Back Linuxsecurity

openSUSE Podman Important Host Info Leak Advisory 2026-3536

Linuxsecurity •LinuxSecurity Advisories • August 10, 2026

Share: View original

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

This update for podman fixes the following issues:

* CVE-2026-55686: specially crafted image where the `WORKDIR` path contains a

symlink allows for directory creation and ownership modification on the host

filesystem (bsc#1268579).

* CVE-2026-57231: specially crafted image can trick podman run into leaking

host environment variables into the container (bsc#1269471).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5

zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-3536=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5

zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-3536=1

* SUSE Linux Enterprise Server 15 SP6 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3536=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP5

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-3536=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3536=1

* SUSE Linux Enterprise Server 15 SP5 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-3536=1

* Containers Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-3536=1

* SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)

* podman-debuginfo-4.9.5-150500.3.78.1

* podman-remote-4.9.5-150500.3.78.1

* podman-4.9.5-150500.3.78.1

* podmansh-4.9.5-150500.3.78.1

* podman-remote-debuginfo-4.9.5-150500.3.78.1

* SUSE Linux Enterprise Server 15 SP5 LTSS (noarch)

* podman-docker-4.9.5-150500.3.78.1

* SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64)

* podman-debuginfo-4.9.5-150500.3.78.1

* podman-remote-4.9.5-150500.3.78.1

* podman-4.9.5-150500.3.78.1

* podmansh-4.9.5-150500.3.78.1

* podman-remote-debuginfo-4.9.5-150500.3.78.1

* SUSE Linux Enterprise Micro 5.5 (noarch)

* podman-docker-4.9.5-150500.3.78.1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64

* podman-debuginfo-4.9.5-150500.3.78.1

* podman-remote-4.9.5-150500.3.78.1

* podman-4.9.5-150500.3.78.1

* podmansh-4.9.5-150500.3.78.1

* podman-remote-debuginfo-4.9.5-150500.3.78.1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch)

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

openSUSE Podman Vulnerabilities Lead to Important Security Advisory 2026-3536 On August 10, 2026, SUSE released an advisory for Podman addressing two critical vulnerabilities identified as CVE-2026-55686 and CVE-2026-57231. The first vulnerability allows specially crafted images to create directories and modify ownership on the host filesystem, while the second can leak host environment variables into containers. Both vulnerabilities were published on June 26, 2026, and affect various SUSE Linux Enterprise products, including High Performance Computing and Server versions. Users are urged to audit Linux privileges to mitigate potential compromises and apply the recommended patches immediately. The advisory emphasizes the importance of securing host environments against these threats. 9 sources 71

Extracted Entities

openSUSE Podman Important Host Info Leak Advisory 2026-3536

The full story

Extracted Entities

Attack Types (1)

CVEs (2)

CWE Weaknesses (2)

Platforms (2)