Important: Red Hat Security Advisory: podman security update

An update for podman is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

RHEL 10 : podman (RHSA-2026:88202)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:88202 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods...

Security update for podman

This update for podman fixes the following issues: CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability bsc1268579. CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the container bsc1269471. Patch Instructions: To install this SU...

GO-2026-6770 Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation in github.com/containers/podman

Podman: The podman run command can be instructed to disable almost all sandboxing by image annotation in github.com/containers/podman...

PT-2026-118068

Podman: The podman run command can be instructed to disable almost all sandboxing by image annotation in github.com/containers/podman...

Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

Impact Podman v4.4.0 added a feature where container checkpoints from the podman container checkpoint command could be distributed via OCI registry, and pulled from that registry and run via the podman run command. This allowed easy transfer of checkpoints between systems. However, checkpoints...

EUVD-2026-98929

Podman: The podman run command can be instructed to disable almost all sandboxing by image annotation...

GHSA-2CVF-WQM6-WR9G Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

Impact Podman v4.4.0 added a feature where container checkpoints from the podman container checkpoint command could be distributed via OCI registry, and pulled from that registry and run via the podman run command. This allowed easy transfer of checkpoints between systems. However, checkpoints...

CVE-2026-94603

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL,...

ALPINE-CVE-2026-94603

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL,...

UBUNTU-CVE-2026-94603

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL,...

CVE-2026-94603

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL,...

CVE-2026-94603

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL,...

CVE-2026-94603

The Podman container management tool is vulnerable to a sandbox bypass when using the podman run command on images containing the io.podman.annotations.checkpoint.runtime.name annotation. The software incorrectly treats these as checkpoints, silently ignoring user-supplied security restrictions s...

CVE-2026-94603

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL,...

CVE-2026-94603 Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL,...

CVE-2026-94603 Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL,...

CVE-2026-94603

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL,...

PT-2026-122250

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL,...

PT-2026-122254

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL,...