This Red Hat security advisory addresses two vulnerabilities (CVE-2026-15792 and CVE-2026-56852) affecting podman packages included in Red Hat Hardened Images RPMs. The update includes podman version 6.0.2-2.1.hum1 and related packages for aarch64 and x86_64 architectures. The vulnerabilities are associated with CWEs 22 (Path Traversal) and 835 (Loop with Unreachable Exit Condition), indicating issues related to input validation and potential denial of service or other impacts. The advisory provides updated RPMs to remediate these issues but does not specify fixed version ranges or detailed technical exploit information. No known exploits in the wild have been reported at the time of this advisory.

The vulnerabilities affect podman components used in Red Hat Hardened Images, potentially allowing for path traversal or denial of service conditions due to improper input validation or loop conditions. The severity is rated high by Red Hat Product Security, indicating significant risk if exploited. However, no active exploitation has been reported. The impact is limited to affected podman packages within Red Hat Hardened Images environments.

Red Hat has released updated podman packages (version 6.0.2-2.1.hum1) that address these vulnerabilities. Users of Red Hat Hardened Images should apply these updates promptly to mitigate the risks. Detailed update instructions and packages are available via Red Hat's official advisory and image repositories. No additional mitigations or workarounds are specified in the advisory.