SUSE-SU-2026:24378-1
SUSE-SU-2026:24378-1 · Security update for podman
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for podman fixes the following issues: - CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579). - CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the container (bsc#1269471).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
podman SUSE:Linux Micro 6.1
- Affected ranges
- ECOSYSTEM: < 5.4.2-slfo.1.1_6.1
Update to 5.4.2-slfo.1.1_6.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-202624378-1/
- https://bugzilla.suse.com/1268579
- https://bugzilla.suse.com/1269471
- https://www.suse.com/security/cve/CVE-2025-22869
- https://www.suse.com/security/cve/CVE-2025-47913
- https://www.suse.com/security/cve/CVE-2025-47914
- https://www.suse.com/security/cve/CVE-2025-52881
- https://www.suse.com/security/cve/CVE-2025-6032
- https://www.suse.com/security/cve/CVE-2025-9566
- https://www.suse.com/security/cve/CVE-2026-34986
- https://www.suse.com/security/cve/CVE-2026-39829
- https://www.suse.com/security/cve/CVE-2026-39830
- https://www.suse.com/security/cve/CVE-2026-42508
- https://www.suse.com/security/cve/CVE-2026-55686
- https://www.suse.com/security/cve/CVE-2026-57231
- https://osv.dev/vulnerability/SUSE-SU-2026:24378-1