{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\npodman:\n  * podman-5.8.2-1.hum1 (aarch64, x86_64)\n  * podman-docker-5.8.2-1.hum1 (noarch)\n  * podman-machine-5.8.2-1.hum1 (aarch64, x86_64)\n  * podman-remote-5.8.2-1.hum1 (aarch64, x86_64)\n  * podman-tests-5.8.2-1.hum1 (aarch64, x86_64)\n  * podmansh-5.8.2-1.hum1 (aarch64, x86_64)\n  * podman-5.8.2-1.hum1.src (src)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:8211",
        "url": "https://access.redhat.com/errata/RHSA-2026:8211"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33414",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33414"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-9566",
        "url": "https://access.redhat.com/security/cve/CVE-2025-9566"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8211.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
    "tracking": {
      "current_release_date": "2026-05-19T13:30:19+00:00",
      "generator": {
        "date": "2026-05-19T13:30:19+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.0"
        }
      },
      "id": "RHSA-2026:8211",
      "initial_release_date": "2026-04-14T22:57:31+00:00",
      "revision_history": [
        {
          "date": "2026-04-14T22:57:31+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-04-18T19:54:08+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-05-19T13:30:19+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-main@aarch64",
                "product": {
                  "name": "podman-main@aarch64",
                  "product_id": "podman-main@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman@5.8.2-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-main@src",
                "product": {
                  "name": "podman-main@src",
                  "product_id": "podman-main@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman@5.8.2-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-main@x86_64",
                "product": {
                  "name": "podman-main@x86_64",
                  "product_id": "podman-main@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman@5.8.2-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-main@noarch",
                "product": {
                  "name": "podman-main@noarch",
                  "product_id": "podman-main@noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-docker@5.8.2-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-main@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:podman-main@aarch64"
        },
        "product_reference": "podman-main@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-main@noarch as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:podman-main@noarch"
        },
        "product_reference": "podman-main@noarch",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-main@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:podman-main@src"
        },
        "product_reference": "podman-main@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-main@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:podman-main@x86_64"
        },
        "product_reference": "podman-main@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Paul Holzinger"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2025-9566",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2025-09-04T15:45:46.448000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2393152"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "There\u0027s a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.\n\nBinary-Affected: podman\nUpstream-version-introduced: v4.0.0\nUpstream-version-fixed: v5.6.1",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "podman: Podman kube play command may overwrite host files",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has evaluated this vulnerability as having the Important severity. This happens because of the consequences of an successful attack and the low complexity (AC:L) on exploiting this vulnerability. Although the attacker cannot control the content written to the target file, depending on which file was targeted, the exploitation of this flaw may lead sensitive data corruption (I:H) and leading the system to crash resulting in a Denial of Service attack (A:H).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:podman-main@aarch64",
          "Red Hat Hardened Images:podman-main@noarch",
          "Red Hat Hardened Images:podman-main@src",
          "Red Hat Hardened Images:podman-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-9566"
        },
        {
          "category": "external",
          "summary": "RHBZ#2393152",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2393152"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-9566",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-9566"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-9566",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-9566"
        },
        {
          "category": "external",
          "summary": "https://github.com/containers/podman/commit/43fbde4e665fe6cee6921868f04b7ccd3de5ad89",
          "url": "https://github.com/containers/podman/commit/43fbde4e665fe6cee6921868f04b7ccd3de5ad89"
        },
        {
          "category": "external",
          "summary": "https://github.com/containers/podman/security/advisories/GHSA-wp3j-xq48-xpjw",
          "url": "https://github.com/containers/podman/security/advisories/GHSA-wp3j-xq48-xpjw"
        }
      ],
      "release_date": "2025-09-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-14T22:57:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:podman-main@aarch64",
            "Red Hat Hardened Images:podman-main@noarch",
            "Red Hat Hardened Images:podman-main@src",
            "Red Hat Hardened Images:podman-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:8211"
        },
        {
          "category": "workaround",
          "details": "Red Hat advises to not run the podman kube play command with untrusted Kubernetes YAML file as input, additionally review the Kubernetes YAML file before running it through podman may help to catch maliciously crafted secretes or volumes that may be used to exploit this vulnerability.",
          "product_ids": [
            "Red Hat Hardened Images:podman-main@aarch64",
            "Red Hat Hardened Images:podman-main@noarch",
            "Red Hat Hardened Images:podman-main@src",
            "Red Hat Hardened Images:podman-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:podman-main@aarch64",
            "Red Hat Hardened Images:podman-main@noarch",
            "Red Hat Hardened Images:podman-main@src",
            "Red Hat Hardened Images:podman-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "podman: Podman kube play command may overwrite host files"
    },
    {
      "cve": "CVE-2026-33414",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2026-04-14T23:01:05.579187+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458522"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Podman, a tool for managing containers. This vulnerability, located in the HyperV machine backend, allows for command injection. An attacker who can manipulate the virtual machine (VM) image path can inject and execute arbitrary PowerShell commands. This could lead to unauthorized system-level code execution on Windows installations where Podman is running.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "podman: github.com/containers/podman: Podman: Arbitrary code execution via command injection in HyperV backend",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in Podman\u0027s HyperV backend does not affect Red Hat products. The vulnerable code path is exclusive to Windows installations, and the HyperV backend is not utilized on Red Hat Enterprise Linux or OpenShift Container Platform.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:podman-main@aarch64",
          "Red Hat Hardened Images:podman-main@noarch",
          "Red Hat Hardened Images:podman-main@src",
          "Red Hat Hardened Images:podman-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33414"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458522",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458522"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33414",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33414"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33414",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33414"
        },
        {
          "category": "external",
          "summary": "https://github.com/containers/podman/commit/571c842bd357ee626019ea97d030fb772fc654ed",
          "url": "https://github.com/containers/podman/commit/571c842bd357ee626019ea97d030fb772fc654ed"
        },
        {
          "category": "external",
          "summary": "https://github.com/containers/podman/security/advisories/GHSA-hc8w-h2mf-hp59",
          "url": "https://github.com/containers/podman/security/advisories/GHSA-hc8w-h2mf-hp59"
        }
      ],
      "release_date": "2026-04-14T22:42:19.822000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-14T22:57:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:podman-main@aarch64",
            "Red Hat Hardened Images:podman-main@noarch",
            "Red Hat Hardened Images:podman-main@src",
            "Red Hat Hardened Images:podman-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:8211"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:podman-main@aarch64",
            "Red Hat Hardened Images:podman-main@noarch",
            "Red Hat Hardened Images:podman-main@src",
            "Red Hat Hardened Images:podman-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "podman: github.com/containers/podman: Podman: Arbitrary code execution via command injection in HyperV backend"
    }
  ]
}