Summary
[5.8.2-5.0.1]
- Rework CNI/Netavark detection logic [JIRA: EVG-3769]
- Rebuild on new golang to support experimental GODEBUG fipsnoenforceems
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]
[6:5.8.2-5]
- rebuild for CVE-2026-39822
- Resolves: RHEL-193646
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | podman | 6:5.8.2-5.0.1.el9_8 |
| Oracle Linux · 9 | podman-docker | 6:5.8.2-5.0.1.el9_8 |
| Oracle Linux · 9 | podman-plugins | 6:5.8.2-5.0.1.el9_8 |
| Oracle Linux · 9 | podman-remote | 6:5.8.2-5.0.1.el9_8 |
| Oracle Linux · 9 | podman-tests | 6:5.8.2-5.0.1.el9_8 |
Vulnerabilities 1
-
High 7.8
Root escape via symlink plus trailing slash in os
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even whe…