{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for podman is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.\n\nSecurity Fix(es):\n\n* golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)\n\n* golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)\n\n* golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)\n\n* golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)\n\n* golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)\n\n* golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)\n\n* golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681)\n\n* podman: Podman: Information disclosure via malicious container image environment variables (CVE-2026-57231)\n\nBug Fix(es) and Enhancement(s):\n\n* podman does not clean up all files and leaves orphaned files consuming disk space [rhel-10.2.z] (JIRA:RHEL-173842)\n\n* [FJ10.2 Bug]: [REG]The \"podman-remote save\" command fails for rootless users. [rhel-10.2.z] (JIRA:RHEL-192440)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:37072",
        "url": "https://access.redhat.com/errata/RHSA-2026:37072"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2480680",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
      },
      {
        "category": "external",
        "summary": "2480681",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
      },
      {
        "category": "external",
        "summary": "2480684",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
      },
      {
        "category": "external",
        "summary": "2480685",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
      },
      {
        "category": "external",
        "summary": "2480688",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
      },
      {
        "category": "external",
        "summary": "2480757",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
      },
      {
        "category": "external",
        "summary": "2480761",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
      },
      {
        "category": "external",
        "summary": "2493620",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493620"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_37072.json"
      }
    ],
    "title": "Red Hat Security Advisory: podman security, bug fix, and enhancement update",
    "tracking": {
      "current_release_date": "2026-07-10T13:46:35+00:00",
      "generator": {
        "date": "2026-07-10T13:46:35+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.2"
        }
      },
      "id": "RHSA-2026:37072",
      "initial_release_date": "2026-07-09T05:35:52+00:00",
      "revision_history": [
        {
          "date": "2026-07-09T05:35:52+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-07-09T05:35:52+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-10T13:46:35+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                  "product_id": "AppStream-10.2.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
                  "product_id": "CRB-10.2.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-7:5.8.2-4.el10_2.x86_64",
                "product": {
                  "name": "podman-7:5.8.2-4.el10_2.x86_64",
                  "product_id": "podman-7:5.8.2-4.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman@5.8.2-4.el10_2?arch=x86_64\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-7:5.8.2-4.el10_2.x86_64",
                "product": {
                  "name": "podman-remote-7:5.8.2-4.el10_2.x86_64",
                  "product_id": "podman-remote-7:5.8.2-4.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-remote@5.8.2-4.el10_2?arch=x86_64\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-debugsource-7:5.8.2-4.el10_2.x86_64",
                "product": {
                  "name": "podman-debugsource-7:5.8.2-4.el10_2.x86_64",
                  "product_id": "podman-debugsource-7:5.8.2-4.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-debugsource@5.8.2-4.el10_2?arch=x86_64\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
                "product": {
                  "name": "podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
                  "product_id": "podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-debuginfo@5.8.2-4.el10_2?arch=x86_64\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
                "product": {
                  "name": "podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
                  "product_id": "podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-remote-debuginfo@5.8.2-4.el10_2?arch=x86_64\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
                "product": {
                  "name": "podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
                  "product_id": "podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-tests-debuginfo@5.8.2-4.el10_2?arch=x86_64\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-tests-7:5.8.2-4.el10_2.x86_64",
                "product": {
                  "name": "podman-tests-7:5.8.2-4.el10_2.x86_64",
                  "product_id": "podman-tests-7:5.8.2-4.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-tests@5.8.2-4.el10_2?arch=x86_64\u0026epoch=7"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-7:5.8.2-4.el10_2.src",
                "product": {
                  "name": "podman-7:5.8.2-4.el10_2.src",
                  "product_id": "podman-7:5.8.2-4.el10_2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman@5.8.2-4.el10_2?arch=src\u0026epoch=7"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-7:5.8.2-4.el10_2.aarch64",
                "product": {
                  "name": "podman-7:5.8.2-4.el10_2.aarch64",
                  "product_id": "podman-7:5.8.2-4.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman@5.8.2-4.el10_2?arch=aarch64\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-7:5.8.2-4.el10_2.aarch64",
                "product": {
                  "name": "podman-remote-7:5.8.2-4.el10_2.aarch64",
                  "product_id": "podman-remote-7:5.8.2-4.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-remote@5.8.2-4.el10_2?arch=aarch64\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-debugsource-7:5.8.2-4.el10_2.aarch64",
                "product": {
                  "name": "podman-debugsource-7:5.8.2-4.el10_2.aarch64",
                  "product_id": "podman-debugsource-7:5.8.2-4.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-debugsource@5.8.2-4.el10_2?arch=aarch64\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
                "product": {
                  "name": "podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
                  "product_id": "podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-debuginfo@5.8.2-4.el10_2?arch=aarch64\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
                "product": {
                  "name": "podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
                  "product_id": "podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-remote-debuginfo@5.8.2-4.el10_2?arch=aarch64\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
                "product": {
                  "name": "podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
                  "product_id": "podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-tests-debuginfo@5.8.2-4.el10_2?arch=aarch64\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-tests-7:5.8.2-4.el10_2.aarch64",
                "product": {
                  "name": "podman-tests-7:5.8.2-4.el10_2.aarch64",
                  "product_id": "podman-tests-7:5.8.2-4.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-tests@5.8.2-4.el10_2?arch=aarch64\u0026epoch=7"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-7:5.8.2-4.el10_2.ppc64le",
                "product": {
                  "name": "podman-7:5.8.2-4.el10_2.ppc64le",
                  "product_id": "podman-7:5.8.2-4.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman@5.8.2-4.el10_2?arch=ppc64le\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-7:5.8.2-4.el10_2.ppc64le",
                "product": {
                  "name": "podman-remote-7:5.8.2-4.el10_2.ppc64le",
                  "product_id": "podman-remote-7:5.8.2-4.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-remote@5.8.2-4.el10_2?arch=ppc64le\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
                "product": {
                  "name": "podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
                  "product_id": "podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-debugsource@5.8.2-4.el10_2?arch=ppc64le\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
                "product": {
                  "name": "podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
                  "product_id": "podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-debuginfo@5.8.2-4.el10_2?arch=ppc64le\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
                "product": {
                  "name": "podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
                  "product_id": "podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-remote-debuginfo@5.8.2-4.el10_2?arch=ppc64le\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
                "product": {
                  "name": "podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
                  "product_id": "podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-tests-debuginfo@5.8.2-4.el10_2?arch=ppc64le\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-tests-7:5.8.2-4.el10_2.ppc64le",
                "product": {
                  "name": "podman-tests-7:5.8.2-4.el10_2.ppc64le",
                  "product_id": "podman-tests-7:5.8.2-4.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-tests@5.8.2-4.el10_2?arch=ppc64le\u0026epoch=7"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-7:5.8.2-4.el10_2.s390x",
                "product": {
                  "name": "podman-7:5.8.2-4.el10_2.s390x",
                  "product_id": "podman-7:5.8.2-4.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman@5.8.2-4.el10_2?arch=s390x\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-7:5.8.2-4.el10_2.s390x",
                "product": {
                  "name": "podman-remote-7:5.8.2-4.el10_2.s390x",
                  "product_id": "podman-remote-7:5.8.2-4.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-remote@5.8.2-4.el10_2?arch=s390x\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-debugsource-7:5.8.2-4.el10_2.s390x",
                "product": {
                  "name": "podman-debugsource-7:5.8.2-4.el10_2.s390x",
                  "product_id": "podman-debugsource-7:5.8.2-4.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-debugsource@5.8.2-4.el10_2?arch=s390x\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-debuginfo-7:5.8.2-4.el10_2.s390x",
                "product": {
                  "name": "podman-debuginfo-7:5.8.2-4.el10_2.s390x",
                  "product_id": "podman-debuginfo-7:5.8.2-4.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-debuginfo@5.8.2-4.el10_2?arch=s390x\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
                "product": {
                  "name": "podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
                  "product_id": "podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-remote-debuginfo@5.8.2-4.el10_2?arch=s390x\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
                "product": {
                  "name": "podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
                  "product_id": "podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-tests-debuginfo@5.8.2-4.el10_2?arch=s390x\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-tests-7:5.8.2-4.el10_2.s390x",
                "product": {
                  "name": "podman-tests-7:5.8.2-4.el10_2.s390x",
                  "product_id": "podman-tests-7:5.8.2-4.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-tests@5.8.2-4.el10_2?arch=s390x\u0026epoch=7"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-docker-7:5.8.2-4.el10_2.noarch",
                "product": {
                  "name": "podman-docker-7:5.8.2-4.el10_2.noarch",
                  "product_id": "podman-docker-7:5.8.2-4.el10_2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-docker@5.8.2-4.el10_2?arch=noarch\u0026epoch=7"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-7:5.8.2-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64"
        },
        "product_reference": "podman-7:5.8.2-4.el10_2.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-7:5.8.2-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le"
        },
        "product_reference": "podman-7:5.8.2-4.el10_2.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-7:5.8.2-4.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x"
        },
        "product_reference": "podman-7:5.8.2-4.el10_2.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-7:5.8.2-4.el10_2.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src"
        },
        "product_reference": "podman-7:5.8.2-4.el10_2.src",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-7:5.8.2-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64"
        },
        "product_reference": "podman-7:5.8.2-4.el10_2.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debuginfo-7:5.8.2-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64"
        },
        "product_reference": "podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debuginfo-7:5.8.2-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le"
        },
        "product_reference": "podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debuginfo-7:5.8.2-4.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x"
        },
        "product_reference": "podman-debuginfo-7:5.8.2-4.el10_2.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debuginfo-7:5.8.2-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64"
        },
        "product_reference": "podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debugsource-7:5.8.2-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64"
        },
        "product_reference": "podman-debugsource-7:5.8.2-4.el10_2.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debugsource-7:5.8.2-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le"
        },
        "product_reference": "podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debugsource-7:5.8.2-4.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x"
        },
        "product_reference": "podman-debugsource-7:5.8.2-4.el10_2.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debugsource-7:5.8.2-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64"
        },
        "product_reference": "podman-debugsource-7:5.8.2-4.el10_2.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-docker-7:5.8.2-4.el10_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch"
        },
        "product_reference": "podman-docker-7:5.8.2-4.el10_2.noarch",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-7:5.8.2-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64"
        },
        "product_reference": "podman-remote-7:5.8.2-4.el10_2.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-7:5.8.2-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le"
        },
        "product_reference": "podman-remote-7:5.8.2-4.el10_2.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-7:5.8.2-4.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x"
        },
        "product_reference": "podman-remote-7:5.8.2-4.el10_2.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-7:5.8.2-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64"
        },
        "product_reference": "podman-remote-7:5.8.2-4.el10_2.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64"
        },
        "product_reference": "podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le"
        },
        "product_reference": "podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x"
        },
        "product_reference": "podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64"
        },
        "product_reference": "podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64"
        },
        "product_reference": "podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le"
        },
        "product_reference": "podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x"
        },
        "product_reference": "podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
        },
        "product_reference": "podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debuginfo-7:5.8.2-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64"
        },
        "product_reference": "podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debuginfo-7:5.8.2-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le"
        },
        "product_reference": "podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debuginfo-7:5.8.2-4.el10_2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x"
        },
        "product_reference": "podman-debuginfo-7:5.8.2-4.el10_2.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debuginfo-7:5.8.2-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64"
        },
        "product_reference": "podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debugsource-7:5.8.2-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64"
        },
        "product_reference": "podman-debugsource-7:5.8.2-4.el10_2.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debugsource-7:5.8.2-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le"
        },
        "product_reference": "podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debugsource-7:5.8.2-4.el10_2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x"
        },
        "product_reference": "podman-debugsource-7:5.8.2-4.el10_2.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debugsource-7:5.8.2-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64"
        },
        "product_reference": "podman-debugsource-7:5.8.2-4.el10_2.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64"
        },
        "product_reference": "podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le"
        },
        "product_reference": "podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x"
        },
        "product_reference": "podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64"
        },
        "product_reference": "podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-tests-7:5.8.2-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64"
        },
        "product_reference": "podman-tests-7:5.8.2-4.el10_2.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-tests-7:5.8.2-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le"
        },
        "product_reference": "podman-tests-7:5.8.2-4.el10_2.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-tests-7:5.8.2-4.el10_2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x"
        },
        "product_reference": "podman-tests-7:5.8.2-4.el10_2.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-tests-7:5.8.2-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64"
        },
        "product_reference": "podman-tests-7:5.8.2-4.el10_2.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64"
        },
        "product_reference": "podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le"
        },
        "product_reference": "podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x"
        },
        "product_reference": "podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
        "relates_to_product_reference": "CRB-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
        },
        "product_reference": "podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
        "relates_to_product_reference": "CRB-10.2.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-25681",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:01:08.177603+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480761"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480761",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781703",
          "url": "https://go.dev/cl/781703"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79574",
          "url": "https://go.dev/issue/79574"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5029",
          "url": "https://pkg.go.dev/vuln/GO-2026-5029"
        }
      ],
      "release_date": "2026-05-22T15:01:21.975000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-09T05:35:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:37072"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
          "product_ids": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
    },
    {
      "cve": "CVE-2026-27136",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:00:56.609820+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480757"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480757",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781685",
          "url": "https://go.dev/cl/781685"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79575",
          "url": "https://go.dev/issue/79575"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5030",
          "url": "https://pkg.go.dev/vuln/GO-2026-5030"
        }
      ],
      "release_date": "2026-05-22T15:01:22.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-09T05:35:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:37072"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
    },
    {
      "cve": "CVE-2026-39829",
      "cwe": {
        "id": "CWE-1284",
        "name": "Improper Validation of Specified Quantity in Input"
      },
      "discovery_date": "2026-05-22T04:01:30.092249+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480681"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39829"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480681",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781641",
          "url": "https://go.dev/cl/781641"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781661",
          "url": "https://go.dev/cl/781661"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79565",
          "url": "https://go.dev/issue/79565"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5018",
          "url": "https://pkg.go.dev/vuln/GO-2026-5018"
        }
      ],
      "release_date": "2026-05-22T02:31:27.324000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-09T05:35:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:37072"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
    },
    {
      "cve": "CVE-2026-39830",
      "cwe": {
        "id": "CWE-772",
        "name": "Missing Release of Resource after Effective Lifetime"
      },
      "discovery_date": "2026-05-22T04:01:38.517202+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480684"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39830"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480684",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781640",
          "url": "https://go.dev/cl/781640"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781664",
          "url": "https://go.dev/cl/781664"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79564",
          "url": "https://go.dev/issue/79564"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5017",
          "url": "https://pkg.go.dev/vuln/GO-2026-5017"
        }
      ],
      "release_date": "2026-05-22T02:31:27.208000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-09T05:35:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:37072"
        },
        {
          "category": "workaround",
          "details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
          "product_ids": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
    },
    {
      "cve": "CVE-2026-39832",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "discovery_date": "2026-05-22T04:01:41.402561+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480685"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39832"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480685",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/778642",
          "url": "https://go.dev/cl/778642"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79435",
          "url": "https://go.dev/issue/79435"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5006",
          "url": "https://pkg.go.dev/vuln/GO-2026-5006"
        }
      ],
      "release_date": "2026-05-22T02:31:26.660000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-09T05:35:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:37072"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
    },
    {
      "cve": "CVE-2026-39835",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2026-05-22T04:01:27.279943+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480680"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39835"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480680",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781660",
          "url": "https://go.dev/cl/781660"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79563",
          "url": "https://go.dev/issue/79563"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5015",
          "url": "https://pkg.go.dev/vuln/GO-2026-5015"
        }
      ],
      "release_date": "2026-05-22T02:31:26.982000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-09T05:35:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:37072"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
    },
    {
      "cve": "CVE-2026-42508",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-05-22T04:01:49.515058+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480688"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42508"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480688",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781220",
          "url": "https://go.dev/cl/781220"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79568",
          "url": "https://go.dev/issue/79568"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5021",
          "url": "https://pkg.go.dev/vuln/GO-2026-5021"
        }
      ],
      "release_date": "2026-05-22T02:31:27.644000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-09T05:35:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:37072"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
    },
    {
      "cve": "CVE-2026-57231",
      "cwe": {
        "id": "CWE-914",
        "name": "Improper Control of Dynamically-Identified Variables"
      },
      "discovery_date": "2026-06-26T17:01:34.294165+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2493620"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Podman, a tool for managing OCI containers and pods. A malicious container image can be crafted with an environment variable that has a key but no value, or an asterisk (*), to trick Podman. This vulnerability causes Podman to pass host environment variables into the container. Consequently, a malicious image could exfiltrate all Podman environment variables set in the session from which the container is launched, leading to information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "podman: Podman: Information disclosure via malicious container image environment variables",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
          "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
          "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
          "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-57231"
        },
        {
          "category": "external",
          "summary": "RHBZ#2493620",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493620"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-57231",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-57231"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-57231",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57231"
        },
        {
          "category": "external",
          "summary": "https://github.com/podman-container-tools/podman/commit/6c431b73dbf8e4b20b778644d7a80caebdb75050",
          "url": "https://github.com/podman-container-tools/podman/commit/6c431b73dbf8e4b20b778644d7a80caebdb75050"
        },
        {
          "category": "external",
          "summary": "https://github.com/podman-container-tools/podman/security/advisories/GHSA-4hq8-gpf5-8p68",
          "url": "https://github.com/podman-container-tools/podman/security/advisories/GHSA-4hq8-gpf5-8p68"
        }
      ],
      "release_date": "2026-06-26T16:29:02.092000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-09T05:35:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:37072"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.src",
            "AppStream-10.2.Z:podman-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-docker-7:5.8.2-4.el10_2.noarch",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "AppStream-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-debugsource-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-remote-debuginfo-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-7:5.8.2-4.el10_2.x86_64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.aarch64",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.ppc64le",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.s390x",
            "CRB-10.2.Z:podman-tests-debuginfo-7:5.8.2-4.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "podman: Podman: Information disclosure via malicious container image environment variables"
    }
  ]
}