Red Hat Security AdvisoryRHSA-2026:19017
podman security update
Released 2026-05-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) podman-7:5.8.2-1.el10_2, podman-docker-7:5.8.2-1.el10_2, podman-remote-7:5.8.2-1.el10_2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-7:5.8.2-1.el10_2
Fixes 2 records
Priority MEDIUM 40
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00663 · Published 2026-04-06 · Partial fix · 4.1.4, 3.0.5 CWE-248
Priority MEDIUM 40
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00827 · Published 2026-03-06 · Partial fix · 1.25.8, 1.26.1 CWE-425
