Red Hat Security AdvisoryRHSA-2026:38495
podman security update
Released 2026-07-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) podman-7:5.8.2-5.el10_2, podman-docker-7:5.8.2-5.el10_2, podman-remote-7:5.8.2-5.el10_2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-7:5.8.2-5.el10_2
Fixes 1 record
Priority LOW 36
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00232 · Published 2026-07-08 · Partial fix · 1.25.12, 1.26.5 +1 CWE-61
