RLSA-2026:93464: Moderate: podman security update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.
Security Fix(es):
podman: Arbitrary file write when importing OCI archive (CVE-2025-11395)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/podmanto a version that resolves this vulnerability.Fixed in 7:5.8.2-12.el10_2
Event History
Frequently Asked Questions
Which environments are exposed to this issue?
Rocky Linux systems using podman are exposed when they import OCI archives. The advisory does not identify affected or fixed package versions.
What access does an attacker need?
The CVSS vector indicates adjacent-network access and low privileges are required. No user interaction is required.
What is the potential impact?
The issue can allow an arbitrary file write during OCI archive import. The advisory rates confidentiality, integrity, and availability impact as low.