CVEs in docker/docker v28.5.*

[cs-pvyas]

Hello,
We are unable to use podman 5.8 due to CVEs discovered.
CVE-2026-34040
CVE-2026-33997

Is it possible to expedite the build of v6 where I can see the dep on github.com/docker/docker has been replaced by Moby.

[Luap99]

Podman 6 is planned for second week of May, but only so when it will be ready and there is still a lot of ongoing work.

As far as the CVEs as far as I can tell they do not affect podman at all. They are specific to the plugin code which we do not use as such there is no need to patch 5.8.

[cs-pvyas]

Thanks for the update.