-
Mon Oct 05 2026 Luigi Pavan <lpavan@redhat.com> - 1.16.0-9.4
- Avoid symlink path traversal in revokefs writer (CVE-2026-96808)
Resolves: RHEL-267891
- Prevent arbitrary write as root via extra-data extraction (CVE-2026-96275)
Resolves: RHEL-267432
- Use gsize for OCI delta sizes and harden delta parser (CVE-2026-96280)
Resolves: RHEL-271519
-
Fri Oct 02 2026 Luigi Pavan <lpavan@redhat.com> - 1.16.0-9.3
- Align backport with the other branches
Resolves: RHEL-258970
-
Mon Sep 14 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1.16.0-9.2
- Harden data dir and var setup against symlink attacks
Resolves: RHEL-258970
-
Mon May 18 2026 Jan Grulich <jgrulich@redhat.com> - 1.16.0-9.1
- Fix arbitrary code execution via crafted symlinks in sandbox-expose options
Resolves: RHEL-165630
- Fix arbitrary file deletion on host via improper cache file path validation
Resolves: RHEL-170157
-
Tue Jan 13 2026 Sebastian Wick <sebastian.wick@redhat.com> - 1.16.0-9
- kill: Do not kill pid 0 and embrace races
Resolves: RHEL-140924
-
Tue Dec 16 2025 Sebastian Wick <sebastian.wick@redhat.com> - 1.16.0-8
- Enable FIPS crypto policy if it is enabled on the host
Resolves: RHEL-77484
-
Mon Oct 13 2025 Jan Grulich <jgrulich@redhat.com> - 1.16.0-7
- Get certificates from /etc/pki/entitlement for registry.redhat.io
Resolves: RHEL-85004
-
Mon Aug 04 2025 Jan Grulich <jgrulich@redhat.com> - 1.16.0-6
- Fix wrongly marked failed installs as pre-installed
Resolves: RHEL-89989
-
Wed Feb 05 2025 Jan Grulich <jgrulich@redhat.com> - 1.16.0-5
- Fix crash and installatcion of OCI images
Resolves: RHEL-76958
-
Thu Jan 23 2025 Zdenek Pytela <zpytela@redhat.com> - 1.16.0-4
- Rebuild with selinux-policy-40.13.23-1
Resolves: RHEL-36741