{"id":"EUVD-2026-98929","enisaUuid":"a093b5be-8892-34fc-94f7-781b97fe2a06","description":"Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop\u003dALL, allowing image-controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions 5.8.8 and 6.1.3.","datePublished":"Oct 13, 2026, 4:51:38 PM","dateUpdated":"Oct 13, 2026, 8:21:43 PM","baseScore":10.0,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","references":"https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g\nhttps://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92\nhttps://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669\nhttps://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c\nhttps://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616\nhttps://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627\nhttps://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02\nhttps://github.com/podman-container-tools/podman/releases/tag/v5.8.8\nhttps://github.com/podman-container-tools/podman/releases/tag/v6.1.3\n","aliases":"CVE-2026-94603\nGHSA-2cvf-wqm6-wr9g\n","assigner":"GitHub_M","epss":0.53,"enisaIdProduct":[{"id":"8a36db9d-b3e8-38c2-b716-9da2045f40ca","product":{"name":"podman","vendor":{"name":"containers"}},"product_version":"4.4.0, \u003c 5.8.8"},{"id":"a6d652e5-f41b-37c4-ac0c-a8c7d15825a2","product":{"name":"podman","vendor":{"name":"containers"}},"product_version":"6.0.0, \u003c 6.1.3"}],"enisaIdVendor":[{"id":"f375122b-38b4-37ca-846d-e266568cff58","vendor":{"name":"podman-container-tools"}}],"enisaIdVulnerability":[{"id":"474b53f6-88c7-370c-a848-3db8775ba2d4","vulnerability":{"id":"GHSA-2cvf-wqm6-wr9g","description":"Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation","datePublished":"Oct 15, 2026, 8:22:16 PM","dateUpdated":"Oct 15, 2026, 8:22:16 PM","baseScore":0.0,"references":"https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-94603\nhttps://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92\nhttps://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669\nhttps://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c\nhttps://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616\nhttps://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627\nhttps://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02\nhttps://github.com/podman-container-tools/podman\nhttps://github.com/podman-container-tools/podman/releases/tag/v5.8.8\nhttps://github.com/podman-container-tools/podman/releases/tag/v6.1.3\n","enisa_id":"EUVD-2026-98929\n","aliases":"GHSA-2cvf-wqm6-wr9g\nCVE-2026-94603\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:07:48 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"dcf0d3f3-ed02-3ec5-9add-6f6b39176895","vulnerability":{"id":"CVE-2026-94603","description":"Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop\u003dALL, allowing image-controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions 5.8.8 and 6.1.3.","datePublished":"Oct 13, 2026, 4:51:38 PM","dateUpdated":"Oct 13, 2026, 8:21:43 PM","status":"PUBLISHED","baseScore":10.0,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","references":"https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g\nhttps://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92\nhttps://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669\nhttps://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c\nhttps://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616\nhttps://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627\nhttps://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02\nhttps://github.com/podman-container-tools/podman/releases/tag/v5.8.8\nhttps://github.com/podman-container-tools/podman/releases/tag/v6.1.3\n","enisa_id":"EUVD-2026-98929\n","assigner":"GitHub_M","epss":0.53,"dataProcessed":"Nov 1, 2026, 7:20:41 AM","vulnerabilityProduct":[{"id":"bbc76e01-f562-3bb1-81d6-98a7e57db4c4","product":{"name":"podman","vendor":{"name":"containers"}},"product_version":"4.4.0, \u003c 5.8.8"},{"id":"d0d8c514-ed31-397f-b76b-ed244ba602a0","product":{"name":"podman","vendor":{"name":"containers"}},"product_version":"6.0.0, \u003c 6.1.3"}],"vulnerabilityVendor":[{"id":"22ca52e9-9bf6-3a90-bd22-d6e9981d514e","vendor":{"name":"podman-container-tools"}}]}}],"enisaIdAdvisory":[{"id":"2fb5e4d6-bd17-3eb3-954a-78474f907410","advisory":{"id":"RHSA-2026:74861","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Oct 2, 2026, 9:14:54 AM","dateUpdated":"Oct 30, 2026, 6:54:43 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:74861\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74861.json\n","aliases":"CVE-2026-56851\nCVE-2026-79705\nCVE-2026-94603\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"05d46c15-e24e-3db4-a892-59c03a18d9d5","product":{"name":"podman-docker-0:6.1.3-1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"0b5aad0c-6f22-3cdd-aa3a-090b82fc7a9a","product":{"name":"podman-machine-0:6.1.3-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"44498c71-dae0-3d79-b9e4-0710fa7f7020","product":{"name":"podman-docker-0:6.1.3-1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"60ecf30a-353e-3ad7-bbe7-e7bf4189fbd9","product":{"name":"podman-0:6.1.3-1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"6c4edce3-1c0b-378c-932d-867a81b7b928","product":{"name":"podman-0:6.1.3-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"7125e003-3284-355f-9eaf-ce461046cc8e","product":{"name":"podmansh-0:6.1.3-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"a7757de7-b327-3d26-bae6-da09f7a65987","product":{"name":"podman-0:6.1.3-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"ac81b9f0-bdba-30be-b100-65047d7542cb","product":{"name":"podman-machine-0:6.1.3-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"b86e9ff4-2908-328c-b81d-89baf5725e27","product":{"name":"podman-remote-0:6.1.3-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"bede2d70-c69d-3c65-91a6-8514607ac634","product":{"name":"podman-remote-0:6.1.3-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"d23aa90f-713a-3ca0-b266-94527ff96f6d","product":{"name":"podmansh-0:6.1.3-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"f3152be1-f23f-3782-9b74-a316538ca2a7","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}}]}},{"id":"46c47e0c-aef4-38ce-a468-e49e698b6242","advisory":{"id":"RHSA-2026:88202","description":"Red Hat Security Advisory: podman security update","summary":"An update for podman is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"Oct 22, 2026, 1:33:55 PM","dateUpdated":"Oct 30, 2026, 7:05:43 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:88202\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_88202.json\n","aliases":"CVE-2026-94603\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"004f3641-d12b-390d-ba64-44f287e07d1f","product":{"name":"podman-remote-debuginfo-7:5.8.2-10.el10_2.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"0378c148-564f-3513-8e72-4a93e5f0d7ee","product":{"name":"podman-remote-debuginfo-7:5.8.2-10.el10_2.aarch64","vendor":{"name":"Red Hat"}}},{"id":"04a6d4dd-3255-380e-b796-61f5968636a7","product":{"name":"podman-7:5.8.2-10.el10_2.aarch64","vendor":{"name":"Red Hat"}}},{"id":"0d061f61-f58a-3c74-a0ad-6c8a92945143","product":{"name":"podman-debugsource-7:5.8.2-10.el10_2.s390x","vendor":{"name":"Red Hat"}}},{"id":"23880fdf-33ae-3822-9c8f-8bf8f516b244","product":{"name":"podman-tests-7:5.8.2-10.el10_2.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"2b550d2c-cec5-3dc3-88f6-2e35f27bab72","product":{"name":"podman-7:5.8.2-10.el10_2.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"2ec1af79-8ed2-32cd-aa5b-421b097c7d19","product":{"name":"podman-remote-7:5.8.2-10.el10_2.s390x","vendor":{"name":"Red Hat"}}},{"id":"34d2588f-e206-3828-af95-35a54d076727","product":{"name":"podman-docker-7:5.8.2-10.el10_2.noarch","vendor":{"name":"Red Hat"}}},{"id":"3acf051b-ed7a-3aba-97d2-61a23d80d9cb","product":{"name":"podman-debuginfo-7:5.8.2-10.el10_2.s390x","vendor":{"name":"Red Hat"}}},{"id":"3b935417-481b-3636-9ddd-4701f8f76a38","product":{"name":"podman-7:5.8.2-10.el10_2.s390x","vendor":{"name":"Red Hat"}}},{"id":"47158780-39bd-369d-bb88-6270b6a892c3","product":{"name":"podman-remote-debuginfo-7:5.8.2-10.el10_2.x86_64","vendor":{"name":"Red Hat"}}},{"id":"4c5e22f7-694f-364c-a955-de62771a2b7a","product":{"name":"podman-remote-7:5.8.2-10.el10_2.aarch64","vendor":{"name":"Red Hat"}}},{"id":"59d2a88b-eac0-3e28-9498-7f67c74459a5","product":{"name":"podman-debugsource-7:5.8.2-10.el10_2.aarch64","vendor":{"name":"Red Hat"}}},{"id":"5f9dad75-63ae-304f-a458-5a75e6cd4a35","product":{"name":"podman-tests-7:5.8.2-10.el10_2.aarch64","vendor":{"name":"Red Hat"}}},{"id":"6fe09d46-79c0-3d3f-9ccc-422f42d01369","product":{"name":"podman-7:5.8.2-10.el10_2.x86_64","vendor":{"name":"Red Hat"}}},{"id":"75636bad-3d6f-39d7-8858-67e881885040","product":{"name":"podman-tests-debuginfo-7:5.8.2-10.el10_2.aarch64","vendor":{"name":"Red Hat"}}},{"id":"797ed048-53c5-3e26-8b53-6f1c5cb169ec","product":{"name":"podman-tests-debuginfo-7:5.8.2-10.el10_2.s390x","vendor":{"name":"Red Hat"}}},{"id":"83289555-631b-33e5-b9a3-1dd2d615957e","product":{"name":"podman-debuginfo-7:5.8.2-10.el10_2.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"8d067c0a-c20e-36da-a222-84e487090e5e","product":{"name":"Red Hat Enterprise Linux AppStream (v. 10)","vendor":{"name":"Red Hat"}}},{"id":"91180d3d-9829-3162-8e19-44cd1e501172","product":{"name":"podman-remote-7:5.8.2-10.el10_2.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"941ffd97-8b1a-3c1b-b74c-e987b73a4c20","product":{"name":"podman-remote-7:5.8.2-10.el10_2.x86_64","vendor":{"name":"Red Hat"}}},{"id":"9e935057-59e4-3f94-b873-d6921a7e4c80","product":{"name":"podman-debuginfo-7:5.8.2-10.el10_2.aarch64","vendor":{"name":"Red Hat"}}},{"id":"9edf545a-27d8-3007-9a99-7b030cbfa755","product":{"name":"podman-7:5.8.2-10.el10_2.src","vendor":{"name":"Red Hat"}}},{"id":"9f4dee60-7fe4-3caa-b30f-47978c811ee7","product":{"name":"podman-debugsource-7:5.8.2-10.el10_2.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"a5b8387a-945c-3e0e-a4c1-a009a2daebad","product":{"name":"podman-tests-debuginfo-7:5.8.2-10.el10_2.x86_64","vendor":{"name":"Red Hat"}}},{"id":"a6ed3c81-cd03-35b4-a92b-123518080c39","product":{"name":"podman-tests-7:5.8.2-10.el10_2.s390x","vendor":{"name":"Red Hat"}}},{"id":"aee10ca3-e9ba-3c2a-9b98-96dae18dc1bd","product":{"name":"Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)","vendor":{"name":"Red Hat"}}},{"id":"b178ba39-9a36-3899-ba7e-42e2d68a3285","product":{"name":"podman-debuginfo-7:5.8.2-10.el10_2.x86_64","vendor":{"name":"Red Hat"}}},{"id":"c107625f-856d-3191-9b58-b350fc3bc9cf","product":{"name":"podman-debugsource-7:5.8.2-10.el10_2.x86_64","vendor":{"name":"Red Hat"}}},{"id":"c5ba162c-fd7a-37a7-9580-00966940d92e","product":{"name":"podman-remote-debuginfo-7:5.8.2-10.el10_2.s390x","vendor":{"name":"Red Hat"}}},{"id":"cbf874f9-ab86-37ee-aba8-3a0cb0b05820","product":{"name":"podman-tests-debuginfo-7:5.8.2-10.el10_2.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"cfbb54c5-da77-36c0-9168-b5533f063205","product":{"name":"podman-tests-7:5.8.2-10.el10_2.x86_64","vendor":{"name":"Red Hat"}}}]}},{"id":"64f99ba4-c21d-35cf-9a70-ce6bb25a1ca0","advisory":{"id":"openSUSE-SU-2026:12370-1","description":"podman-6.1.4-1.1 on GA media","summary":"podman-6.1.4-1.1 on GA media","datePublished":"Oct 30, 2026, 12:00:00 AM","dateUpdated":"Oct 31, 2026, 5:18:43 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12370-1.json\nhttps://www.suse.com/security/cve/CVE-2026-107935/\nhttps://www.suse.com/security/cve/CVE-2026-94603/\n","aliases":"CVE-2026-107935\nCVE-2026-94603\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0d6a1dae-de2b-3d59-9dca-15212e019a09","product":{"name":"podman-0:6.1.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"146af961-d49f-363a-b2b9-4797f3ae05d3","product":{"name":"podman-0:6.1.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"1525cd18-6c4e-37ae-a52c-484c15acf0bd","product":{"name":"podmansh-0:6.1.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"1779788c-c011-3255-8c2a-579ac53aab46","product":{"name":"podman-docker-0:6.1.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"2e970f00-a876-3274-8a94-17e8c822c9c5","product":{"name":"podman-remote-0:6.1.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"3e22b3eb-db43-3c96-a2ce-eec5baa28cca","product":{"name":"podmansh-0:6.1.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"51ffb629-eb04-3474-8d28-b01bb93c42e0","product":{"name":"podman-remote-0:6.1.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"623e3f34-f4db-350f-ae05-dfe6558a4352","product":{"name":"podman-remote-0:6.1.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"711da4e6-e78a-3efe-a430-812efd0ed542","product":{"name":"podman-0:6.1.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"73c3d474-4cd5-3197-9406-2c2fb9d17b35","product":{"name":"podman-docker-0:6.1.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"84033700-a6fa-3d68-982b-bc2cb9daae6e","product":{"name":"podmansh-0:6.1.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"8f8ddae6-ce1b-3d44-910b-6ad370917850","product":{"name":"podman-docker-0:6.1.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"b42ed059-ab79-36e5-b282-7a3929ab3fd5","product":{"name":"podman-0:6.1.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b4723096-ed03-3327-ae55-a48fd09a5387","product":{"name":"podmansh-0:6.1.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"b652feb5-2b74-3f7f-82a2-16bb52340302","product":{"name":"podman-docker-0:6.1.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"c572d7b0-6a45-3f19-a814-cc5fcdb2bc57","product":{"name":"podman-remote-0:6.1.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"eb08e3ca-74ec-31fb-9e7c-6a65c683c289","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}}]}},{"id":"7ea7c48a-1185-324f-a252-78033ab1bf8a","advisory":{"id":"RHSA-2026:74178","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Oct 1, 2026, 12:32:26 AM","dateUpdated":"Oct 30, 2026, 7:05:38 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:74178\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74178.json\n","aliases":"CVE-2026-94603\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"01448f85-0cad-3918-ae6d-60f5b1dc267d","product":{"name":"podman-docker-0:6.1.2-1.1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"0a661357-db96-3dab-8195-a6be18312a33","product":{"name":"podman-machine-5:6.1.2-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"0e1ee804-8803-3e6b-930b-564bbdd90239","product":{"name":"podmansh-0:6.1.2-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"1ee7497f-eb1d-3d62-b534-1d3bb3425f57","product":{"name":"podmansh-5:6.1.2-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"1f7856df-a413-3dc1-a73f-1af21d6a0d10","product":{"name":"podman-machine-0:6.1.2-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"23b6b688-5ff8-3861-b2e2-5321315e255a","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"39610255-e926-3325-8cc9-77e696fdd4f3","product":{"name":"podmansh-5:6.1.2-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"412038bb-e7c5-3800-95ff-9364cb1323dd","product":{"name":"podman-0:6.1.2-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"4918e4bd-82d7-381a-9d7c-888d4efbba63","product":{"name":"podman-5:6.1.2-1.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"550bef57-1787-3910-87ef-244c2705b271","product":{"name":"podman-remote-0:6.1.2-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"5942b713-b3db-3247-b69e-8e9db675a4ec","product":{"name":"podman-machine-5:6.1.2-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"5b4dddce-d571-30da-9719-3f172834bac0","product":{"name":"podman-0:6.1.2-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"61a11dac-14a5-3d55-8935-31043315838a","product":{"name":"podman-docker-0:6.1.2-1.1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"67f1081a-2513-3318-8120-b8eea4affb41","product":{"name":"podman-remote-5:6.1.2-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"68943e40-b2a2-3008-9048-059fdf262080","product":{"name":"podman-0:6.1.2-1.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"92c1888b-c8dd-37ca-8a8e-77df3965fb3f","product":{"name":"podman-machine-0:6.1.2-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"94d138e2-cba9-3834-97d1-ab0a1bc137f4","product":{"name":"podmansh-0:6.1.2-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"987e0946-5bdc-33a8-b8c7-476a8b20e7cc","product":{"name":"podman-docker-5:6.1.2-1.1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"c7636f59-7685-32f0-8f3a-d4d5b00e8908","product":{"name":"podman-5:6.1.2-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"cee60ee3-5b37-3d66-b200-a71390740293","product":{"name":"podman-5:6.1.2-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"e163c026-83d0-3e44-9760-a2c5b1821419","product":{"name":"podman-remote-5:6.1.2-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"edc5bcf6-b71a-310a-8712-60ffb96a9dd6","product":{"name":"podman-docker-5:6.1.2-1.1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"f98d2074-c828-38a2-a4ea-21243c9cdbba","product":{"name":"podman-remote-0:6.1.2-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}},{"id":"c506f1cd-cda0-3f9b-8405-0a473b53386b","advisory":{"id":"msrc_CVE-2026-94603","description":"Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation","datePublished":"Oct 17, 2026, 1:06:54 AM","dateUpdated":"Oct 28, 2026, 1:45:58 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-94603.json\n","aliases":"CVE-2026-94603\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"0ff61f0e-81fb-385b-9644-966d44343426","product":{"name":"libcontainers-common","vendor":{"name":"Microsoft"}}},{"id":"155a5da9-e4c1-3837-a9e1-fbc4e6a6c623","product":{"name":"3.0","vendor":{"name":"Wind River"}}},{"id":"85758d4e-e50d-36d2-9256-e50fa0e628d7","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}},{"id":"ad16c31e-2647-3b5c-a5fc-3cb523a6242e","product":{"name":"azl3 libcontainers-common 0:20240213-3.azl3","vendor":{"name":"Microsoft"}}}]}},{"id":"e0e60476-00c7-33f8-abef-1f9577b567db","advisory":{"id":"RHSA-2026:79546","description":"Red Hat Security Advisory: Red Hat Quay 3.12.23","summary":"Red Hat Quay 3.12.23 is now available with bug fixes.","datePublished":"Oct 8, 2026, 9:48:01 PM","dateUpdated":"Oct 31, 2026, 8:58:09 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:79546\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_79546.json\n","aliases":"CVE-2026-17106\nCVE-2026-49825\nCVE-2026-54770\nCVE-2026-59879\nCVE-2026-77403\nCVE-2026-77404\nCVE-2026-77406\nCVE-2026-77409\nCVE-2026-77410\nCVE-2026-77412\nCVE-2026-79921\nCVE-2026-82417\nCVE-2026-87776\nCVE-2026-94603\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"03b4e16e-adb1-3553-a1fe-767b4294888f","product":{"name":"registry.redhat.io/quay/clair-rhel8@sha256:26fdc3a97583a3fd35ffa6159e20305c9178783a448adbce4535727b42cf6b73_amd64","vendor":{"name":"Red Hat"}}},{"id":"1062d397-61a2-3fad-bd77-bc627ae941fc","product":{"name":"registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:62e46ba17b350e4693d84799d6f1774f616b092fc7af54f9a12eda97d19c8d55_s390x","vendor":{"name":"Red Hat"}}},{"id":"278ca42a-345c-3114-8b36-343d264a99f7","product":{"name":"registry.redhat.io/quay/quay-builder-rhel8@sha256:020fc4977610b270e4db808a537cf8a3e7c9a55945453fc22fe61b4783526349_s390x","vendor":{"name":"Red Hat"}}},{"id":"3060847c-9535-3d6f-8714-da0669679607","product":{"name":"registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc409ca4f62d7a1be328bf57ce600e95874404c28253f3e8f12ff9f7b73a089c_arm64","vendor":{"name":"Red Hat"}}},{"id":"387df5e3-1f97-31c0-b325-9bfb516a431c","product":{"name":"registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:42df3d497bb31280c53b2ea87f44a9473a07d09050789071dbfbbc5f148547a6_amd64","vendor":{"name":"Red Hat"}}},{"id":"39a1c7cc-86e1-321e-8f60-b7db27a2eac3","product":{"name":"registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:38e9d3c5fc7da82ad6ed222f0a5398221c473b19c859a61445b0e11b7a68e921_s390x","vendor":{"name":"Red Hat"}}},{"id":"4c3aaecc-5bb1-38f8-a4a7-f5e07a460b40","product":{"name":"registry.redhat.io/quay/quay-builder-rhel8@sha256:046bc123b3b2b76fd9eb6b2694227a737c14b291cdf0bd45e15bdedbb5dbf91c_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"4e57d054-6238-3bb2-9352-56299deed3b8","product":{"name":"registry.redhat.io/quay/quay-rhel8@sha256:e6a20eedbd78dd92041908c07446e3e9a1e29dade3e4d968c74f85c38c157078_amd64","vendor":{"name":"Red Hat"}}},{"id":"5162a185-bf08-3d1b-b0a5-bb39e4850ef8","product":{"name":"registry.redhat.io/quay/quay-operator-rhel8@sha256:12360bc756ef0299c8123bc86c9b2144543e64dc8d0f56fa47052121aec08979_amd64","vendor":{"name":"Red Hat"}}},{"id":"52ee10d1-63de-3389-8711-72835530eed0","product":{"name":"registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e17bc5c1861f15d8ce0f7456a0c717ae2fb94b8ba5b8ee134aa22c30487c5191_amd64","vendor":{"name":"Red Hat"}}},{"id":"5949f413-fd49-3cf7-8f79-675c7d95d472","product":{"name":"registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f424209de10bc294e48867ee809cb1c0d6540c2a7934791f4e9d4d0d694930a_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"62c22f0d-b843-3dc7-b4b0-1833cda3df4f","product":{"name":"registry.redhat.io/quay/quay-operator-rhel8@sha256:a056ea6ce6932dfda026ba4307e4104f21bcf105cf6e0f1a3c580e3afa57091d_arm64","vendor":{"name":"Red Hat"}}},{"id":"6aa26372-11d4-365f-83c3-7c99521a50fe","product":{"name":"registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7febcf3c63f9b2d76e07a9a55abf5fc821ba89c35b29520ceb6bc54c392109da_amd64","vendor":{"name":"Red Hat"}}},{"id":"706e0d90-8341-3963-963d-129b2ec435c5","product":{"name":"registry.redhat.io/quay/quay-rhel8@sha256:0d940ea3606dc30dfe84e7ff948001bbc8b8f9c4b157f2370523eb2cb32beb45_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"7a1656e8-59af-3f86-a1f2-d84204649941","product":{"name":"registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3616032118696b3e6c32dd2b7587c7883f3c3dcbe6c06048680c4b77624b840a_amd64","vendor":{"name":"Red Hat"}}},{"id":"7f3d5d84-18d4-34cc-acef-3ef85e0af009","product":{"name":"registry.redhat.io/quay/quay-builder-rhel8@sha256:e0b03ac73016760a8488ee0a5a4f44a9d23480ed16353efa720c8053c4bcc12a_arm64","vendor":{"name":"Red Hat"}}},{"id":"8b168844-292c-31a4-87bc-1d3afdde1ee7","product":{"name":"registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:29787be24b421050acfac3a2984b0cdd604fe8317c08cf6a770c9da4feaec788_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"ab1bba00-bf3a-30ff-9f61-3e66227fd7c5","product":{"name":"registry.redhat.io/quay/clair-rhel8@sha256:c65cda67105cfc8f9ac2aea6474c1916d1d6f934e7fa47f31e1625c139409063_arm64","vendor":{"name":"Red Hat"}}},{"id":"b99f21c4-6786-3af6-9b50-9a5f9c8d5fef","product":{"name":"registry.redhat.io/quay/quay-rhel8@sha256:2f59d49e7181a61c3be8fd05af718a9d70ad3cc56778fd7d36f7d8a3cd8a8eab_arm64","vendor":{"name":"Red Hat"}}},{"id":"be33897e-870c-360b-bf77-2a6e4f18483e","product":{"name":"registry.redhat.io/quay/quay-operator-bundle@sha256:5f010fc20c3ec4d45088e7d95434274798f0eb930f33ed56ff0cd4b8c93a7658_amd64","vendor":{"name":"Red Hat"}}},{"id":"c420e99a-a2a3-3e61-aee4-f6a42577b1ad","product":{"name":"registry.redhat.io/quay/quay-operator-rhel8@sha256:ffab5c4cdcf115f53d5f5c76291fc1ba3beaa54462a47804fc2656df5b55f9ad_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"cb38141e-673e-33a7-9571-d614bd8b6604","product":{"name":"registry.redhat.io/quay/quay-rhel8@sha256:4c215f73501c07019a75a93f71625003d2f9965f012ff306703ae9f06e5a2090_s390x","vendor":{"name":"Red Hat"}}},{"id":"ccb657da-fa3c-38e2-8ea1-277ad399a79a","product":{"name":"registry.redhat.io/quay/clair-rhel8@sha256:c4b68e48a21054297e69183acd7e75af9cbf921c8c3393c035d7c232556da38e_s390x","vendor":{"name":"Red Hat"}}},{"id":"cefd782c-3146-37dc-a035-ca6b29340a21","product":{"name":"registry.redhat.io/quay/clair-rhel8@sha256:96d80133cf840fdacb7cee6001fa520c59afe81bd71255072f6bb2877d559c85_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"d3383a7a-7200-3e5f-889b-2d72f1394513","product":{"name":"registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:517e924e8e3244ff9b8f5b49fa278374fb12ea9d0ec14340ac7d4075dc32e13e_amd64","vendor":{"name":"Red Hat"}}},{"id":"d863dd57-ffb4-3f0d-a4dc-ecd3633e1a17","product":{"name":"registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3efb593c1e3b66c8ed13e3d167855d6bb715ed0a56cb92c7654b435b068a3eaf_arm64","vendor":{"name":"Red Hat"}}},{"id":"dec2d485-1c41-335a-ac0c-873672b59868","product":{"name":"Red Hat Quay 3.12","vendor":{"name":"Red Hat"}}},{"id":"e24465dc-a80b-3f66-b2be-0c4dd54cd29c","product":{"name":"registry.redhat.io/quay/quay-operator-rhel8@sha256:ebffcfc2b68067d6e030399244aeba69174edcd6217a0d0e7969b48df81dd3b7_s390x","vendor":{"name":"Red Hat"}}},{"id":"f8388fb8-2fa7-3a4e-8577-deae0888dacc","product":{"name":"registry.redhat.io/quay/quay-builder-rhel8@sha256:bea0df1cd41fd9c1a1b73e355521a5fb5b19bb1586e9a28a9e5b35b39a2cec58_amd64","vendor":{"name":"Red Hat"}}}]}}]}