# Podman v6.1.1

- Product: Podman (https://whatsnew.fyi/product/podman)
- Vendor: Red Hat
- Date: 2026-09-02
- Version: v6.1.1
- Original notes: https://github.com/podman-container-tools/podman/releases/tag/v6.1.1
- Permalink: https://whatsnew.fyi/product/podman/releases/v6.1.1

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Address CVE-2026-17106 where a crafted tar archive could write outside the extraction directory through the use of malicious links
- **fixed** — Fix broken rootlessport bind behavior with `-p 0.0.0.0:... -p [::]:...` which failed instead of binding both v4 and v6 separately by binding separate IPv4 and IPv6 sockets to make the WSL forwarder logic work again

###### Security
- This release addresses CVE-2026-17106, where a crafted tar archive could write outside the extraction directory through the use of malicious links ([GHSA-hfg8-hc9c-6c3h](https://github.com/moby/go-archive/security/advisories/GHSA-hfg8-hc9c-6c3h)).

###### Bugfixes
- Fixed broken rootlessport bind behavior with `-p 0.0.0.0:... -p [::]:...` which failed instead of binding both v4 and v6 separately. Podman Machine on WSL should now correctly forward ports again by binding separate IPv4 and IPv6 sockets to make the WSL forwarder logic work again ([#29377](https://github.com/podman-container-tools/podman/issues/29377)).