GO-2026-6770 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, falco-no-driver, prometheus-podman-exporter-fips...

Security update for podman

This update for podman rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux Enterprise...

GO-2026-6770 Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation in github.com/containers/podman

Podman: The podman run command can be instructed to disable almost all sandboxing by image annotation in github.com/containers/podman...

podman-6.1.2-1.1 on GA media (moderate)

podman-6.1.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:12068-1 Rating: moderate Cross-References: CVE-2025-11395 CVE-2026-17106 CVE-2026-79699 CVSS scores: CVE-2025-11395 SUSE : 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVE-2025-11395 SUSE : 5.1...

AlmaLinux 9.2 [TuxCare] Security Update: podman / podman-docker / podman-gvproxy / podman-plugins / etc (ALMALINUX9.2:CLSA-2026:1792206152)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792206152 advisory. - Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the...

CVE-2026-94603 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, falco-no-driver, prometheus-podman-exporter-fips...

GHSA-2CVF-WQM6-WR9G vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, falco-no-driver, prometheus-podman-exporter-fips...

AlmaLinux 9.2 [TuxCare] Security Update: buildah / buildah-tests Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792142544)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792142544 advisory. - Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to...

EUVD-2026-98929

Podman: The podman run command can be instructed to disable almost all sandboxing by image annotation...

Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

Impact Podman v4.4.0 added a feature where container checkpoints from the podman container checkpoint command could be distributed via OCI registry, and pulled from that registry and run via the podman run command. This allowed easy transfer of checkpoints between systems. However, checkpoints...

GHSA-2CVF-WQM6-WR9G Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

Impact Podman v4.4.0 added a feature where container checkpoints from the podman container checkpoint command could be distributed via OCI registry, and pulled from that registry and run via the podman run command. This allowed easy transfer of checkpoints between systems. However, checkpoints...

Rocky Linux 9.6 [TuxCare] Security Update: buildah / buildah-tests (ALMALINUX9.6:CLSA-2026:1792085312)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792085312 advisory. - A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host...

AlmaLinux 9.6 [TuxCare] Security Update: buildah / buildah-tests (ALMALINUX9.6:CLSA-2026:1792085312)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792085312 advisory. - A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host...

SUSE-SU-2026:4655-1 Security update for podman

This update for podman rebuilds it against the current go security release...

K000163711: Podman vulnerability CVE-2025-9566

Security Advisory Description There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the...

AZL-108315 CVE-2026-94603 affecting package podman 5.6.1-10

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL,...

AZL-108390 CVE-2026-94603 affecting package libcontainers-common 20240213-3

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL,...

DEBIAN-CVE-2026-94603

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL,...

CVE-2026-94603

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL,...

CVE-2026-94603

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL,...