RHSA-2026:37385

Details

Details:

Red Hat build of Podman Desktop is a graphical tool for managing containers using Podman. It allows users to run, manage, and configure containers and container images using a desktop GUI.

Most notable CVE and Bug Fix(es) and Enhancement(s):

Issues for CVE fix 1.1.1 (JIRA:RHDESK-595)
Fix for RHDESK-529, RHDESK-530, RHDESK-531 - "fast-uri: Path traversal vulnerability allows bypass of security policies (CVE-2026-6321)"
Fix for RHDESK-611 - "protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors (CVE-2026-44293)"
Fix for RHDESK-640 - "fast-uri: URI authority bypass due to improper delimiter handling (CVE-2026-6322)"

Affected Packages

rh-podman-desktop

RHEL 10

Fixed in:

0:1.1.1-1.el10_2

References

ADVISORY

https://access.redhat.com/errata/RHSA-2026:37385

WEB

https://access.redhat.com/security/updates/classification/#important

WEB

https://issues.redhat.com/browse/RHEL-182245

ADVISORY

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_37385.json