Security update for podman
This update for podman rebuilds it against the current go security release.
- Обновитесь до 4.9.5-150500.3.86.1
PatchFirst · Свежие уязвимости
За последние 30 дней в podman опубликовано уязвимостей: 2; в каталоге KEV: 0.
Уязвимостей: 14
This update for podman rebuilds it against the current go security release.
This update for podman rebuilds it against the current go security release.
This update for podman rebuilds it against the current go security release.
This update for podman rebuilds it against the current go security release.
This update for podman fixes the following issues: - CVE-2026-55686: specially crafted image where the `WORKDIR` path contains a symlink allows for directory creation and ownership modification on the host filesystem (bsc#1268579). - CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the container (bsc#1269471).
This update for podman rebuilds it against the current go security release.
This update for podman rebuilds it against the current go security release. - CVE-2026-34986: Update github.com/go-jose/go-jose/v3+v4 dependency (bsc#1262856). - CVE-2026-39829, CVE-2026-39830, CVE-2026-42508, CVE-2026-46598: Update golang.org/x/crypto/ssh dependency (bsc#1266125).
This update for podman rebuilds it against the current go 1.25 security release.
This update for podman fixes the following issues: - CVE-2025-47914: Fixed ssh-agent that could cause a panic due to an out-of-bounds read with non validated message size (bsc#1253993)
This update for podman fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253542)
This update for podman fixes the following issues: - CVE-2025-31133: Fixed container escape via 'masked path' abuse due to mount race conditions (bsc#1252376) - CVE-2025-52565: Fixed container escape with malicious config due to /dev/console mount and related races (bsc#1252376) - CVE-2025-52881: Fixed container escape and denial of service due to arbitrary write gadgets and procfs write redirects (bsc#1252376) Other fixes: - Fix: podman and buildah with runc 1.3.2 fail with lots of warnings as rootless (bsc#1252543)
This update for podman fixes the following issues: - CVE-2025-9566: fixed a case when kube play command could overwrite host files (bsc#1249154).
This update for podman fixes the following issues: - CVE-2025-6032: Fixed machine init command failing to verify TLS certificate (bsc#1245320)
This update for podman fixes the following issues: - Added patch to remove using rw as a default mount option (bsc#1239776)
Сопоставьте установленный стек и версии со свежими базами уязвимостей.