SUSE-SU-2026:3536-1 Security update for podman

This update for podman fixes the following issues: - CVE-2026-55686: specially crafted image where the WORKDIR path contains a symlink allows for directory creation and ownership modification on the host filesystem bsc1268579. - CVE-2026-57231: specially crafted image can trick podman run into...

DEBIAN-CVE-2026-55686

Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownership is less likely to happen as that requires help from an...

SUSE CVE-2026-55686

Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownership is less likely to happen as that requires help from an...

CVE-2026-55686

creationtimestamp| type| source ---|---|--- 2026-06-17 16:22:45+00:00| published-proof-of-concept| https://github.com/podman-container-tools/podman/security/advisories/GHSA-q6r4-3wmg-fwcq 2026-06-26 18:39:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7lqvuf5f26...