Summary
[5.8.2-5.0.1]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]
[7:5.8.2-5]
- rebuild for CVE-2026-39822
- Resolves: RHEL-193642
[7:5.8.2-4]
- update to the latest state of the sustaining branch
- fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832 CVE-2026-39835
- fixes CVE-2026-57231 CVE-2026-25681 CVE-2026-27136
- Resolves: RHEL-173842 RHEL-185604 RHEL-185920 RHEL-186263 RHEL-188713 RHEL-190073 RHEL-190857 RHEL-191095 RHEL-191546 RHEL-192440
[7:5.8.2-3]
- Rebuild for CVE-2026-32283
- Resolves: RHEL-167501
[7:5.8.2-2]
- Rebuild for CVE-2026-25679
- Resolves: RHEL-158493
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | podman | 7:5.8.2-5.0.1.el10_2 |
| Oracle Linux · 10 | podman-docker | 7:5.8.2-5.0.1.el10_2 |
| Oracle Linux · 10 | podman-remote | 7:5.8.2-5.0.1.el10_2 |
| Oracle Linux · 10 | podman-tests | 7:5.8.2-5.0.1.el10_2 |
Vulnerabilities 1
-
High 7.8
Root escape via symlink plus trailing slash in os
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even whe…