September 2026 - Podman - Podman List Archives

Podman, Buildah, and Podman Desktop Mailing List Upgrade and Downtime
by Tom Sweeney 30 Sep '26

30 Sep '26

Hi Folks, On Sunday October 4, 2026 at 9:30 pm EDT (UTC-4), the Podman related mailing lists will be going down for a few hours in order to do an upgrade. During that time, emails will likely be returned to the sender, or possibly drop somewhere into the ether in CyberSpace. The upgrade should take under 4 hours, and we plan to have the system back around 1:30 am EDT on Monday October 5, 2026. After the upgrade, you should not notice any difference in the list when interacting with it via your favorite email interface. If you use the web interface for the list at: https://lists.podman.io/, you will see some changes there, and there should be some nice improvements for administration tasks on the site. NOTE: If you use Fedora Authorization to log into the web interface, you will not be able to log in via that. You'll need to use the lost password mechanism to set up a new password. From what we can see, only 5 people have used Fedora to authenticate to that list in the past year, so we hope this will be a minimal disruption. Regards, t

1 0

Podman v5.8.8 Released
by container.tools.ci＠gmail.com 29 Sep '26

29 Sep '26

Hi all, Podman v5.8.8 is now available. You may view the full details at https://github.com/podman-container-tools/podman/releases/tag/v5.8.8 Release Notes: -------------- - This release addresses [CVE-2026-94603](https://github.com/podman-container-tools/podman/security/a…, where a `podman run` on a checkpoint image (any image with the `io.podman.annotations.checkpoint.runtime.name` annotation) could disable all sandboxing, including sandboxing specified by the user, when the container was created. ### Breaking Changes - Removed support for checkpoint images in `podman run` due to serious security concerns with the different security models of running images and running checkpoints. Checkpoints ignore user-specified security configuration and are very difficult to run safely.

1 0

Podman v6.1.3 Released
by container.tools.ci＠gmail.com 29 Sep '26

29 Sep '26

Hi all, Podman v6.1.3 is now available. You may view the full details at https://github.com/podman-container-tools/podman/releases/tag/v6.1.3 Release Notes: -------------- ### Security - This release addresses [CVE-2026-94603](https://github.com/podman-container-tools/podman/security/a…, where a `podman run` on a checkpoint image (any image with the `io.podman.annotations.checkpoint.runtime.name` annotation) could disable all sandboxing, including sandboxing specified by the user, when the container was created. ### Breaking Changes - Removed support for checkpoint images in `podman run` due to serious security concerns with the different security models of running images and running checkpoints. Checkpoints ignore user-specified security configuration and are very difficult to run safely.

1 0

Podman v5.8.7 Released
by container.tools.ci＠gmail.com 16 Sep '26

16 Sep '26

Hi all, Podman v5.8.7 is now available. You may view the full details at https://github.com/podman-container-tools/podman/releases/tag/v5.8.7 Release Notes: -------------- ### Security - This release addresses ([CVE-2025-11395](https://github.com/podman-container-tools/container-libs/se…) where importing images containing crafted layer tarballs with the `podman load` command, or importing volumes containing crafted symlinks with `podman volume import`, allows overwriting files on the host. - This release also addresses [CVE-2026-79699](https://github.com/podman-container-tools/container-libs/se… and [CVE-2026-79705](https://github.com/podman-container-tools/buildah/security/…, though we do not believe these CVEs are exploitable through the Podman command line. ### Misc - Updated Buildah to v1.43.4 - Updated Common to v0.67.2 - Updated Image to v5.39.3 - Updated Storage to v1.62.1

1 0

Podman v6.1.2 Released
by container.tools.ci＠gmail.com 15 Sep '26

15 Sep '26

Hi all, Podman v6.1.2 is now available. You may view the full details at https://github.com/podman-container-tools/podman/releases/tag/v6.1.2 Release Notes: -------------- ### Security - This release addresses ([CVE-2025-11395](https://github.com/podman-container-tools/container-libs/se…) where importing images containing crafted layer tarballs with the `podman load` command, or importing volumes containing crafted symlinks with `podman volume import`, allows overwriting files on the host. - This release also addresses [CVE-2026-79699](https://github.com/podman-container-tools/container-libs/se… and [CVE-2026-79705](https://github.com/podman-container-tools/buildah/security/…, though we do not believe these CVEs are exploitable through the Podman command line. ### Misc - Updated Buildah to v1.45.1 - Updated Common to v0.69.2 - Updated Image to v5.41.2 - Updated Storage to v1.64.1

1 0

Podman v6.1.1 Released
by container.tools.ci＠gmail.com 02 Sep '26

02 Sep '26

Hi all, Podman v6.1.1 is now available. You may view the full details at https://github.com/podman-container-tools/podman/releases/tag/v6.1.1 Release Notes: -------------- ### Security - This release addresses CVE-2026-17106, where a crafted tar archive could write outside the extraction directory through the use of malicious links ([GHSA-hfg8-hc9c-6c3h](https://github.com/moby/go-archive/security/advisories…) ### Bugfixes - Fixed broken rootlessport bind behavior with `-p 0.0.0.0:... -p [::]:...` which failed instead of binding both v4 and v6 separately. Podman Machine on WSL should now correctly forward ports again by binding separate IPv4 and IPv6 sockets to make the WSL forwarder logic work again ([#29377](https://github.com/podman-container-tools/podman/issues/29377)).

1 0