CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

sysutils/podman 5.8.9_2

Fixed in main, not merged to 2026Q4: podman -- vulnerabilities, podman -- vulnerabilities

Manage Pods, Containers and Container Images

Port info

Maintainer
dfr@FreeBSD.org
Packages
latest: 5.8.9_2
Upstream
Higher version available: 6.1.4
Last update
to 5.8.9_2 · d81b7ba3c3
Quarterly
2026Q4: 5.8.6_4 2 VuXML · last MFH 60647eff54
WWW
https://podman.io/
Links
cgit · VuXML

Install

Package
# pkg install podman
installs 5.8.9_2 from latest; from quarterly (2026Q4) 5.8.6_4
Port
# cd /usr/ports/sysutils/podman && make install clean
Size
50 MiB download · 107 MiB installed
Depends on
net/containernetworking-plugins 0.6_20, security/gpgme 2.1.2, sysutils/conmon 2.2.1_10, sysutils/containers-common 0.67.2_1, sysutils/ocijail 0.6.1
License
APACHE20
pkg-message
Shown after installing
The FreeBSD port of the Podman container engine is experimental and should be
used for evaluation and testing purposes only.

$ sudo podman run --rm quay.io/dougrabson/hello

Podman can restart containers after a host is rebooted. To enable this, use:

$ sudo sysrc podman_enable=YES

and start the container with a restart policy:

$ sudo podman run -d --restart=always myimage

It is possible to run many Linux container images using FreeBSD's Linux emulation:

$ sudo sysrc linux_enable=YES
$ sudo service linux start
$ sudo podman run --rm --os=linux alpine cat /etc/os-release | head -1
NAME="Alpine Linux"
Shown after upgrading
In Podman-4.7.0 and later, registry authentication creds moved from
/run/containers/0/auth.json to /root/.config/containers/auth.json. Either move
the file to the new location or just re-authenticate to the required registries.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 165.8.9_25.8.8–
FreeBSD 155.8.9_25.8.9_1–
FreeBSD 145.8.9_25.8.6_3✗

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 155.8.6_45.8.6_3–
FreeBSD 145.8.6_45.8.6_3✗

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 5.8.9_2.

Fixed (5)

Show 5 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (4) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
296293maintainer-feedback? sysutils/podman: CVE-2026-57231New2026-09-26
298420maintainer-feedback? sysutils/podman + freebsd linux: /proc is not mountedNew2026-09-12
282539maintainer-feedback? sysutils/podman: Setuid flag lost when creating container imageNew2026-07-05
291144maintainer-feedback? sysutils/podman: low incoming network performance in running containersNew2025-11-25

Commits (76)

Ashish SHUKLA (ashish) · 5.1.1_3
all: Bump after lang/go121 update
aa8c0111bf
Ashish SHUKLA (ashish) · 5.1.1_2
all: Bump after lang/go121 update
c4b51c2028
Ashish SHUKLA (ashish) · 5.1.1_1
all: Bump after lang/go121 update

MFH:		2024Q2
746fa696a1
Doug Rabson (dfr) · 5.1.1
sysutils/podman: update to 5.1.1
a175b2c9d0
Ashish SHUKLA (ashish) · 4.8.3_4
all: Bump after lang/go121 update

MFH:		2024Q2
fce0cc3272
Ashish SHUKLA (ashish) · 4.8.3_3
all: Bump after lang/go121 update

MFH:		2024Q2
32b284679a
Muhammad Moinur Rahman (bofh) · 4.8.3_2
lang/go: Change DEFAULT to 1.21

PR:		277776
Approved by:	portmgr (exp-run)
a5a000df3b
Ashish SHUKLA (ashish) · 4.8.3_1
all: Bump PORTREVISION after lang/go* update

PR:		276530
7e5aa2085f
Doug Rabson (dfr) · 4.8.3
sysutils/podman: update to 4.8.3

This also adds a fix for https://github.com/containers/podman/issues/21117
which will be submitted upstream soon (credit to Ben Cooksley from KDE
for that one).
094c6d2e9f
Ashish SHUKLA (ashish) · 4.7.2_1
all: Bump PORTREVISION after lang/go* update

PR:		274405
0505b712df
Doug Rabson (dfr) · 4.7.2
sysutils/podman: update to 4.7.1
b39cab6a9e
Dmitri Goutnik (dmgk) · 4.6.1_1
all: Bump PORTREVISION after lang/go* update
8e4bc57934
Doug Rabson (dfr) · 4.6.1
sysutils/podman: update to 4.6.1
3f569b3f02
Dmitri Goutnik (dmgk) · 4.6.0_1
all: Bump PORTREVISION after lang/go{119,120} update
09b993031a
Doug Rabson (dfr) · 4.6.0
sysutils/podman: update to 4.6.0

Approved by: lwhsu
b6ee66a16f
Rene Ladan (rene) · 4.5.1
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Doug Rabson (dfr) · 4.5.1
sysutils/podman: update to 4.5.1

Approved-by:    dch
a1bafc8ceb
Dmitri Goutnik (dmgk) · 4.4.2_1
all: Bump PORTREVISION after lang/go{119,120} update
ff40d94c1d
Doug Rabson (dfr) · 4.4.2
sysutils/podman: update to 4.4.2

Changes:	https://github.com/containers/podman/releases/tag/v4.4.2
Approved by:    dch
14403871fa
Dmitri Goutnik (dmgk) · 4.4.0.dev_6
all: Bump PORTREVISION after Go ports update
09079730e9
Dmitri Goutnik (dmgk) · 4.4.0.dev_5
all: Bump PORTREVISION after lang/go{119,120} update
56b5ec772f
Dmitri Goutnik (dmgk) · 4.4.0.dev_4
all: Bump PORTREVISION after GO_DEFAULT update.
2297efc51b
Dmitri Goutnik (dmgk) · 4.4.0.dev_3
all: Bump PORTVERSION after lang/go{118,119} update
3b383d833a
Dmitri Goutnik (dmgk) · 4.4.0.dev_2
all: Bump PORTREVISION after lang/go{118,119} update
d9ad1002d5
Doug Rabson (dfr) · 4.4.0.dev_1
sysutils/podman: update to 4.4.0.dev_1

Approved by:    dch
16f2c06e0e
Dave Cottlehuber (dch) · 4.4.0.d
sysutils/podman: new port

podman (Pod Manager) is a fully featured container engine that is a simple
daemonless tool.  podman provides a Docker-CLI comparable command line
that eases the transition from other container engines and allows the
management of pods, containers and images.  Simply put: alias docker=podman.

podman uses Buildah(1) internally to create container images.  Both tools
share image (not container) storage, hence each can use or manipulate
images (but not containers) created by the other.

PR:		267184
Reviewed by:	arrowd
Reviewed by:	dch
Sponsored by:	SkunkWerks, GmbH
Differential Revision:	https://reviews.freebsd.org/D37324
da130a1d62