Red Hat Product Errata RHSA-2026:37385 - Security Advisory Issued: 2026-07-09 Updated: 2026-07-09 RHSA-2026:37385 - Security Advisory Overview Updated Packages Synopsis Important: rh-podman-desktop security advisory update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic A security advisory update for rh-podman-desktop is now available for Red Hat Enterprise Linux 10. Description Red Hat build of Podman Desktop is a graphical tool for managing containers using Podman. It allows users to run, manage, and configure containers and container images using a desktop GUI. Most notable CVE and Bug Fix(es) and Enhancement(s): Issues for CVE fix 1.1.1 (JIRA:RHDESK-595) Fix for RHDESK-529, RHDESK-530, RHDESK-531 - "fast-uri: Path traversal vulnerability allows bypass of security policies (CVE-2026-6321)" Fix for RHDESK-611 - "protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors (CVE-2026-44293)" Fix for RHDESK-640 - "fast-uri: URI authority bypass due to improper delimiter handling (CVE-2026-6322)" Solution Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Fixes RHEL-182245 - Release RH Podman Desktop 1.1.1 to RHEL 10.2 Extensions CVEs CVE-2026-6321 CVE-2026-6322 CVE-2026-44293 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM rh-podman-desktop-1.1.1-1.el10_2.src.rpm SHA-256: 4c16c940e6b6759c1eb63888625db95ba5f88858ab02abc2f29c61ac0bf66c0a x86_64 rh-podman-desktop-1.1.1-1.el10_2.x86_64.rpm SHA-256: 8021eca9cce41d9fc857f029ed90a0c8d48b9a697c17985d7f5a36caab1f932f The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .