Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied con…
Exact source revision recorded 7 Nov 2026 15:26:39 UTC. It does not establish the source's current position. Latest evidence.
euvd · EUVD-2026-98929
PublishedEUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.
Original publisher date fields
datePublished: Oct 13, 2026, 4:51:38 PM
dateUpdated: Oct 13, 2026, 8:21:43 PM
6 related source bulletins · separate from aliases
RHSA-2026:74861: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-56851 · CVE-2026-79705 · CVE-2026-94603
RHSA-2026:88202: Red Hat Security Advisory: podman security update
CVE-2026-94603
openSUSE-SU-2026:12370-1: podman-6.1.4-1.1 on GA media
CVE-2026-107935 · CVE-2026-94603
RHSA-2026:74178: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVE-2026-94603
msrc_CVE-2026-94603: Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation
CVE-2026-94603
RHSA-2026:79546: Red Hat Security Advisory: Red Hat Quay 3.12.23
CVE-2026-17106 · CVE-2026-49825 · CVE-2026-54770 · CVE-2026-59879 · CVE-2026-77403 · CVE-2026-77404 · CVE-2026-77406 · CVE-2026-77409 · CVE-2026-77410 · CVE-2026-77412 · CVE-2026-79921 · CVE-2026-82417 · CVE-2026-87776 · CVE-2026-94603
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON