1.el10_0.noarch.rpm SHA-256: 9841a38f5c99fb6c63baa07bbefe7dc10b59dae66e8cdc7964c1f81ce2f9dc57 crun-1.27.1-1.el10_0.x86_64.rpm SHA-256: 5c723a26c8c3bf2d69f785c0cc40a17e4f156b2c47ceaa85baef194d40f283fd crun-debuginfo-1.27.1-1.el10_0.x86_64.rpm SHA-256: c8f62dabf2440035550d7b759927612c5af7f0ef341c01c4e730ecf8b0f12c2a crun-debugsource-1.27.1-1.el10_0.x86_64.rpm SHA-256: 6853c427546b7159ba16f134f9dd3479688456f69c5bd2b759e170432aef9acd Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM container-selinux-2.246.0-1.el10_0.src.rpm SHA-256: 105a58005798b2a7fa83454a22c97b130e99dbfee2fe0686994ae11a361aaa5b crun-1.27.1-1.el10_0.src.rpm SHA-256: 56d156018abc996c8141040fb8b4b126293518f49bfd03aa89a2200c63ad7ead s390x container-selinux-2.246.0-1.el10_0.noarch.rpm SHA-256: 9841a38f5c99fb6c63baa07bbefe7dc10b59dae66e8cdc7964c1f81ce2f9dc57 crun-1.27.1-1.el10_0.s390x.rpm SHA-256: 2e28739a3e1f3977df1f2dee03de7cf4e9ea3bce387fb669377cc97cf863054e crun-debuginfo-1.27.1-1.el10_0.s390x.rpm SHA-256: 813a792b68a2a28de40747d31262ba5e2d13108df16d06030c914644cf5d301e crun-debugsource-1.27.1-1.el10_0.s390x.rpm SHA-256: 868dcbfec50bcc25de962d37150bcb45a20dd299f3f25848e9b7a6936dd15f3d Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM container-selinux-2.246.0-1.el10_0.src.rpm SHA-256: 105a58005798b2a7fa83454a22c97b130e99dbfee2fe0686994ae11a361aaa5b crun-1.27.1-1.el10_0.src.rpm SHA-256: 56d156018abc996c8141040fb8b4b126293518f49bfd03aa89a2200c63ad7ead ppc64le container-selinux-2.246.0-1.el10_0.noarch.rpm SHA-256: 9841a38f5c99fb6c63baa07bbefe7dc10b59dae66e8cdc7964c1f81ce2f9dc57 crun-1.27.1-1.el10_0.ppc64le.rpm SHA-256: 2b5619c3e2767418c129ce0b00ed2cf225a86914a4ba5ece9c965c8fe2c61ff4 crun-debuginfo-1.27.1-1.el10_0.ppc64le.rpm SHA-256: d09c55022f1efe2875be688dfb6f8865741cf3763a60971e4795422bc78d21ed crun-debugsource-1.27.1-1.el10_0.ppc64le.rpm SHA-256: 77bca25a49c735af4431487fbd0481b5a0a91d7bb0df54212cbb1a26256ba196 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM container-selinux-2.246.0-1.el10_0.src.rpm SHA-256: 105a58005798b2a7fa83454a22c97b130e99dbfee2fe0686994ae11a361aaa5b crun-1.27.1-1.el10_0.src.rpm SHA-256: 56d156018abc996c8141040fb8b4b126293518f49bfd03aa89a2200c63ad7ead aarch64 container-selinux-2.246.0-1.el10_0.noarch.rpm SHA-256: 9841a38f5c99fb6c63baa07bbefe7dc10b59dae66e8cdc7964c1f81ce2f9dc57 crun-1.27.1-1.el10_0.aarch64.rpm SHA-256: 2a90c5f5653a74f6be3aa48c9e0cf7ea72e4fc4ad84dbd9eb7d42223e8e324aa crun-debuginfo-1.27.1-1.el10_0.aarch64.rpm SHA-256: a7f22701b260b89f39e465e370a2d0bad923f362d575788c78baffbb420ac553 crun-debugsource-1.27.1-1.el10_0.aarch64.rpm SHA-256: af53ed657c4239b13cc3c248f6372b5d876a44f5cd3376e554563f439f6be314 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 SRPM container-selinux-2.246.0-1.el10_0.src.rpm SHA-256: 105a58005798b2a7fa83454a22c97b130e99dbfee2fe0686994ae11a361aaa5b crun-1.27.1-1.el10_0.src.rpm SHA-256: 56d156018abc996c8141040fb8b4b126293518f49bfd03aa89a2200c63ad7ead aarch64 container-selinux-2.246.0-1.el10_0.noarch.rpm SHA-256: 9841a38f5c99fb6c63baa07bbefe7dc10b59dae66e8cdc7964c1f81ce2f9dc57 crun-1.27.1-1.el10_0.aarch64.rpm SHA-256: 2a90c5f5653a74f6be3aa48c9e0cf7ea72e4fc4ad84dbd9eb7d42223e8e324aa crun-debuginfo-1.27.1-1.el10_0.aarch64.rpm SHA-256: a7f22701b260b89f39e465e370a2d0bad923f362d575788c78baffbb420ac553 crun-debugsource-1.27.1-1.el10_0.aarch64.rpm SHA-256: af53ed657c4239b13cc3c248f6372b5d876a44f5cd3376e554563f439f6be314 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 SRPM container-selinux-2.246.0-1.el10_0.src.rpm SHA-256: 105a58005798b2a7fa83454a22c97b130e99dbfee2fe0686994ae11a361aaa5b crun-1.27.1-1.el10_0.src.rpm SHA-256: 56d156018abc996c8141040fb8b4b126293518f49bfd03aa89a2200c63ad7ead s390x container-selinux-2.246.0-1.el10_0.noarch.rpm SHA-256: 9841a38f5c99fb6c63baa07bbefe7dc10b59dae66e8cdc7964c1f81ce2f9dc57 crun-1.27.1-1.el10_0.s390x.rpm SHA-256: 2e28739a3e1f3977df1f2dee03de7cf4e9ea3bce387fb669377cc97cf863054e crun-debuginfo-1.27.1-1.el10_0.s390x.rpm SHA-256: 813a792b68a2a28de40747d31262ba5e2d13108df16d06030c914644cf5d301e crun-debugsource-1.27.1-1.el10_0.s390x.rpm SHA-256: 868dcbfec50bcc25de962d37150bcb45a20dd299f3f25848e9b7a6936dd15f3d Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 SRPM container-selinux-2.246.0-1.el10_0.src.rpm SHA-256: 105a58005798b2a7fa83454a22c97b130e99dbfee2fe0686994ae11a361aaa5b crun-1.27.1-1.el10_0.src.rpm SHA-256: 56d156018abc996c8141040fb8b4b126293518f49bfd03aa89a2200c63ad7ead ppc64le container-selinux-2.246.0-1.el10_0.noarch.rpm SHA-256: 9841a38f5c99fb6c63baa07bbefe7dc10b59dae66e8cdc7964c1f81ce2f9dc57 crun-1.27.1-1.el10_0.ppc64le.rpm SHA-256: 2b5619c3e2767418c129ce0b00ed2cf225a86914a4ba5ece9c965c8fe2c61ff4 crun-debuginfo-1.27.1-1.el10_0.ppc64le.rpm SHA-256: d09c55022f1efe2875be688dfb6f8865741cf3763a60971e4795422bc78d21ed crun-debugsource-1.27.1-1.el10_0.ppc64le.rpm SHA-256: 77bca25a49c735af4431487fbd0481b5a0a91d7bb0df54212cbb1a26256ba196 Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 SRPM container-selinux-2.246.0-1.el10_0.src.rpm SHA-256: 105a58005798b2a7fa83454a22c97b130e99dbfee2fe0686994ae11a361aaa5b crun-1.27.1-1.el10_0.src.rpm SHA-256: 56d156018abc996c8141040fb8b4b126293518f49bfd03aa89a2200c63ad7ead x86_64 container-selinux-2.246.0-1.el10_0.noarch.rpm SHA-256: 9841a38f5c99fb6c63baa07bbefe7dc10b59dae66e8cdc7964c1f81ce2f9dc57 crun-1.27.1-1.el10_0.x86_64.rpm SHA-256: 5c723a26c8c3bf2d69f785c0cc40a17e4f156b2c47ceaa85baef194d40f283fd crun-debuginfo-1.27.1-1.el10_0.x86_64.rpm SHA-256: c8f62dabf2440035550d7b759927612c5af7f0ef341c01c4e730ecf8b0f12c2a crun-debugsource-1.27.1-1.el10_0.x86_64.rpm SHA-256: 6853c427546b7159ba16f134f9dd3479688456f69c5bd2b759e170432aef9acd The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .