ALSA-2026:88202: Important: podman security update

Q: Who is exposed to this issue?

Systems using Podman to run container images are exposed, particularly where image annotations may influence how `podman run` configures sandboxing. The affected update covers the podman, podman-docker, podman-remote, and podman-tests packages for AlmaLinux.

Q: What does an attacker need to exploit it?

The issue is triggered through an image annotation that instructs `podman run` to disable nearly all sandboxing, including sandboxing explicitly requested by the user. The provided advisory does not specify how an attacker would deliver or cause use of such an image.

Q: How can I determine whether I am affected?

Check whether the listed AlmaLinux Podman-related packages are installed and whether your workflows run container images with `podman run`. Review images and their annotations where possible, especially images from sources that are not fully trusted.

Published Oct 22, 2026

Updated

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

podman: The podman run command can be instructed to disable almost all sandboxing - including user-requested sandboxing - by image annotation (CVE-2026-94603)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

4 affected componentsFixes available

almalinux/podman<7:5.8.2-10.el10_2.alma.1

7:5.8.2-10.el10_2.alma.1

almalinux/podman-docker<7:5.8.2-10.el10_2.alma.1

7:5.8.2-10.el10_2.alma.1

almalinux/podman-remote<7:5.8.2-10.el10_2.alma.1

7:5.8.2-10.el10_2.alma.1

almalinux/podman-tests<7:5.8.2-10.el10_2.alma.1

7:5.8.2-10.el10_2.alma.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade almalinux/podman to a version that resolves this vulnerability.
Fixed in 7:5.8.2-10.el10_2.alma.1
Upgrade
Upgrade almalinux/podman-docker to a version that resolves this vulnerability.
Fixed in 7:5.8.2-10.el10_2.alma.1
Upgrade
Upgrade almalinux/podman-remote to a version that resolves this vulnerability.
Fixed in 7:5.8.2-10.el10_2.alma.1
Upgrade
Upgrade almalinux/podman-tests to a version that resolves this vulnerability.
Fixed in 7:5.8.2-10.el10_2.alma.1

Event History

Oct 22, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-94603

Frequently Asked Questions

Who is exposed to this issue?

Systems using Podman to run container images are exposed, particularly where image annotations may influence how `podman run` configures sandboxing. The affected update covers the podman, podman-docker, podman-remote, and podman-tests packages for AlmaLinux.

What does an attacker need to exploit it?

The issue is triggered through an image annotation that instructs `podman run` to disable nearly all sandboxing, including sandboxing explicitly requested by the user. The provided advisory does not specify how an attacker would deliver or cause use of such an image.

How can I determine whether I am affected?

Check whether the listed AlmaLinux Podman-related packages are installed and whether your workflows run container images with `podman run`. Review images and their annotations where possible, especially images from sources that are not fully trusted.

ALSA-2026:88202: Important: podman security update

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

How can I determine whether I am affected?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

How can I determine whether I am affected?