Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-87284.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-87284
Upstream
Published
2026-05-22T04:16:25Z
Modified
2026-08-31T05:26:07Z
Summary
CVE-2026-42508 affecting package podman 5.6.1-9
Details

Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.

References

Affected packages

Azure Linux:3 / podman

Package

Name
podman
Purl
pkg:rpm/azure-linux/podman

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
5.6.1-9

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-87284.json"