[CLSA-2026:1782214655] podman: Fix of CVE-2026-32281
Type:
security
Severity:
Important
Release date:
2026-06-23 11:37:49 UTC
Description:
- CVE-2026-32281: rebuild against golang >= 1.25.7-1.el9_6.tuxcare.els7 to fix denial-of-service in crypto/x509 policy validation, which is unexpectedly inefficient when a certificate chain contains a very large number of policy mappings
CVEs fixed:
Updated packages:
  • podman-5.4.0-13.el9_6.tuxcare.els6.x86_64.rpm
    sha:4122ef6624b68c97b0ea83eebb4b0db8e3b10bef0f243eef0c4dd992ccb25a87
  • podman-docker-5.4.0-13.el9_6.tuxcare.els6.noarch.rpm
    sha:c30f63108f38cbb4d41e699971537e557494ebfb11740de8bfb1800743247c3a
  • podman-plugins-5.4.0-13.el9_6.tuxcare.els6.x86_64.rpm
    sha:c3eea89cf5581d0cfdf39ce28870bd01dcb9342c7d6b8dc86c94ca053f11e4aa
  • podman-remote-5.4.0-13.el9_6.tuxcare.els6.x86_64.rpm
    sha:06327418161c29f507a1f86f3d29dff2f7dbae080253687593b087abb3bc248f
  • podman-tests-5.4.0-13.el9_6.tuxcare.els6.x86_64.rpm
    sha:3f0e942a0e063617420aa42c240956c415c441566d96e7dd0fee4f7d2bd96d3b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.