CVE-2026-114236 — Podman: goroutine/file-descriptor leak when processing malformed layers

Podman’s storage/pkg/archive ApplyLayer and ApplyUncompressedLayer may leak a file descriptor when processing corrupt or malicious inputs. Unbounded repeated calls can exhaust the process’ file-descriptor limit.