Skip to content
OpenAdvisories
High RHSA-2026:19173 1 CVE

Red Hat Security Advisory: podman security update

Published May 20, 2026 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream podman 6:5.8.2-1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream podman-debuginfo 6:5.8.2-1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream podman-debugsource 6:5.8.2-1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream podman-docker 6:5.8.2-1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream podman-plugins 6:5.8.2-1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream podman-plugins-debuginfo 6:5.8.2-1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream podman-remote 6:5.8.2-1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream podman-remote-debuginfo 6:5.8.2-1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream podman-tests 6:5.8.2-1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream podman-tests-debuginfo 6:5.8.2-1.el9_8

Vulnerabilities 1

  • High 7.5
    CVE-2026-34986

    Go JOSE affect by a panic in JWE decryption

    Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JS…

    go-jose go-jose zot kubescape Debian Ubuntu Alpine Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2455470
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19173.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-34986
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-34986
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-34986
  • article
    https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8
  • article
    https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants