Summary
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.
Security Fix(es):
* os: golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | podman | 7:5.8.2-5.el10_2.alma.1 |
| AlmaLinux · 10 | podman-docker | 7:5.8.2-5.el10_2.alma.1 |
| AlmaLinux · 10 | podman-remote | 7:5.8.2-5.el10_2.alma.1 |
| AlmaLinux · 10 | podman-tests | 7:5.8.2-5.el10_2.alma.1 |
Vulnerabilities 1
-
High 7.8
Root escape via symlink plus trailing slash in os
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even whe…