Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

Impact Podman v4.4.0 added a feature where container checkpoints from the podman container checkpoint command could be distributed via OCI registry, and pulled from that registry and run via the podman run command. This allowed easy transfer of checkpoints between systems. However, checkpoints...

CVE-2026-94603

The Podman container management tool is vulnerable to a sandbox bypass when using the podman run command on images containing the io.podman.annotations.checkpoint.runtime.name annotation. The software incorrectly treats these as checkpoints, silently ignoring user-supplied security restrictions s...

FreeBSD : podman -- vulnerabilities (bb4528f4-c5d4-11f1-8c8c-ac5afc632ba3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the bb4528f4-c5d4-11f1-8c8c-ac5afc632ba3 advisory. The Podman developers report: This release addresses CVE-2026-94603, where a podman run on a checkpoint...