Your message dated Mon, 12 Oct 2026 00:36:07 +0000
with message-id <[email protected]>
and subject line Bug#1149955: fixed in podman 5.8.6+ds1-3
has caused the Debian Bug report #1149955,
regarding podman: CVE-2026-94603
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1149955: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1149955
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: podman
Version: 5.8.6+ds1-2
X-Debbugs-CC: [email protected]
Severity: grave
Tags: security upstream
Control: found -1 5.4.2+ds1-2
Hi,
The following vulnerability was published for podman.
CVE-2026-94603[0]:
| The `podman run` command can be instructed to disable almost all
| sandboxing - including user-requested sandboxing - by image annotation
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2026-94603
https://www.cve.org/CVERecord?id=CVE-2026-94603
[1]
https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: podman
Source-Version: 5.8.6+ds1-3
Done: Reinhard Tartler <[email protected]>
We believe that the bug you reported is fixed in the latest version of
podman, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Reinhard Tartler <[email protected]> (supplier of updated podman package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 11 Oct 2026 20:19:24 -0400
Source: podman
Architecture: source
Version: 5.8.6+ds1-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team
<[email protected]>
Changed-By: Reinhard Tartler <[email protected]>
Closes: 1149955
Changes:
podman (5.8.6+ds1-3) unstable; urgency=medium
.
* debian/patches: Add patch for CVE-2026-94603 (Closes: #1149955)
Checksums-Sha1:
b64e49a9a69bada6ac0238330deebd2684e5f758 5100 podman_5.8.6+ds1-3.dsc
3b03d5f90654c276b1d94f0fb92d865c6eb6b428 35476 podman_5.8.6+ds1-3.debian.tar.xz
9a645683d33ce7aa7a5c90eafde8e6085eced7d1 5823876 podman_5.8.6+ds1-3.git.tar.xz
c43e089686d89af5fe66aeb83ff4e36694a1217b 17736
podman_5.8.6+ds1-3_source.buildinfo
Checksums-Sha256:
13c27bb8446566df7383ed60b88f35eb9c6da7a3ee9f935426d0eddf4ea4681f 5100
podman_5.8.6+ds1-3.dsc
236723f5dee7824c4a8dfff68700c519f80a709933968e59e8e583dacc7b59b3 35476
podman_5.8.6+ds1-3.debian.tar.xz
fbb98a5e18357e916d4f584c5507f799d5d98c39067727d2814a82500890f5c5 5823876
podman_5.8.6+ds1-3.git.tar.xz
0a1f943db6ee02f325e343b8123ffc0b72909cc5b1cd75897aaac6d90470804d 17736
podman_5.8.6+ds1-3_source.buildinfo
Files:
a2134e53ab4e60512105252367b09a26 5100 admin optional podman_5.8.6+ds1-3.dsc
e3f3d986044af2f9c53b32657ac4f1e6 35476 admin optional
podman_5.8.6+ds1-3.debian.tar.xz
75420f84c81ea9e5b73a91df6209f26d 5823876 admin None
podman_5.8.6+ds1-3.git.tar.xz
0329502dbbc4101190c8e3d6b46d7735 17736 admin optional
podman_5.8.6+ds1-3_source.buildinfo
Git-Tag-Info: tag=ff3a94f86e31a352837870f88a3df0b0bcb5bcc4
fp=30de7d1763ab9452c7e0825049a76977942826cb
Git-Tag-Tagger: Reinhard Tartler <[email protected]>
-----BEGIN PGP SIGNATURE-----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=qKVj
-----END PGP SIGNATURE-----
pgpMsqXkVHHNH.pgp
Description: PGP signature
--- End Message ---
