PT-2026-49604

Podman 5.8.3 closes CVE-2026-44517: an ADD or COPY against a malicious Git repo or tar archive could pull files from outside the build context. The fix ships with Buildah 1.43.2 bundled in. If you build images from untrusted sources, how do you sandbox the build step itself?...