RHSA-2026:37385HighCVSS 7.5

Red Hat Security Advisory: rh-podman-desktop security advisory update

Published
July 9, 2026
Last Modified
August 24, 2026

🔗 CVE IDs covered (3)

CVE-2026-6321 →CVE-2026-6322 →CVE-2026-44293 →

📋 Description

CVE-2026-6321 — fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies CVE-2026-6322 — fast-uri: fast-uri: URI authority bypass due to improper delimiter handling CVE-2026-44293 — protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors

🎯 Affected products3

  • Red Hat Enterprise Linux Extensions Channel (v. 10)
  • rh-podman-desktop-0:1.1.1-1.el10_2.src as a component of Red Hat Enterprise Linux Extensions Channel (v. 10)
  • rh-podman-desktop-0:1.1.1-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux Extensions Channel (v. 10)

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (4)