Podman v5.8.2 release notes

Podman v5.8.2

v5.8.2Apr 14, 2026 · 4 months ago

Changed 3

Fixed 7

Fix containers with the unless-stopped restart policy not restarting after a reboot when podman-restart.service is enabled
Fix setting Entrypoint="" in a Quadlet .container file not clearing the container's entrypoint
Fix setting a HealthCmd in a Quadlet .container file to a command that includes double-quotes resulting in a nonfunctional healthcheck due to a parsing issue
Fix FreeBSD systems panicking when inspecting containers created with the host network mode
Fix the Libpod System Check endpoint performing operations with bad data after returning a 400 error
Fix the remote attach API for containers (Libpod & Compat) panicking due to a rare race condition
Fix the Secret Create API not creating functional secrets using the shell driver due to options from the default driver being improperly added

Security 1

Address CVE-2026-33414 where podman machine init --image command on Windows using the Hyper-V backend could run PowerShell-escaped commands from the user-specified image path in a PowerShell session on the host

This release addresses CVE-2026-33414, where the podman machine init --image command when run on Windows using the Hyper-V backend can run PowerShell-escaped commands from the user-specified image path on in a PowerShell session on the host (GHSA-hc8w-h2mf-hp59).

Fixed a bug where containers with the unless-stopped restart policy would not restart after a reboot when podman-restart.service was enabled (#28152).
Fixed a bug where setting Entrypoint="" in a Quadlet .container file did not clear the container's entrypoint (#28213).
Fixed a bug where setting a HealthCmd in a Quadlet .container file to a command that included double-quotes (") would result in a nonfunctional healthcheck due to a parsing issue (#28409).
Fixed a bug where FreeBSD systems could panic when inspecting containers created with the host network mode (#28289).

Fixed a bug where the Libpod System Check endpoint could perform operations with bad data after returning a 400 error (#28350).
Fixed a bug where the remote attach API for containers (Libpod & Compat) could panic due to a rare race condition (#28277).
Fixed a bug where the Secret Create API could not create functional secrets using the shell driver due to options from the default driver being improperly added.

Podman v5.8.2