This Red Hat security update addresses three high-severity (CVSS 7.5) Denial of Service vulnerabilities in the Go crypto/x509 and crypto/tls libraries used by podman, stemming from inefficient certificate chain validation and handling of TLS 1.3 key update messages. The underlying Go runtime versions affected are go < 1.25.9 and go >= 1.26.0 < 1.26.2. The fix is provided by updating the podman package for Red Hat Enterprise Linux 9 to a version that incorporates Go versions 1.25.9 or 1.26.2.
Red Hat Product Errata RHSA-2026:26447 - Security Advisory Issued: 2026-06-16 Updated: 2026-06-16 RHSA-2026:26447 - Security Advisory Overview Updated Packages Synopsis Important: podman security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for podman is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2456333 - CVE-2026-32281 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation BZ - 2456338 - CVE-2026-32283 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages BZ - 2456339 - CVE-2026-32280 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building CVEs CVE-2026-32280 CVE-2026-32281 CVE-2026-32283 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM podman-5.8.2-3.el9_8.src.rpm SHA-256: c55fcfff5bff059683a2c6f27b9063825cb42fff1c214c22fa0e0d20a8574f27 x86_64 podman-5.8.2-3.el9_8.x86_64.rpm SHA-256: cfe0f322a4d20cab6793948b9b1c8b5c0c933799f2eba32d942e014dc97d0aa6 podman-debuginfo-5.8.2-3.el9_8.x86_64.rpm SHA-256: c9db3358fd3b1a46093b4f71a79b406d44453e63db1f587c6ab35b335885bf6f podman-debugsource-5.8.2-3.el9_8.x86_64.rpm SHA-256: 5c59b1541ef96a48efa3c649ef1165a109b555b2bd4bf759b612060acd9692fb podman-docker-5.8.2-3.el9_8.noarch.rpm SHA-256: 7c38e425dd9d9c29f736cffb3980d0f76fd8415d9b2cce5ccf3558f0f9fb7e11 podman-plugins-5.8.2-3.el9_8.x86_64.rpm SHA-256: 16516bd6025d7638e9fa89300e47ced920ebe669ba1afd534110f496d1926302 podman-plugins-debuginfo-5.8.2-3.el9_8.x86_64.rpm SHA-256: a0f07e4ae67c7f16fd9479b06b1b518837a1fef98341f237f3cd861747bf685e podman-remote-5.8.2-3.el9_8.x86_64.rpm SHA-256: 76ed156baba89779b95b5216d689542e30d5112749547c0d7ec5235e379e2c60 podman-remote-debuginfo-5.8.2-3.el9_8.x86_64.rpm SHA-256: 44cb1e8cd8d3e4490ede79f766fb3adc05cb7520d1ba8cc0b87f6dbd2dd5b86d podman-tests-5.8.2-3.el9_8.x86_64.rpm SHA-256: fda9527ff8e9c2bfb216a65de2407f742d430ee42fceb032d1a036bf484ce14c podman-tests-debuginfo-5.8.2-3.el9_8.x86_64.rpm SHA-256: db4815ee3f16ba28803d9b401caf5367b04dba1942b511364139cd54f4a6fa41 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM podman-5.8.2-3.el9_8.src.rpm SHA-256: c55fcfff5bff059683a2c6f27b9063825cb42fff1c214c22fa0e0d20a8574f27 x86_64 podman-5.8.2-3.el9_8.x86_64.rpm SHA-256: cfe0f322a4d20cab6793948b9b1c8b5c0c933799f2eba32d942e014dc97d0aa6 podman-debuginfo-5.8.2-3.el9_8.x86_64.rpm SHA-256: c9db3358fd3b1a46093b4f71a79b406d44453e63db1f587c6ab35b335885bf6f podman-debugsource-5.8.2-3.el9_8.x86_64.rpm SHA-256: 5c59b1541ef96a48efa3c649ef1165a109b555b2bd4bf759b612060acd9692fb podman-docker-5.8.2-3.el9_8.noarch.rpm SHA-256: 7c38e425dd9d9c29f736cffb3980d0f76fd8415d9b2cce5ccf3558f0f9fb7e11 podman-plugins-5.8.2-3.el9_8.x86_64.rpm SHA-256: 16516bd6025d7638e9fa89300e47ced920ebe669ba1afd534110f496d1926302 podman-plugins-debuginfo-5.8.2-3.el9_8.x86_64.rpm SHA-256: a0f07e4ae67c7f16fd9479b06b1b518837a1fef98341f237f3cd861747bf685e podman-remote-5.8.2-3.el9_8.x86_64.rpm SHA-256: 76ed156baba89779b95b5216d689542e30d5112749547c0d7ec5235e379e2c60 podman-remote-debuginfo-5.8.2-3.el9_8.x86_64.rpm SHA-256: 44cb1e8cd8d3e4490ede79f766fb3adc05cb7520d1ba8cc0b87f6dbd2dd5b86d podman-tests-5.8.2-3.el9_8.x86_64.rpm SHA-256: fda9527ff8e9c2bfb216a65de2407f742d430ee42fceb032d1a036bf484ce14c podman-tests-debuginfo-5.8.2-3.el9_8.x86_64.rpm SHA-256: db4815ee3f16ba28803d9b401caf5367b04dba1942b511364139cd54f4a6fa41 Red Hat Enterprise Linux for IBM z Systems 9 SRPM podman-5.8.2-3.el9_8.src.rpm SHA-256: c55fcfff5bff059683a2c6f27b9063825cb42fff1c214c22fa0e0d20a8574f27 s390x podman-5.8.2-3.el9_8.s390x.rpm SHA-256: 48ad08cd8b1a45c5d8190f9507ef14f97b2596fb67feb43ea87075fb47420dde podman-debuginfo-5.8.2-3.el9_8.s390x.rpm SHA-256: a7741e1efdc459b2bb2f70170da5abbe2592a43eb24da3bbfef46dbe1147e024 podman-debugsource-5.8.2-3.el9_8.s390x.rpm SHA-256: 6825ed1ffeba16d002acfb62c3c677ed608c0275bd75b1d7788a00c71025f077 podman-docker-5.8.2-3.el9_8.noarch.rpm SHA-256: 7c38e425dd9d9c29f736cffb3980d0f76fd8415d9b2cce5ccf3558f0f9fb7e11 podman-plugins-5.8.2-3.el9_8.s390x.rpm SHA-256: 70f1cdd3eb2c82950d0afe61f23823f3fc88944fc85d503802f072ac1d61b630 podman-plugins-debuginfo-5.8.2-3.el9_8.s390x.rpm SHA-256: a7d5d492b861233524f61274ede5bf2d7788264758e5945437f61e4f54207cb0 podman-remote-5.8.2-3.el9_8.s390x.rpm SHA-256: fd239a89fe868f009ccafa3aadd0723d3e385c5cdd1c4110bae0df0ebc80689c podman-remote-debuginfo-5.8.2-3.el9_8.s390x.rpm SHA-256: ee8ab7db8f24b7d332bc1728fca4c0f5803ed7513330e2e74489e798fbdccadb podman-tests-5.8.2-3.el9_8.s390x.rpm SHA-256: 91ea70d1b3c5965ccf6f116285cdd319d1a45d161decef49f084c0b39d4dc54c podman-tests-debuginfo-5.8.2-3.el9_8.s390x.rpm SHA-256: 3b3d4dc716866d7cfb12542589c70273cf5bf143928b3973f9456d1f436c3d45 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM podman-5.8.2-3.el9_8.src.rpm SHA-256: c55fcfff5bff059683a2c6f27b9063825cb42fff1c214c22fa0e0d20a8574f27 s390x podman-5.8.2-3.el9_8.s390x.rpm SHA-256: 48ad08cd8b1a45c5d8190f9507ef14f97b2596fb67feb43ea87075fb47420dde podman-debuginfo-5.8.2-3.el9_8.s390x.rpm SHA-256: a7741e1efdc459b2bb2f70170da5abbe2592a43eb24da3bbfef46dbe1147e024 podman-debugsource-5.8.2-3.el9_8.s390x.rpm SHA-256: 6825ed1ffeba16d002acfb62c3c677ed608c0275bd75b1d7788a00c71025f077 podman-docker-5.8.2-3.el9_8.noarch.rpm SHA-256: 7c38e425dd9d9c29f736cffb3980d0f76fd8415d9b2cce5ccf3558f0f9fb7e11 podman-plugins-5.8.2-3.el9_8.s390x.rpm SHA-256: 70f1cdd3eb2c82950d0afe61f23823f3fc88944fc85d503802f072ac1d61b630 podman-plugins-debuginfo-5.8.2-3.el9_8.s390x.rpm SHA-256: a7d5d492b861233524f61274ede5bf2d7788264758e5945437f61e4f54207cb0 podman-remote-5.8.2-3.el9_8.s390x.rpm SHA-256: fd239a89fe868f009ccafa3aadd0723d3e385c5cdd1c4110bae0df0ebc80689c podman-remote-debuginfo-5.8.2-3.el9_8.s390x.rpm SHA-256: ee8ab7db8f24b7d332bc1728fca4c0f5803ed7513330e2e74489e798fbdccadb podman-tests-5.8.2-3.el9_8.s390x.rpm SHA-256: 91ea70d1b3c5965ccf6f116285cdd319d1a45d161decef49f084c0b39d4dc54c podman-tests-debuginfo-5.8.2-3.el9_8.s390x.rpm SHA-256: 3b3d4dc716866d7cfb12542589c70273cf5bf143928b3973f9456d1f436c3d45 Red Hat Enterprise Linux for Power, little endian 9 SRPM podman-5.8.2-3.el9_8.src.rpm SHA-256: c55fcfff5bff059683a2c6f27b9063825cb42fff1c214c22fa0e0d20a8574f27 ppc64le podman-5.8.2-3.el9_8.ppc64le.rpm SHA-256: 3ddeeb5477e5bada962d46ed874f958553d5cb4dc75f504a24079c5f613021b0 podman-debuginfo-5.8.2-3.el9_8.ppc64le.rpm SHA-256: 3810968a0cdd27f6d148f928b3197bfe3a2186389e80f8ffda69fa87c8e36c0c podman-debugsource-5.8.2-3.el9_8.ppc64le.rpm SHA-256: eb8c244d9520b12674cf16eec897df73a6a90c7fc0a4ab89c5ba39c21ec981f2 podman-docker-5.8.2-3.el9_8.noarch.rpm SHA-256: 7c38e425dd9d9c29f736cffb3980d0f76fd8415d9b2cce5ccf3558f0f9fb7e11 podman-plugins-5.8.2-3.el9_8.ppc64le.rpm SHA-256: 3b21f176bf098066f516dad92430102189d18da0de1163fb9eb8c6a72c973080 podman-plugins-debuginfo-5.8.2-3.el9_8.ppc64le.rpm SHA-256: 13a70a02c65860de98b0d69a95a962e22aae41c395b7b0fa3cd6a1687d45a04d podman-remote-5.8.2-3.el9_8.ppc64le.rpm SHA-256: d105bfc312c0bf524e60e36fe2f55f951fe2f6fc8619f55585506b499da89eef podman-remote-debuginfo-5.8.2-3.el9_8.ppc64le.rpm SHA-256: 10bb298db72b8f59bc3c0730397446b588bf48a8b47a2d97a832639578836080 podman-tests-5.8.2-3.el9_8.ppc64le.rpm SHA-256: 30d8954b5da9eabddc9fd4fc5d746736d3684332443e6cabbb98d6c8b1550be4 podman-tests-debuginfo-5.8.2-3.el9_8.ppc64le.rpm SHA-256: dfeca5ed8040871c75973f3a585b019a