Red Hat Product Errata RHSA-2026:38495 - Security Advisory Issued: 2026-07-13 Updated: 2026-07-13 RHSA-2026:38495 - Security Advisory Overview Updated Packages Synopsis Important: podman security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for podman is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): os: golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2498152 - CVE-2026-39822 os: golang: Go os.Root: Symlink following vulnerability allows directory traversal CVEs CVE-2026-39822 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM podman-5.8.2-5.el10_2.src.rpm SHA-256: 9131ac45cf9c77e7c4e62484e99283f2ecee29cf12d50b7022cbdf1155074b00 x86_64 podman-5.8.2-5.el10_2.x86_64.rpm SHA-256: cfaeb27e62a80521488458574f5d507b64d40cf6351403c95a968df632f0b805 podman-debuginfo-5.8.2-5.el10_2.x86_64.rpm SHA-256: 0252805e47e0b78a55d02e1362fe63daf2b42bcbf682c4c2beeea934077ff7a7 podman-debugsource-5.8.2-5.el10_2.x86_64.rpm SHA-256: fccaa08ed90eabcc4f29698386618969c1a2f5d4e81b38f1ce3765258ddf1998 podman-docker-5.8.2-5.el10_2.noarch.rpm SHA-256: 71a3da2b1e22689a861e6d567d0d99aa1c8c6c4ab3d3ad4734a1022cd09a8d1b podman-remote-5.8.2-5.el10_2.x86_64.rpm SHA-256: 14fd5e989ccf409fb82a9d8a50b8cf9110f2376c9501deb431d906fe688ffbbf podman-remote-debuginfo-5.8.2-5.el10_2.x86_64.rpm SHA-256: f0d71e3529f7e0e308ab874332f544fb4417dcca5aea1c0b06044191a35f8352 podman-tests-debuginfo-5.8.2-5.el10_2.x86_64.rpm SHA-256: 9d5c0b22a8a7ae281e8cbdac6687ecb2c318712a92cf2feb9e097c7ff77b2f1e Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM podman-5.8.2-5.el10_2.src.rpm SHA-256: 9131ac45cf9c77e7c4e62484e99283f2ecee29cf12d50b7022cbdf1155074b00 x86_64 podman-5.8.2-5.el10_2.x86_64.rpm SHA-256: cfaeb27e62a80521488458574f5d507b64d40cf6351403c95a968df632f0b805 podman-debuginfo-5.8.2-5.el10_2.x86_64.rpm SHA-256: 0252805e47e0b78a55d02e1362fe63daf2b42bcbf682c4c2beeea934077ff7a7 podman-debugsource-5.8.2-5.el10_2.x86_64.rpm SHA-256: fccaa08ed90eabcc4f29698386618969c1a2f5d4e81b38f1ce3765258ddf1998 podman-docker-5.8.2-5.el10_2.noarch.rpm SHA-256: 71a3da2b1e22689a861e6d567d0d99aa1c8c6c4ab3d3ad4734a1022cd09a8d1b podman-remote-5.8.2-5.el10_2.x86_64.rpm SHA-256: 14fd5e989ccf409fb82a9d8a50b8cf9110f2376c9501deb431d906fe688ffbbf podman-remote-debuginfo-5.8.2-5.el10_2.x86_64.rpm SHA-256: f0d71e3529f7e0e308ab874332f544fb4417dcca5aea1c0b06044191a35f8352 podman-tests-debuginfo-5.8.2-5.el10_2.x86_64.rpm SHA-256: 9d5c0b22a8a7ae281e8cbdac6687ecb2c318712a92cf2feb9e097c7ff77b2f1e Red Hat Enterprise Linux for IBM z Systems 10 SRPM podman-5.8.2-5.el10_2.src.rpm SHA-256: 9131ac45cf9c77e7c4e62484e99283f2ecee29cf12d50b7022cbdf1155074b00 s390x podman-5.8.2-5.el10_2.s390x.rpm SHA-256: bca042eac034455ce4d9a317498f23fdf236a7ccf2e2f5ea320fb83b75fca910 podman-debuginfo-5.8.2-5.el10_2.s390x.rpm SHA-256: 7df41ba4d7e6bb1f6c69320664218ae016c94789196572ea02b583eea161ffd9 podman-debugsource-5.8.2-5.el10_2.s390x.rpm SHA-256: 2dbf2ac4638219a045b0e903a5f716413d5f105a53f4d786699c029654f01558 podman-docker-5.8.2-5.el10_2.noarch.rpm SHA-256: 71a3da2b1e22689a861e6d567d0d99aa1c8c6c4ab3d3ad4734a1022cd09a8d1b podman-remote-5.8.2-5.el10_2.s390x.rpm SHA-256: 25fa56c5695e359d02cab9c116d4c8f14a0a8dc0027e3fc62c89e687a8b2769d podman-remote-debuginfo-5.8.2-5.el10_2.s390x.rpm SHA-256: 6d9f8889057d76222a0dbcee0a314105c8e77d823e48a6f10b3b49a338f82cfe podman-tests-debuginfo-5.8.2-5.el10_2.s390x.rpm SHA-256: 08a90feb8d794d0cea28e735d352810e20eca23e29ee6364fe822f52a430324b Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM podman-5.8.2-5.el10_2.src.rpm SHA-256: 9131ac45cf9c77e7c4e62484e99283f2ecee29cf12d50b7022cbdf1155074b00 s390x podman-5.8.2-5.el10_2.s390x.rpm SHA-256: bca042eac034455ce4d9a317498f23fdf236a7ccf2e2f5ea320fb83b75fca910 podman-debuginfo-5.8.2-5.el10_2.s390x.rpm SHA-256: 7df41ba4d7e6bb1f6c69320664218ae016c94789196572ea02b583eea161ffd9 podman-debugsource-5.8.2-5.el10_2.s390x.rpm SHA-256: 2dbf2ac4638219a045b0e903a5f716413d5f105a53f4d786699c029654f01558 podman-docker-5.8.2-5.el10_2.noarch.rpm SHA-256: 71a3da2b1e22689a861e6d567d0d99aa1c8c6c4ab3d3ad4734a1022cd09a8d1b podman-remote-5.8.2-5.el10_2.s390x.rpm SHA-256: 25fa56c5695e359d02cab9c116d4c8f14a0a8dc0027e3fc62c89e687a8b2769d podman-remote-debuginfo-5.8.2-5.el10_2.s390x.rpm SHA-256: 6d9f8889057d76222a0dbcee0a314105c8e77d823e48a6f10b3b49a338f82cfe podman-tests-debuginfo-5.8.2-5.el10_2.s390x.rpm SHA-256: 08a90feb8d794d0cea28e735d352810e20eca23e29ee6364fe822f52a430324b Red Hat Enterprise Linux for Power, little endian 10 SRPM podman-5.8.2-5.el10_2.src.rpm SHA-256: 9131ac45cf9c77e7c4e62484e99283f2ecee29cf12d50b7022cbdf1155074b00 ppc64le podman-5.8.2-5.el10_2.ppc64le.rpm SHA-256: 2c7651726cd8944a7c43b494c593ae7f8c1d71e587c271f2dab3b64618231b5a podman-debuginfo-5.8.2-5.el10_2.ppc64le.rpm SHA-256: 393a4295889e97f9903c98a84b4d47e16c424907446cd76b4a472fe60d0c0278 podman-debugsource-5.8.2-5.el10_2.ppc64le.rpm SHA-256: 013ca9d685b684cc010166a75b3b9b4b05cbfcc8526311f67b607b4d207f1e1f podman-docker-5.8.2-5.el10_2.noarch.rpm SHA-256: 71a3da2b1e22689a861e6d567d0d99aa1c8c6c4ab3d3ad4734a1022cd09a8d1b podman-remote-5.8.2-5.el10_2.ppc64le.rpm SHA-256: 5d7826f0fd638b163a7ce3ce67b89cec52293c3cc34b9409fe9a81c9256a8a71 podman-remote-debuginfo-5.8.2-5.el10_2.ppc64le.rpm SHA-256: 70b1061b641feb60ad057cb8db39ded2c18808e0ed767c3ea17c3242498a7606 podman-tests-debuginfo-5.8.2-5.el10_2.ppc64le.rpm SHA-256: 45909d492e537b92a85ba2f6fa91bb64664a04cc19a9456c599188827180c242 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM podman-5.8.2-5.el10_2.src.rpm SHA-256: 9131ac45cf9c77e7c4e62484e99283f2ecee29cf12d50b7022cbdf1155074b00 ppc64le podman-5.8.2-5.el10_2.ppc64le.rpm SHA-256: 2c7651726cd8944a7c43b494c593ae7f8c1d71e587c271f2dab3b64618231b5a podman-debuginfo-5.8.2-5.el10_2.ppc64le.rpm SHA-256: 393a4295889e97f9903c98a84b4d47e16c424907446cd76b4a472fe60d0c0278 podman-debugsource-5.8.2-5.el10_2.ppc64le.rpm SHA-256: 013ca9d685b684cc010166a75b3b9b4b05cbfcc8526311f67b607b4d207f1e1f podman-docker-5.8.2-5.el10_2.noarch.rpm SHA-256: 71a3da2b1e22689a861e6d567d0d99aa1c8c6c4ab3d3ad4734a1022cd09a8d1b podman-remote-5.8.2-5.el10_2.ppc64le.rpm SHA-256: 5d7826f0fd638b163a7ce3ce67b89cec52293c3cc34b9409fe9a81c9256a8a71 podman-remote-debuginfo-5.8.2-5.el10_2.ppc64le.rpm SHA-256: 70b1061b641feb60ad057cb8db39ded2c18808e0ed767c3ea17c3242498a7606 podman-tests-debuginfo-5.8.2-5.el10_2.ppc64le.rpm SHA-256: 45909d492e537b92a85ba2f6fa91bb64664a04cc19a9456c599188827180c242 Red Hat Enterprise Linux for ARM 64 10 SRPM podman-5.8.2-5.el10_2.src.rpm SHA-256: 9131ac45cf9c77e7c4e62484e99283f2ecee29cf12d50b7022cbdf1155074b00 aarch64 podman-5.8.2-5.el10_2.aarch64.rpm SHA-256: c91b7686bf6235c178aaa3a9a45694686abfe0b6bfc9d8df5cf1f2717155d001 podman-debuginfo-5.8.2-5.el10_2.aarch64.rpm SHA-256: 5b588715de30de2ee25ed7ff4951034d86528c094114a8ac214dd6b82f5758ed podman-debugsource-5.8.2-5.el10_2.aarch64.rpm SHA-256: 7b7c6b770e064e56e74af006d4f827e12a9e7eb51ee6fbcc677eb02498ca38a2 podman-docker-5.8.2-5.el10_2.noarch.rpm SHA-256: 71a3da2b1e22689a861e6d567d0d99aa1c8c6c4ab3d3ad4734a1022cd09a8d1b pod