Podman 6.2 fixes three security issues: CVE-2026-121885, involving systemd handling through image labels; CVE-2026-111361, involving an image-signature check bypass; and CVE-2026-123876, involving a bypass of socket restrictions in a seccomp profile.
The release also adds --validate and --label to podman kube play and --multiple-pods for Kubernetes deployments.
Security fixes
The new version closes three gaps that could threaten the security of systems:
An issue related to the handling of tags in container images, which could affect the control of system services.
A weakness in checking digital signatures of images, which could be bypassed.
A loophole that could allow applications to bypass restrictions placed to control communication with the rest of the operating system.
New features and improvements
In addition to security, version 6.2 brings changes that make daily use easier:
Better collaboration with Kubernetes: Options for validation and tagging were added, as well as the ability to manage…