[ALSA-2026:88336] Important: podman security update
Type:
security
Severity:
important
Release date:
2026-10-23
Description:
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 podman-tests-5.8.2-11.el10_2.alma.1.aarch64.rpm 1767dfabaf2ff90024c3c0b7c3cbce3778e8402f9c37b2b34be4d958c545d201
aarch64 podman-5.8.2-11.el10_2.alma.1.aarch64.rpm 2efaeaa4bb2072c6b964c903ec8bd0bcfec54816b29edc341baf989016c8fcd8
aarch64 podman-remote-5.8.2-11.el10_2.alma.1.aarch64.rpm 41fc79a81bc5ada5f0a7459b2cddc0948a7ed6cbc83b0b05feb1dd89e00977ea
noarch podman-docker-5.8.2-11.el10_2.alma.1.noarch.rpm b78131d11b766a39076c798e8053d975ff7b21adeee3e13e6f9685143cc6190d
ppc64le podman-tests-5.8.2-11.el10_2.alma.1.ppc64le.rpm 48b68bb2dc781ae47e539b669c5ca1f0bacee2892494f46d4c32e4f9cd344992
ppc64le podman-5.8.2-11.el10_2.alma.1.ppc64le.rpm dfc1ed1e58f1ad8b66afd3bcc8540f077f116b298f04ae387041af9eb6e53561
ppc64le podman-remote-5.8.2-11.el10_2.alma.1.ppc64le.rpm e15cc5929f26a41fe194d33393ea35e75d6de3acf31e5c5d83be2cad3e5a6512
s390x podman-tests-5.8.2-11.el10_2.alma.1.s390x.rpm 3c032037b37e4dd69c45bbd5534dc43cae4af7c2e4fe7c86edadcbf477592f67
s390x podman-5.8.2-11.el10_2.alma.1.s390x.rpm 56a43847c8dd85461c1db747e981001a005f35752d9a5414756d7b5489caeb15
s390x podman-remote-5.8.2-11.el10_2.alma.1.s390x.rpm deea4774e2693d205e79ff614e18254379e1a2fdb35778cbbb5c52ad9f98c262
x86_64 podman-tests-5.8.2-11.el10_2.alma.1.x86_64.rpm 7951c045bb43fcd86b17e3f8903b37725d8ce1ded54e0abd1500baa5fee3c74c
x86_64 podman-5.8.2-11.el10_2.alma.1.x86_64.rpm 7a4603a05c4772ebae34b103d5875afa90cd6d54a095c7f8d6220c101247b978
x86_64 podman-remote-5.8.2-11.el10_2.alma.1.x86_64.rpm 9fc0e2674a18841fe6e846159bdaf765a0a65df2728e3757964aba19f66baf70
x86_64_v2 podman-tests-5.8.2-11.el10_2.alma.1.x86_64_v2.rpm 09bd592d13f2ea3cc2d2daa6586a1f966a6c3548affacc85752a5b85542ae988
x86_64_v2 podman-remote-5.8.2-11.el10_2.alma.1.x86_64_v2.rpm 227bd5e044554349c6dd05b4320858a5e9e9adb9d87eac3cf7930b057d8c4bf0
x86_64_v2 podman-5.8.2-11.el10_2.alma.1.x86_64_v2.rpm 7797cd1d506b15971e5bac71e58ecdd1c894d1d095ab27b5dd398f933338340c
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.