RHBA-2026:59370 - Bug Fix Advisory

Topic

An update for container-selinux is now available for Red Hat Enterprise Linux 10.

Description

The container-selinux package provides SELinux policies for container runtimes.

Bug Fix(es) and Enhancement(s):

• Enable tier0 gating tests for container-selinux (JIRA:RHEL-178748)
• container_t can't interact with userfaultfd_t - [RHEL 10.2.z] (JIRA:RHEL-179240)
• [rhel-10.2.z] SELinux denial for listen() on SMC socket in unprivileged container (JIRA:RHEL-194514)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 10 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64
• Red Hat Enterprise Linux for IBM z Systems 10 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x
• Red Hat Enterprise Linux for Power, little endian 10 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le
• Red Hat Enterprise Linux for ARM 64 10 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x
• Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le
• Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64
• Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64
• Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le
• Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x

Fixes

• RHEL-178748 - Enable tier0 gating tests for container-selinux
• RHEL-179240 - container_t can't interact with userfaultfd_t - [RHEL 10.2.z]
• RHEL-194514 - [rhel-10.2.z] SELinux denial for listen() on SMC socket in unprivileged container

CVEs

(none)

References

(none)