RHBA-2026:18849 - Bug Fix Advisory

Topic

An update for passt is now available for Red Hat Enterprise Linux 9.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64
• Red Hat Enterprise Linux for IBM z Systems 9 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x
• Red Hat Enterprise Linux for Power, little endian 9 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le
• Red Hat Enterprise Linux for ARM 64 9 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x
• Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64
• Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64
• Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le
• Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x

Fixes

• RHEL-123376 - passt might truncate data transfers if socket buffer fills up right as we receive FIN from container/guest
• RHEL-123438 - bursts of out-of-sequence packets from container might cause pasta to terminate
• RHEL-134119 - Rebase passt for RHEL 9.8 to passt-0^20251209.gc3f1ba7-1.el9
• RHEL-134942 - inbound loopback connections with IPv6 local mode result in EINVAL on connect()
• RHEL-134943 - Incorrect timeout values in timer expiry trace messages
• RHEL-136313 - No outbound data transfer possible if full sending buffer is less than MSS
• RHEL-136461 - selinux policy won't load
• RHEL-137439 - pasta fails to start when IPv6 is disabled in kernel
• RHEL-137588 - pasta selinux policy prevents podman user container networking [rhel-9]

CVEs

(none)

References

• https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.8_release_notes/index