RHSA-2024:3826 — Security Advisory
Red Hat Security Advisory: podman security and bug fix update
Severity
ModerateRed Hat Product Security
Products
Official CSAF product identity
Published · June 12, 2024
Updated · November 4, 2026
Topic
An update for podman is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.
Security Fixes:
-
podman: jose-go: improper handling of highly compressed data (CVE-2024-28180)
-
podman: golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)
-
podman: jose: resource exhaustion (CVE-2024-28176)