Summary
[5.8.2-3.0.1]
- Rework CNI/Netavark detection logic [JIRA: EVG-3769]
- Rebuild on new golang to support experimental GODEBUG fipsnoenforceems
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]
[6:5.8.2-3]
- Rebuild for CVE-2026-32283
- Resolves: RHEL-167685
[6:5.8.2-2]
- Rebuild for CVE-2026-25679
- Resolves: RHEL-158781
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | podman | 6:5.8.2-3.0.1.el9_8 |
| Oracle Linux · 9 | podman-docker | 6:5.8.2-3.0.1.el9_8 |
| Oracle Linux · 9 | podman-plugins | 6:5.8.2-3.0.1.el9_8 |
| Oracle Linux · 9 | podman-remote | 6:5.8.2-3.0.1.el9_8 |
| Oracle Linux · 9 | podman-tests | 6:5.8.2-3.0.1.el9_8 |
Vulnerabilities 1
-
High 7.5
Incorrect parsing of IPv6 host literals in net/url
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.