FreeBSD : podman -- vulnerabilities (bb4528f4-c5d4-11f1-8c8c-ac5afc632ba3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the bb4528f4-c5d4-11f1-8c8c-ac5afc632ba3 advisory. The Podman developers report: This release addresses CVE-2026-94603, where a podman run on a checkpoint...

podman -- vulnerabilities

The Podman developers report: This release addresses CVE-2026-94603, where a "podman run" on a checkpoint image any image with the io.podman.annotations.checkpoint.runtime.name annotation could disable all sandboxing, including sandboxing specified by the user, when the container was created...

github.com/containerd/containerd: containerd: Arbitrary code execution via CRI checkpoint image tag poisoning

A flaw was found in containerd, an open-source container runtime. The CRI Container Runtime Interface checkpoint import process fails to validate image references within a checkpoint image's configuration. An attacker with permissions to create pods can exploit this by using a specially crafted...

CVE-2026-53489

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue h...

CVE-2026-53489

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue h...