This security advisory from Red Hat addresses vulnerabilities in podman and related RPM packages included in Red Hat Hardened Images. The update to version 6.1.3-1.hum1 for multiple architectures fixes CVE-2026-94603 and CVE-2026-79705. The advisory references CWE-22 (Path Traversal) and CWE-15 (External Control of System or Configuration Setting), indicating the nature of the vulnerabilities involves improper handling of file paths or configuration settings. The advisory does not provide explicit patch details beyond the updated package versions. No known exploits in the wild have been reported at the time of publication.

The vulnerabilities fixed by this update are rated as high severity, suggesting they could allow attackers to manipulate system or configuration settings or perform unauthorized file path traversal, potentially leading to privilege escalation or unauthorized access. However, no active exploitation has been reported. The impact is limited to systems running the affected podman packages within Red Hat Hardened Images.

A security update is available and should be applied by upgrading to podman version 6.1.3-1.hum1 and the corresponding updated RPMs listed in the advisory. Users should follow Red Hat's official update procedures as detailed in the advisory at https://images.redhat.com/. No additional mitigation steps are indicated beyond applying this update.