Red Hat Product Errata RHSA-2026:38878 - Security Advisory Issued: 2026-07-13 Updated: 2026-07-13 RHSA-2026:38878 - Security Advisory Overview Updated Packages Synopsis Important: podman security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for podman is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): os: golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2498152 - CVE-2026-39822 os: golang: Go os.Root: Symlink following vulnerability allows directory traversal CVEs CVE-2026-39822 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM podman-5.8.2-5.el9_8.src.rpm SHA-256: 99dac4aad49a5ae4a39d6ec6b2af338c2f9de352ff83780fb0fb6010f7373dbe x86_64 podman-5.8.2-5.el9_8.x86_64.rpm SHA-256: 0a822e3dc97b0d4200ba98e868eab2d8532e1e10650412517bd01e4de9596eee podman-debuginfo-5.8.2-5.el9_8.x86_64.rpm SHA-256: 9499cb0d6ceac2815e29b1d40a3fb8be113e0b75d6aec24cb306cdbddbcd7e46 podman-debugsource-5.8.2-5.el9_8.x86_64.rpm SHA-256: de89d19d3b41161873598bf1cf03628855e3d02bdf37e92eae847fc40ecce58a podman-docker-5.8.2-5.el9_8.noarch.rpm SHA-256: 8826b86e194559b31f57b634f18b8054baa6e611d43fdc33cd76ea810d3ae1c3 podman-plugins-5.8.2-5.el9_8.x86_64.rpm SHA-256: e57e72127a48e9aaf549009a1f1ed25ffc95f9b1e5d042cf8b6ac993bbb1a1fb podman-plugins-debuginfo-5.8.2-5.el9_8.x86_64.rpm SHA-256: 75d3c90d2be2a91f1a687e205a6beae1e767c67d0f0e8c07d98bfc96ddf94f66 podman-remote-5.8.2-5.el9_8.x86_64.rpm SHA-256: c84b0da749192746bda9c2834a0953d593973ffda864b621cf04ab49111a4ca1 podman-remote-debuginfo-5.8.2-5.el9_8.x86_64.rpm SHA-256: 64d9c231573f721019755b0a512b19a09c8825032ad8a90eefaf6cd122ce9066 podman-tests-5.8.2-5.el9_8.x86_64.rpm SHA-256: 0ef93584e5a4becd7fc91a13ac1095778be786990c739a55649da6c3552d1bfc podman-tests-debuginfo-5.8.2-5.el9_8.x86_64.rpm SHA-256: 3a568b164ce7e28edb41b29aeba6fda2016d8868f0928fe4d96bd584cb71ee95 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM podman-5.8.2-5.el9_8.src.rpm SHA-256: 99dac4aad49a5ae4a39d6ec6b2af338c2f9de352ff83780fb0fb6010f7373dbe x86_64 podman-5.8.2-5.el9_8.x86_64.rpm SHA-256: 0a822e3dc97b0d4200ba98e868eab2d8532e1e10650412517bd01e4de9596eee podman-debuginfo-5.8.2-5.el9_8.x86_64.rpm SHA-256: 9499cb0d6ceac2815e29b1d40a3fb8be113e0b75d6aec24cb306cdbddbcd7e46 podman-debugsource-5.8.2-5.el9_8.x86_64.rpm SHA-256: de89d19d3b41161873598bf1cf03628855e3d02bdf37e92eae847fc40ecce58a podman-docker-5.8.2-5.el9_8.noarch.rpm SHA-256: 8826b86e194559b31f57b634f18b8054baa6e611d43fdc33cd76ea810d3ae1c3 podman-plugins-5.8.2-5.el9_8.x86_64.rpm SHA-256: e57e72127a48e9aaf549009a1f1ed25ffc95f9b1e5d042cf8b6ac993bbb1a1fb podman-plugins-debuginfo-5.8.2-5.el9_8.x86_64.rpm SHA-256: 75d3c90d2be2a91f1a687e205a6beae1e767c67d0f0e8c07d98bfc96ddf94f66 podman-remote-5.8.2-5.el9_8.x86_64.rpm SHA-256: c84b0da749192746bda9c2834a0953d593973ffda864b621cf04ab49111a4ca1 podman-remote-debuginfo-5.8.2-5.el9_8.x86_64.rpm SHA-256: 64d9c231573f721019755b0a512b19a09c8825032ad8a90eefaf6cd122ce9066 podman-tests-5.8.2-5.el9_8.x86_64.rpm SHA-256: 0ef93584e5a4becd7fc91a13ac1095778be786990c739a55649da6c3552d1bfc podman-tests-debuginfo-5.8.2-5.el9_8.x86_64.rpm SHA-256: 3a568b164ce7e28edb41b29aeba6fda2016d8868f0928fe4d96bd584cb71ee95 Red Hat Enterprise Linux for IBM z Systems 9 SRPM podman-5.8.2-5.el9_8.src.rpm SHA-256: 99dac4aad49a5ae4a39d6ec6b2af338c2f9de352ff83780fb0fb6010f7373dbe s390x podman-5.8.2-5.el9_8.s390x.rpm SHA-256: 80c97fd93a9ea3812a6405ceff0484dd48126c03852a6b77deb00fb9dfebd53a podman-debuginfo-5.8.2-5.el9_8.s390x.rpm SHA-256: 49b21301d54b6a5c6e4036244859a9fc989237eda1dad7b1776af4dfbbd6a1ed podman-debugsource-5.8.2-5.el9_8.s390x.rpm SHA-256: 3387b086f046d6989db41f93025cd8ee9834e247bee09968c83abe1d9b70253d podman-docker-5.8.2-5.el9_8.noarch.rpm SHA-256: 8826b86e194559b31f57b634f18b8054baa6e611d43fdc33cd76ea810d3ae1c3 podman-plugins-5.8.2-5.el9_8.s390x.rpm SHA-256: 8dc8f2e74281c4cfe4c64d70c380cd7163a001b005920cdb1296c1fbaa3f75ec podman-plugins-debuginfo-5.8.2-5.el9_8.s390x.rpm SHA-256: e3edc82aba85e4d3444ece0b165b8fe925776d0f01aab3dc14b060962ab7071f podman-remote-5.8.2-5.el9_8.s390x.rpm SHA-256: 86182a069b2787ef6cddbfff790bf78686115e50f609ebccdb215727023c5f31 podman-remote-debuginfo-5.8.2-5.el9_8.s390x.rpm SHA-256: 979984564e3e3ed3b50a96a503595835a0d08f8a6a438dca1ac8b6807a0d58fc podman-tests-5.8.2-5.el9_8.s390x.rpm SHA-256: 457c7473467e17f67abb2f0cbb098c1e7dfb55e8726f1cae674fd4b664b3dc2c podman-tests-debuginfo-5.8.2-5.el9_8.s390x.rpm SHA-256: efd8c186dce730903474a7ce4b97ede0670cfc1aa244d389c21bae09985be7e6 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM podman-5.8.2-5.el9_8.src.rpm SHA-256: 99dac4aad49a5ae4a39d6ec6b2af338c2f9de352ff83780fb0fb6010f7373dbe s390x podman-5.8.2-5.el9_8.s390x.rpm SHA-256: 80c97fd93a9ea3812a6405ceff0484dd48126c03852a6b77deb00fb9dfebd53a podman-debuginfo-5.8.2-5.el9_8.s390x.rpm SHA-256: 49b21301d54b6a5c6e4036244859a9fc989237eda1dad7b1776af4dfbbd6a1ed podman-debugsource-5.8.2-5.el9_8.s390x.rpm SHA-256: 3387b086f046d6989db41f93025cd8ee9834e247bee09968c83abe1d9b70253d podman-docker-5.8.2-5.el9_8.noarch.rpm SHA-256: 8826b86e194559b31f57b634f18b8054baa6e611d43fdc33cd76ea810d3ae1c3 podman-plugins-5.8.2-5.el9_8.s390x.rpm SHA-256: 8dc8f2e74281c4cfe4c64d70c380cd7163a001b005920cdb1296c1fbaa3f75ec podman-plugins-debuginfo-5.8.2-5.el9_8.s390x.rpm SHA-256: e3edc82aba85e4d3444ece0b165b8fe925776d0f01aab3dc14b060962ab7071f podman-remote-5.8.2-5.el9_8.s390x.rpm SHA-256: 86182a069b2787ef6cddbfff790bf78686115e50f609ebccdb215727023c5f31 podman-remote-debuginfo-5.8.2-5.el9_8.s390x.rpm SHA-256: 979984564e3e3ed3b50a96a503595835a0d08f8a6a438dca1ac8b6807a0d58fc podman-tests-5.8.2-5.el9_8.s390x.rpm SHA-256: 457c7473467e17f67abb2f0cbb098c1e7dfb55e8726f1cae674fd4b664b3dc2c podman-tests-debuginfo-5.8.2-5.el9_8.s390x.rpm SHA-256: efd8c186dce730903474a7ce4b97ede0670cfc1aa244d389c21bae09985be7e6 Red Hat Enterprise Linux for Power, little endian 9 SRPM podman-5.8.2-5.el9_8.src.rpm SHA-256: 99dac4aad49a5ae4a39d6ec6b2af338c2f9de352ff83780fb0fb6010f7373dbe ppc64le podman-5.8.2-5.el9_8.ppc64le.rpm SHA-256: f690c742bf967b62ad15659b5e7ca40bf9e9390912c292ebe1d3e4a0ef788108 podman-debuginfo-5.8.2-5.el9_8.ppc64le.rpm SHA-256: 9227cbfb3ae5bf638b30f02f924b812b2a126710310acf5a87e2c9b9eb5263e5 podman-debugsource-5.8.2-5.el9_8.ppc64le.rpm SHA-256: 09256bb18875266c677eb02573a48ed898210c86ae82300ec0f88494516f2a87 podman-docker-5.8.2-5.el9_8.noarch.rpm SHA-256: 8826b86e194559b31f57b634f18b8054baa6e611d43fdc33cd76ea810d3ae1c3 podman-plugins-5.8.2-5.el9_8.ppc64le.rpm SHA-256: 44811353c787055a4b42cc2760c212f0c89e40a1e4aaccee482e518cd13894bb podman-plugins-debuginfo-5.8.2-5.el9_8.ppc64le.rpm SHA-256: 1d733aa832263206ee77450b74919ae9d1c0c388f526a65845a81f1079dbe1a2 podman-remote-5.8.2-5.el9_8.ppc64le.rpm SHA-256: 64664018b3ac8d53ee80d3ac6289ef2d7f366d8bbeb0f8f8756632d49a445048 podman-remote-debuginfo-5.8.2-5.el9_8.ppc64le.rpm SHA-256: 5ec40336701bad54da35f76dc875edd083b6dae3da98fd6e64c2d2e30074048b podman-tests-5.8.2-5.el9_8.ppc64le.rpm SHA-256: b9f28f30eac78c388e5249487f152a9735c0614b93994bb632fea09c22a1c70a podman-tests-debuginfo-5.8.2-5.el9_8.ppc64le.rpm SHA-256: 23114f844dd975436dc9ab9e7d8c53e9e5226cd179e40a3c3b5c53fe29e12e7e Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM podman-5.8.2-5.el9_8.src.rpm SHA-256: 99dac4aad49a5ae4a39d6ec6b2af338c2f9de352ff83780fb0fb6010f7373dbe ppc64le podman-5.8.2-5.el9_8.ppc64le.rpm SHA-256: f690c742bf967b62ad15659b5e7ca40bf9e9390912c292ebe1d3e4a0ef788108 podman-debuginfo-5.8.2-5.el9_8.ppc64le.rpm SHA-256: 9227cbfb3ae5bf638b30f02f924b812b2a126710310acf5a87e2c9b9eb5263e5 podman-debugsource-5.8.2-5.el9_8.ppc64le.rpm SHA-256: 09256bb18875266c677eb02573a48ed898210