[ALSA-2026:90362] Important: podman security update
Type:
security
Severity:
important
Release date:
2026-10-27
Description:
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * podman: Arbitrary file write when importing OCI archive (CVE-2025-11395) * net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 podman-5.8.2-8.el9_8.aarch64.rpm 0c0cf960d79351ff20c49ee7cbb704bfd7d9bac8774bfc2bfc715856faecc613
aarch64 podman-remote-5.8.2-8.el9_8.aarch64.rpm 9e0ac91e553d730a2d73899460b0202b286402ab6894f20d6286cd9a9a5de128
aarch64 podman-tests-5.8.2-8.el9_8.aarch64.rpm c80561f1c2e0a5e2a73bf899b8d4759b34f540f2dc3a7b6a6ebccd4b82dfdae3
aarch64 podman-plugins-5.8.2-8.el9_8.aarch64.rpm fa2ea1672a0bb940552f4638e89ee24ce2082f2961735ef32e6d4ef099f80f9c
noarch podman-docker-5.8.2-8.el9_8.noarch.rpm bc4f09efc61f77cb445a98fbc3af42b74a7948fa155d0a5b118784d269058e15
ppc64le podman-remote-5.8.2-8.el9_8.ppc64le.rpm 2b8a07e5601d98230abfb7457ff0ec74299e23c51588e850f21dc70987e0f667
ppc64le podman-5.8.2-8.el9_8.ppc64le.rpm 351f89db35b01373970c02315f8a3c98109df49e07c68bc6ab19456de9d94196
ppc64le podman-plugins-5.8.2-8.el9_8.ppc64le.rpm 682a0b75faeb6389595ad73e81e290f86a7ef54b0acb8d4239be6e29e85128f3
ppc64le podman-tests-5.8.2-8.el9_8.ppc64le.rpm 88a61f04eca2e1c478a1270e34b71f5fc1c26ee7b5017aca2ec2557d9240d08e
s390x podman-5.8.2-8.el9_8.s390x.rpm 523fd9f8bd9135c29e8854288be7686c7130798e3864e140ab9d40b1d3fd9c9a
s390x podman-tests-5.8.2-8.el9_8.s390x.rpm 89f69c8e5dd8aa2973776c32617a5afafa6dbc14e7b99a2df086b770ec5b2e61
s390x podman-plugins-5.8.2-8.el9_8.s390x.rpm baf766dd9ebc1565530ee6ad46ef09f2fe5d1e6e692fa9300ed847d775dfb1c4
s390x podman-remote-5.8.2-8.el9_8.s390x.rpm e2da70048135003864d1d1ba7df60ba72586314e155bbba5b6e3f25165345124
x86_64 podman-5.8.2-8.el9_8.x86_64.rpm 1de508f8fdd252a61eda0d969fa8e432b001a763b9d28b933ef32c9196bb2836
x86_64 podman-tests-5.8.2-8.el9_8.x86_64.rpm 64ac344e6c2aac47ec40ae5f531e2663844ecf7933e437b89030cf3f1f37e3bf
x86_64 podman-plugins-5.8.2-8.el9_8.x86_64.rpm 8d0379c14021df31b93cd1e72bcd4ac887533deaf5b52a5f5368147d81268c73
x86_64 podman-remote-5.8.2-8.el9_8.x86_64.rpm 9797a44f0eea98e3f8abb1a452f387d5c056cd68d18ac1d51db9bdaf23331e9e
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.