Security update for podman
This update for podman rebuilds it against the current go security release.
- Обновитесь до 4.9.5-150300.9.89.1
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости podman
За последние 30 дней в podman опубликовано уязвимостей: 2; в каталоге KEV: 0.
Уязвимостей: 24
Security update for podman
This update for podman rebuilds it against the current go security release.
- Обновитесь до 4.9.5-150300.9.87.1
Опубликовано ОбновленоSecurity update for podman
This update for podman rebuilds it against the current go security release.
- Обновитесь до 4.9.5-150300.9.85.1
Опубликовано ОбновленоSecurity update for podman
This update for podman fixes the following issues: - CVE-2026-55686: specially crafted image where the `WORKDIR` path contains a symlink allows for directory creation and ownership modification on the host filesystem (bsc#1268579). - CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the container (bsc#1269471).
- Обновитесь до 4.9.5-150300.9.83.1
Опубликовано ОбновленоSecurity update for podman
This update for podman rebuilds it against the current go security release.
- Обновитесь до 4.9.5-150300.9.80.1
Опубликовано ОбновленоSecurity update for podman
This update for podman fixes the following issues - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262856). - CVE-2026-39829,CVE-2026-39830,CVE-2026-42508,CVE-2026-46598: golang.org/x/crypto/ssh: multiple issues (bsc#1266125).
- Обновитесь до 4.9.5-150300.9.78.1
Опубликовано ОбновленоSecurity update for podman
This update for podman rebuilds it against the current go security release.
- Обновитесь до 4.9.5-150300.9.75.1
Опубликовано ОбновленоSecurity update for podman
This update for podman rebuilds it against the current go 1.25 security release.
- Обновитесь до 4.9.5-150300.9.71.1
Опубликовано ОбновленоSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed SSH Agent that could cause a panic due to an out-of-bounds read with non-validated message sizes (bsc#1253993)
- Обновитесь до 4.9.5-150300.9.69.1
Опубликовано ОбновленоSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253542)
- Обновитесь до 4.9.5-150300.9.66.1
Опубликовано ОбновленоSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-31133: Fixed container escape via 'masked path' abuse due to mount race conditions (bsc#1252376) - CVE-2025-52565: Fixed container escape with malicious config due to /dev/console mount and related races (bsc#1252376) - CVE-2025-52881: Fixed container escape and denial of service due to arbitrary write gadgets and procfs write redirects (bsc#1252376) Other fixes: - Fix: podman and buildah with runc 1.3.2 fail with lots of warnings as rootless (bsc#1252543) - Add symlink to catatonit in /usr/libexec/podman (bsc#1248988)
- Обновитесь до 4.9.5-150300.9.63.2
Опубликовано ОбновленоSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-9566: fixed an issue where kube play command could cause host files to get overwritten (bsc#1249154)
- Обновитесь до 4.9.5-150300.9.55.1
Опубликовано ОбновленоSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-6032: Fixed machine init command failing to verify TLS certificate (bsc#1245320)
- Обновитесь до 4.9.5-150300.9.52.1
Опубликовано ОбновленоRecommended update for podman
This update for podman fixes the following issues: - Added patch to remove using rw as a default mount option (bsc#1239776)
- Обновитесь до 4.9.5-150300.9.49.2
Опубликовано ОбновленоSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239330).
- Обновитесь до 4.9.5-150300.9.46.1
Опубликовано ОбновленоSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE (bsc#1237641) - CVE-2024-9676: github.com/containers/storage: Fixed symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (bsc#1231698) - CVE-2024-9675: Fixed cache arbitrary directory mount in buildah (bsc#1231499) - CVE-2024-9407: Fixed Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction in buildah (bsc#1231208) - CVE-2024-9341: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (bsc#
- Обновитесь до 4.9.5-150300.9.43.1
Опубликовано ОбновленоSecurity update for podman
This update for podman fixes the following issues: - CVE-2024-6104: Fixed sensitive information disclosure in log files in go-retryablehttp (bsc#1227052)
- Обновитесь до 4.9.5-150300.9.34.1
Опубликовано ОбновленоSecurity update for podman
This update for podman fixes the following issues: - Update to version 4.9.5 - CVE-2024-3727: Fixed a flaw that allowed attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks. (bsc#1224122) - CVE-2024-24786: Fixed an infinite loop in protojson. (bsc#1226136)
- Обновитесь до 4.9.5-150300.9.31.1
Опубликовано ОбновленоSecurity update for podman
This update for podman fixes the following issues: - Update to version 4.9.5 - CVE-2024-3727: Fixed a flaw that allowed attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks. (bsc#1224122) - CVE-2024-24786: Fixed an infinite loop in protojson. (bsc#1226136)
- Обновитесь до 4.9.5-150300.9.31.1
Опубликовано ОбновленоSecurity update for podman
This update for podman fixes the following issues: - CVE-2024-1753: Fixed full container escape at build time in buildah (bsc#1221677).
- Обновитесь до 4.4.4-150300.9.26.2
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.