[pkg-go] Bug#1149955: podman: CVE-2026-94603

[Salvatore Bonaccorso]

Source: podman
Version: 5.8.6+ds1-2
X-Debbugs-CC: team at security.debian.org
Severity: grave
Tags: security upstream
Control: found -1 5.4.2+ds1-2

Hi,

The following vulnerability was published for podman.

CVE-2026-94603[0]:
| The `podman run` command can be instructed to disable almost all
| sandboxing - including user-requested sandboxing - by image annotation


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-94603
    https://www.cve.org/CVERecord?id=CVE-2026-94603
[1] https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g

Regards,
Salvatore