Every CVE Search/ Get API key

CVE-2025-9566

Podman: podman kube play command may overwrite host files

8.1 HighFix available

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.

Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
High

Exploit likelihood

1.21%Up 1.1 points since Sep 6, 2025
90%50%10%1%

What each source reports

CVE List Score used 8.1

Podman: podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.

Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1

Record
CVE-2025-9566
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weakness
CWE-22
Updated
2026-11-03
EUVDEUVD-2025-27030 8.1

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.

Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1

Record
EUVD-2025-27030
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-wp3j-xq48-xpjw 8.1

podman kube play symlink traversal vulnerability

Impact

The podman kube play command can overwrite host files when the kube file contains a ConfigMap or Secret volume mount and the volume already contains a symlink to a host file. This allows a malicious container to write to arbitrary files on the host BUT the attacker only controls the target path not the contents that will be written to the file. The contents are defined in the yaml file by the end user.

Requirements to exploit:

podman kube play must be used with a ConfigMap or Secret volume mount AND must be run more than once on the same volume. All the attacker has to do is create the malicious symlink on the volume the first time it is started. After that all following starts would follow the symlink and write to the host location.

Patches

Fixed in podman v5.6.1 https://github.com/containers/podman/commit/43fbde4e665fe6cee6921868f04b7ccd3de5ad89

Workarounds

Don't use podman kube play with ConfigMap or Secret volume mounts.

PR with test for CI

Adding on 9/8/2025 by @TomSweeneyRedHat , this is the PR containing the test in CI: https://github.com/containers/podman/pull/27001

Record
GHSA-wp3j-xq48-xpjw
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weakness
CWE-22, CWE-61
Updated
2026-11-03
NVD 8.1

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.

Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1

Record
CVE-2025-9566
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weakness
CWE-22
Updated
2026-11-03
OSVALPINE-CVE-2025-9566 8.1

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.

Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1

Record
ALPINE-CVE-2025-9566
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-03
OSVBELL-CVE-2025-9566 8.1
Record
BELL-CVE-2025-9566
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSV 8.1

Podman: podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.

Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1

Record
CVE-2025-9566
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weakness
CWE-22
Updated
2026-11-04
OSVDEBIAN-CVE-2025-9566 8.1

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1

Record
DEBIAN-CVE-2025-9566
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-03
OSVGHSA-wp3j-xq48-xpjw 8.1

podman kube play symlink traversal vulnerability

Impact

The podman kube play command can overwrite host files when the kube file contains a ConfigMap or Secret volume mount and the volume already contains a symlink to a host file. This allows a malicious container to write to arbitrary files on the host BUT the attacker only controls the target path not the contents that will be written to the file. The contents are defined in the yaml file by the end user.

Requirements to exploit:

podman kube play must be used with a ConfigMap or Secret volume mount AND must be run more than once on the same volume. All the attacker has to do is create the malicious symlink on the volume the first time it is started. After that all following starts would follow the symlink and write to the host location.

Patches

Fixed in podman v5.6.1 https://github.com/containers/podman/commit/43fbde4e665fe6cee6921868f04b7ccd3de5ad89

Workarounds

Don't use podman kube play with ConfigMap or Secret volume mounts.

PR with test for CI

Adding on 9/8/2025 by @TomSweeneyRedHat , this is the PR containing the test in CI: https://github.com/containers/podman/pull/27001

Record
GHSA-wp3j-xq48-xpjw
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weakness
CWE-22, CWE-61
Updated
2026-11-03
OSVRHBA-2025:15692 8.1

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.19.12 packages update

Record
RHBA-2025:15692
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHBA-2025:15712 8.1

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.18.24 packages update

Record
RHBA-2025:15712
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHBA-2025:16158 8.1

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.15.58 packages update

Record
RHBA-2025:16158
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHBA-2025:16163 8.1

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.14.57 packages update

Record
RHBA-2025:16163
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHEA-2025:4782 8.1

Red Hat Enhancement Advisory: OpenShift Container Platform 4.20.z packages update

Record
RHEA-2025:4782
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:15900 8.1

Red Hat Security Advisory: podman security update

Record
RHSA-2025:15900
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:15901 8.1

Red Hat Security Advisory: podman security update

Record
RHSA-2025:15901
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:15904 8.1

Red Hat Security Advisory: container-tools:rhel8 security update

Record
RHSA-2025:15904
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:16480 8.1

Red Hat Security Advisory: podman security update

Record
RHSA-2025:16480
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:16481 8.1

Red Hat Security Advisory: podman security update

Record
RHSA-2025:16481
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:16482 8.1

Red Hat Security Advisory: container-tools:rhel8 security update

Record
RHSA-2025:16482
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:16488 8.1

Red Hat Security Advisory: podman security update

Record
RHSA-2025:16488
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:16515 8.1

Red Hat Security Advisory: container-tools:rhel8 security update

Record
RHSA-2025:16515
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:16724 8.1

Red Hat Security Advisory: OpenShift Container Platform 4.16.49 packages and security update

Record
RHSA-2025:16724
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:17669 8.1

Red Hat Security Advisory: OpenShift Container Platform 4.12.81 packages and security update

Record
RHSA-2025:17669
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:20909 8.1

Red Hat Security Advisory: podman security update

Record
RHSA-2025:20909
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:20983 8.1

Red Hat Security Advisory: podman security update

Record
RHSA-2025:20983
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:18289 8.1

Red Hat Security Advisory: podman security update

Record
RHSA-2026:18289
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:18722 8.1

Red Hat Security Advisory: podman security update

Record
RHSA-2026:18722
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:8211 8.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:8211
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:15900 8.1

Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

  • podman: Podman kube play command may overwrite host files (CVE-2025-9566)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:15900
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:15901 8.1

Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

  • podman: Podman kube play command may overwrite host files (CVE-2025-9566)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:15901
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:15904 8.1

Important: container-tools:rhel8 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • podman: Podman kube play command may overwrite host files (CVE-2025-9566)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:15904
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:18722 8.1

Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

  • podman: Podman kube play command may overwrite host files (CVE-2025-9566)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.

Record
RLSA-2026:18722
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-9566 8.1

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1

Record
UBUNTU-CVE-2025-9566
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-04
OSVALSA-2025:15900 No score

Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

  • podman: Podman kube play command may overwrite host files (CVE-2025-9566)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:15900
Updated
2026-11-02
OSVALSA-2025:15901 No score

Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

  • podman: Podman kube play command may overwrite host files (CVE-2025-9566)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:15901
Updated
2026-11-02
OSVALSA-2025:15904 No score

Important: container-tools:rhel8 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • podman: Podman kube play command may overwrite host files (CVE-2025-9566)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:15904
Updated
2026-11-02
OSVALSA-2025:20909 No score

Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

  • database/sql: Postgres Scan Race Condition (CVE-2025-47907)
  • podman: Podman kube play command may overwrite host files (CVE-2025-9566)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:20909
Updated
2026-11-02
OSVALSA-2025:20983 No score

Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

  • database/sql: Postgres Scan Race Condition (CVE-2025-47907)
  • podman: Podman kube play command may overwrite host files (CVE-2025-9566)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:20983
Updated
2026-11-02
OSVAZL-67046 No score

CVE-2025-9566 affecting package podman 4.1.1-26

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.

Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1

Record
AZL-67046
Updated
2026-11-02
OSVAZL-67049 No score

CVE-2025-9566 affecting package podman 5.6.1-10

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.

Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1

Record
AZL-67049
Updated
2026-11-05
OSVCLSA-2025-1759505734 No score

podman: Fix of CVE-2025-9566

  • CVE-2025-9566: fix kube play vulnerability that allows following volume symlinks onto the host filesystem. Prevent symlink-based host escapes in ConfigMap and Secret volumes
Record
CLSA-2025-1759505734
Updated
2026-11-02
OSVGO-2025-3935 No score

podman kube play symlink traversal vulnerability in github.com/containers/podman

podman kube play symlink traversal vulnerability in github.com/containers/podman

Record
GO-2025-3935
Updated
2026-11-02
OSVopenSUSE-SU-2025:15538-1 No score

govulncheck-vulndb-0.0.20250908T141310-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250908T141310-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15538-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15845-1 No score

podman-5.7.1-1.1 on GA media

These are all security issues fixed in the podman-5.7.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15845-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20072-1 No score

Security update for podman

This update for podman fixes the following issues:

  • CVE-2025-31133,CVE-2025-52565,CVE-2025-52881: container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1252376).
  • CVE-2025-9566: kube play command may overwrite host files (bsc#1249154).
Record
openSUSE-SU-2026:20072-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20305-1 No score

Security update for podman

This update for podman fixes the following issues:

Changes in podman:

  • Add symlink to catatonit in /usr/libexec/podman (bsc#1248988)

  • CVE-2025-47914: Fixed golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an out of bounds read (bsc#1253993)

  • CVE-2025-47913: Fixed golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253542):

  • CVE-2025-31133,CVE-2025-52565,CVE-2025-52881: Fixed runc: Container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1252376):

  • CVE-2025-9566: Fixed that podman kube play command may overwrite host files (bsc#1249154):

Record
openSUSE-SU-2026:20305-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21244-1 No score

Security update for podman

This update for podman fixes the following issues

  • CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262856).
  • CVE-2026-39827: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh (bsc#1266125).
  • CVE-2026-39828: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh (bsc#1266125).
  • CVE-2026-39829: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh (bsc#1266125).
  • CVE-2026-39830: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh (bsc#1266125).
  • CVE-2026-39831: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh (bsc#1266125).
  • CVE-2026-39832: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent (bsc#1266125).
  • CVE-2026-39833: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent (bsc#1266125).
  • CVE-2026-39834: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh (bsc#1266125).
  • CVE-2026-39835: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh (bsc#1266125).
  • CVE-2026-42508: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts (bsc#1266125).
  • CVE-2026-46595: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh (bsc#1266125).
  • CVE-2026-46597: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh (bsc#1266125).
  • CVE-2026-46598: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent (bsc#1266125).
Record
openSUSE-SU-2026:21244-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21483-1 No score

Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues:

  • Update to version 0.0.20260723T184607 2026-07-23T18:46:07Z (jsc#PED-11136).

Go CVE Numbering Authority IDs added or updated with aliases:

  • GO-2026-4730 CVE-2026-33022 GHSA-cv4x-93xx-wgfj
  • GO-2026-4761 CVE-2026-33211 GHSA-j5q5-j9gm-2w5c
  • GO-2026-5102 CVE-2026-45021 GHSA-3vcp-chfh-f6r2
  • GO-2026-5272 CVE-2026-40938 GHSA-94jr-7pqp-xhcq
  • GO-2026-5486 CVE-2026-40924 GHSA-m2cx-gpqf-qf74
  • GO-2026-5542 CVE-2026-40090 GHSA-pj97-4p9w-gx3q
  • GO-2026-5630 CVE-2026-25542 GHSA-rmx9-2pp3-xhcr
  • GO-2026-5643 CVE-2026-40923 GHSA-rx35-6rhx-7858
  • GO-2026-5675 CVE-2026-41492 GHSA-vvf7-6rmr-m29q
  • GO-2026-5711 CVE-2026-40161 GHSA-wjxp-xrpv-xpff
  • GO-2026-5746 CVE-2026-41567 GHSA-x86f-5xw2-fm2r
  • GO-2026-5749 CVE-2026-41328 GHSA-x92x-px7w-4gx4
  • GO-2026-5837 CVE-2026-44840 GHSA-q2m9-6jp9-c6mc
  • GO-2026-5929 CVE-2026-44342 GHSA-26v7-h57m-gh9m
  • GO-2026-5930 CVE-2026-33655 GHSA-6qcr-qxgr-m7fv
  • GO-2026-5933 GHSA-3g4q-2f67-2gvh
  • GO-2026-5934 GHSA-59qp-cfj3-rp64
  • GO-2026-5935 GHSA-7856-g3gv-9wq8
  • GO-2026-5936 CVE-2026-53552 GHSA-26rh-24rg-j3vv
  • GO-2026-5937 CVE-2026-53508 GHSA-2jcc-mxv7-p3f9
  • GO-2026-5938 CVE-2026-53553 GHSA-4g5x-hcwm-82jw
  • GO-2026-5939 CVE-2026-10517 GHSA-698x-9w2p-7vvp
  • GO-2026-5940 CVE-2026-53572 GHSA-6w3m-4hhp-775q
  • GO-2026-5941 CVE-2026-53487 GHSA-gvhc-wv3v-7pf8
  • GO-2026-5942 CVE-2026-46600
  • GO-2026-5944 CVE-2026-50197 GHSA-659f-rgp5-w4wf
  • GO-2026-5945 CVE-2026-6815 GHSA-rmxx-v9rj-vpvg
  • GO-2026-5946 CVE-2026-52831 GHSA-v5px-423j-pf7p
  • GO-2026-5947 CVE-2026-53649 GHSA-xqhv-chqm-fhcc
  • GO-2026-5948 CVE-2026-50554 GHSA-588f-fvcv-xhvf
  • GO-2026-5949 CVE-2026-50553 GHSA-rqrh-8wpv-x7hh
  • GO-2026-5950 CVE-2026-53602 GHSA-339v-266x-79xr
  • GO-2026-5951 CVE-2026-10219 GHSA-6jm8-4fhr-5w64
  • GO-2026-5952 CVE-2026-49834 GHSA-9vcr-p3rj-q5q6
  • GO-2026-5953 CVE-2026-9094 GHSA-c9w5-qp6m-m395
  • GO-2026-5956 CVE-2026-55252 GHSA-h5g6-xmh4-hc37
  • GO-2026-5957 CVE-2026-54158 GHSA-5xfx-xj4h-5p7r
  • GO-2026-5958 CVE-2026-54068 GHSA-gcm7-57gf-953c
  • GO-2026-5959 CVE-2026-54072 GHSA-h29v-hj44-q8cv
  • GO-2026-5961 CVE-2026-54069 GHSA-hvr9-72v2-fff3
  • GO-2026-5962 CVE-2026-54088 GHSA-m93h-4hw7-5qcm
  • GO-2026-5963 CVE-2026-54067 GHSA-mvjr-vv3c-w4qv
  • GO-2026-5964 CVE-2026-54066 GHSA-p4m3-mgmm-c664
  • GO-2026-5965 CVE-2026-54070 GHSA-w7cg-whh7-xp28
  • GO-2026-5966 CVE-2026-54089 GHSA-xqp3-jq6g-x3qm
  • GO-2026-5967 CVE-2026-50551 GHSA-56mp-4f3v-fgj2
  • GO-2026-5968 CVE-2026-54174 GHSA-fpg8-7664-jc5q
  • GO-2026-5969 GHSA-g936-7jqj-mwv8
  • GO-2026-5970 CVE-2026-56852
  • GO-2026-5973 CVE-2026-54250 GHSA-jxr7-mqhw-9p98
  • GO-2026-5974 CVE-2026-44300 GHSA-wmj8-9953-vff5
  • GO-2026-5975 CVE-2026-50018 GHSA-42j2-w334-qxw7
  • GO-2026-5976 CVE-2026-50141 GHSA-g7mm-9vx7-jm7h
  • GO-2026-5977 CVE-2026-50013 GHSA-qrh4-p6v4-mrfg
  • GO-2026-5978 CVE-2026-50125 GHSA-qw5r-ppcg-f8rj
  • GO-2026-5979 CVE-2026-50006 GHSA-xrcf-6jh3-ggvx
  • GO-2026-5980 CVE-2026-50158 GHSA-2c7f-fxww-6w6c
  • GO-2026-5981 GHSA-mqxv-9rm6-w8qc
  • GO-2026-5982 GHSA-pqg7-v6wh-3pfp
  • GO-2026-5984 CVE-2026-53604 GHSA-2p2f-px33-4vv5
  • GO-2026-5985 GHSA-7rx3-5wx3-5v76
  • GO-2026-5986 CVE-2026-61699 GHSA-cm26-5974-52h8
  • GO-2026-5987 CVE-2026-55513 GHSA-g4x6-jcvr-9m3g
  • GO-2026-5988 CVE-2026-54628 GHSA-hwrq-8wxh-q4xv
  • GO-2026-5989 CVE-2026-55512 GHSA-m3cx-mwpg-32jg
  • GO-2026-5990 CVE-2026-54629 GHSA-mf78-3rpf-r784
  • GO-2026-5991 CVE-2026-53603 GHSA-q4vm-pq3q-8wgq
  • GO-2026-5992 CVE-2026-61549 GHSA-qf34-295c-26v8
  • GO-2026-5996 CVE-2026-54450 GHSA-pph6-vfjv-vpjw
  • GO-2026-5997 CVE-2026-54452 GHSA-xgch-x3mx-cm3c
  • GO-2026-5998 CVE-2026-54495 GHSA-398h-7f66-3h4p
  • GO-2026-5999 CVE-2026-10814 GHSA-jh6h-v6mp-h22v
  • GO-2026-6002 CVE-2026-58196 GHSA-pr64-jmmf-jp54
  • GO-2026-6003 CVE-2026-53714 GHSA-22xc-xg2r-9j7v
  • GO-2026-6004 CVE-2026-52833 GHSA-3v79-m2cg-89ww
  • GO-2026-6005 CVE-2026-53715 GHSA-8fv2-88gg-hm7q
  • GO-2026-6006 CVE-2026-53716 GHSA-cxpq-8v7q-cg56 *…
Record
openSUSE-SU-2026:21483-1
Updated
2026-11-02
OSVSUSE-SU-2025:03289-1 No score

Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues:

  • Update to version 0.0.20250918T182144 2025-09-18T18:21:44Z (jsc#PED-11136).

    Go CVE Numbering Authority IDs added or updated with aliases:

    • GO-2025-3915 CVE-2025-5187 GHSA-4x4m-3c2p-qppc
    • GO-2025-3956 CVE-2025-47906 CVE-2025-47906

  • Update to version 0.0.20250917T170349 2025-09-17T17:03:49Z (jsc#PED-11136).

    Go CVE Numbering Authority IDs added or updated with aliases:

    • GO-2025-3922 CVE-2025-58058 GHSA-jc7w-c686-c4v9
    • GO-2025-3926 CVE-2025-58158 GHSA-w469-hj2f-jpr5
    • GO-2025-3929 CVE-2025-58157 GHSA-9fvj-xqr2-xwg8
    • GO-2025-3938 CVE-2025-58437 GHSA-j6xf-jwrj-v5qp
    • GO-2025-3939 CVE-2025-7445 GHSA-rcw7-pqfp-735x
    • GO-2025-3940 CVE-2025-58445 GHSA-xh7v-965r-23f7
    • GO-2025-3941 CVE-2025-58450 GHSA-p46v-f2x8-qp98
    • GO-2025-3942 CVE-2025-58063 GHSA-93mf-426m-g6x9
    • GO-2025-3943 CVE-2025-58430 GHSA-rf24-wg77-gq7w
    • GO-2025-3944 CVE-2025-54123 GHSA-r4h8-hfp2-ggmf
    • GO-2025-3945 CVE-2025-54376 GHSA-jxmr-2h4q-rhxp
    • GO-2025-3949 CVE-2025-59361 GHSA-2gcv-3qpf-c5qr
    • GO-2025-3950 CVE-2025-9076 GHSA-3vcm-c42p-3hhf
    • GO-2025-3951 CVE-2025-59358 GHSA-2gg8-85m5-8r2p
    • GO-2025-3952 CVE-2025-59359 GHSA-369h-6j28-wwcg
    • GO-2025-3953 CVE-2025-8396 GHSA-p768-c3pr-6459
    • GO-2025-3954 CVE-2025-59360 GHSA-xv9f-728h-9jgv
    • GO-2025-3958 CVE-2025-9072 GHSA-69j8-prx2-vx98
    • GO-2025-3959 CVE-2025-9078 GHSA-9p92-x77w-9fw2
    • GO-2025-3960 CVE-2025-9084 GHSA-hm95-jx66-g2gh
    • GO-2025-3961 CVE-2025-4953 GHSA-m68q-4hqr-mc6f

  • Update to version 0.0.20250908T141310 2025-09-08T14:13:10Z (jsc#PED-11136).

    Go CVE Numbering Authority IDs added or updated with aliases:

    • GO-2025-3916 CVE-2025-51667 GHSA-f2m2-4q6r-cwc4
    • GO-2025-3917 CVE-2025-53884 GHSA-8ff6-pc43-jwv3
    • GO-2025-3918 CVE-2025-8077 GHSA-8pxw-9c75-6w56
    • GO-2025-3919 CVE-2025-54467 GHSA-w54x-xfxg-4gxq
    • GO-2025-3920 GHSA-vxg3-w9rv-rhr2
    • GO-2025-3921 GHSA-3rw9-wmc8-8948
    • GO-2025-3923 CVE-2024-58259 GHSA-4h45-jpvh-6p5j
    • GO-2025-3924 CVE-2025-6203 GHSA-8f82-53h8-2p34
    • GO-2025-3925 GHSA-v2ch-c8v8-fgr7
    • GO-2025-3927 CVE-2024-52284 GHSA-6h9x-9j5v-7w9h
    • GO-2025-3930 CVE-2025-58355 GHSA-33pr-m977-5w97
    • GO-2025-3934 CVE-2025-55190 GHSA-786q-9hcg-v9ff
    • GO-2025-3935 CVE-2025-9566 GHSA-wp3j-xq48-xpjw
    • GO-2025-3936 CVE-2025-56760 GHSA-78j5-8vq7-jxv5
    • GO-2025-3937 CVE-2025-56761 GHSA-cgrg-86m5-xm4w
Record
SUSE-SU-2025:03289-1
Updated
2026-11-02
OSVSUSE-SU-2025:03534-1 No score

Security update for podman

This update for podman fixes the following issues:

  • CVE-2025-9566: fixed an issue where kube play command could cause host files to get overwritten (bsc#1249154)
Record
SUSE-SU-2025:03534-1
Updated
2026-11-02
OSVSUSE-SU-2025:03584-1 No score

Security update for podman

This update for podman fixes the following issues:

  • CVE-2025-9566: fixed an issue in kube play command that could cause overwriting host files (bsc#1249154)
Record
SUSE-SU-2025:03584-1
Updated
2026-11-02
OSVSUSE-SU-2025:20869-1 No score

Security update for podman

This update for podman fixes the following issues:

  • CVE-2025-9566: Fixed kube play command overwriting host files (bsc#1249154)
Record
SUSE-SU-2025:20869-1
Updated
2026-11-02
OSVSUSE-SU-2025:20899-1 No score

Security update for podman

This update for podman fixes the following issues:

  • CVE-2025-9566: Fixed kube play command overwriting host files (bsc#1249154)
Record
SUSE-SU-2025:20899-1
Updated
2026-11-02

Affected products

Show 10 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
github.com/containers/podman/v5
Go
 through 5.6.0
5.6.1
github.com/containers/podman/v4
Go
 through 4.9.5 None known
podman
Alpine:v3.22
 before 5.6.1-r0
5.6.1-r0
podman
Alpine:v3.23
 before 5.6.1-r0
5.6.1-r0
podman
Alpine:v3.24
 before 5.6.1-r0
5.6.1-r0
podman
AlmaLinux:9
 before 5:5.4.0-13.el9_6
5:5.4.0-13.el9_6
podman-docker
AlmaLinux:9
 before 5:5.4.0-13.el9_6
5:5.4.0-13.el9_6
podman-plugins
AlmaLinux:9
 before 5:5.4.0-13.el9_6
5:5.4.0-13.el9_6
podman-remote
AlmaLinux:9
 before 5:5.4.0-13.el9_6
5:5.4.0-13.el9_6
podman-tests
AlmaLinux:9
 before 5:5.4.0-13.el9_6
5:5.4.0-13.el9_6
Show 290 moreShow less
Affected packages
PackageAffectedFixed
podman-docker
AlmaLinux:10
 before 6:5.4.0-13.el10_0
6:5.4.0-13.el10_0
aardvark-dns
AlmaLinux:8
 before 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7
2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7
aardvark-dns
AlmaLinux:8
 before 2:1.10.1-2.module_el8.10.0+4023+db236c53
2:1.10.1-2.module_el8.10.0+4023+db236c53
aardvark-dns
AlmaLinux:8
 before 2:1.10.1-2.module_el8.10.0+4047+545787c4
2:1.10.1-2.module_el8.10.0+4047+545787c4
buildah
AlmaLinux:8
 before 2:1.33.12-2.module_el8.10.0+4023+db236c53
2:1.33.12-2.module_el8.10.0+4023+db236c53
buildah
AlmaLinux:8
 before 2:1.33.12-2.module_el8.10.0+4047+545787c4
2:1.33.12-2.module_el8.10.0+4047+545787c4
buildah
AlmaLinux:8
 before 2:1.33.12-2.module_el8.10.0+4016+efd18bf8
2:1.33.12-2.module_el8.10.0+4016+efd18bf8
buildah-tests
AlmaLinux:8
 before 2:1.33.12-2.module_el8.10.0+4047+545787c4
2:1.33.12-2.module_el8.10.0+4047+545787c4
cockpit-podman
AlmaLinux:8
 before 84.1-1.module_el8.10.0+4016+efd18bf8
84.1-1.module_el8.10.0+4016+efd18bf8
conmon
AlmaLinux:8
 before 3:2.1.10-1.module_el8.10.0+3970+8445edf6
3:2.1.10-1.module_el8.10.0+3970+8445edf6
container-selinux
AlmaLinux:8
 before 2:2.229.0-2.module_el8.10.0+3909+6e1c1eb7
2:2.229.0-2.module_el8.10.0+3909+6e1c1eb7
containernetworking-plugins
AlmaLinux:8
 before 1:1.4.0-6.module_el8.10.0+4016+efd18bf8
1:1.4.0-6.module_el8.10.0+4016+efd18bf8
containernetworking-plugins
AlmaLinux:8
 before 1:1.4.0-6.module_el8.10.0+4047+545787c4
1:1.4.0-6.module_el8.10.0+4047+545787c4
containernetworking-plugins
AlmaLinux:8
 before 1:1.4.0-6.module_el8.10.0+4023+db236c53
1:1.4.0-6.module_el8.10.0+4023+db236c53
containers-common
AlmaLinux:8
 before 2:1-82.module_el8.10.0+3876+e55593a8
2:1-82.module_el8.10.0+3876+e55593a8
containers-common
AlmaLinux:8
 before 2:1-82.module_el8.10.0+4047+545787c4
2:1-82.module_el8.10.0+4047+545787c4
containers-common
AlmaLinux:8
 before 2:1-82.module_el8.10.0+3901+4b80ecd7
2:1-82.module_el8.10.0+3901+4b80ecd7
containers-common
AlmaLinux:8
 before 2:1-82.module_el8.10.0+3970+8445edf6
2:1-82.module_el8.10.0+3970+8445edf6
crit
AlmaLinux:8
 before 3.18-5.module_el8.10.0+4047+545787c4
3.18-5.module_el8.10.0+4047+545787c4
crit
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3901+4b80ecd7
3.18-5.module_el8.10.0+3901+4b80ecd7
crit
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3845+87b84552
3.18-5.module_el8.10.0+3845+87b84552
crit
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3858+6ad51f9f
3.18-5.module_el8.10.0+3858+6ad51f9f
criu
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3926+f12484f5
3.18-5.module_el8.10.0+3926+f12484f5
criu
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3876+e55593a8
3.18-5.module_el8.10.0+3876+e55593a8
criu
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3970+8445edf6
3.18-5.module_el8.10.0+3970+8445edf6
criu
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3909+6e1c1eb7
3.18-5.module_el8.10.0+3909+6e1c1eb7
criu-devel
AlmaLinux:8
 before 3.18-5.module_el8.10.0+4016+efd18bf8
3.18-5.module_el8.10.0+4016+efd18bf8
criu-devel
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3876+e55593a8
3.18-5.module_el8.10.0+3876+e55593a8
criu-devel
AlmaLinux:8
 before 3.18-5.module_el8.10.0+4023+db236c53
3.18-5.module_el8.10.0+4023+db236c53
criu-devel
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3858+6ad51f9f
3.18-5.module_el8.10.0+3858+6ad51f9f
criu-libs
AlmaLinux:8
 before 3.18-5.module_el8.10.0+4016+efd18bf8
3.18-5.module_el8.10.0+4016+efd18bf8
criu-libs
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3970+8445edf6
3.18-5.module_el8.10.0+3970+8445edf6
criu-libs
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3926+f12484f5
3.18-5.module_el8.10.0+3926+f12484f5
criu-libs
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3909+6e1c1eb7
3.18-5.module_el8.10.0+3909+6e1c1eb7
crun
AlmaLinux:8
 before 1.14.3-2.module_el8.10.0+3845+87b84552
1.14.3-2.module_el8.10.0+3845+87b84552
crun
AlmaLinux:8
 before 1.14.3-2.module_el8.10.0+3909+6e1c1eb7
1.14.3-2.module_el8.10.0+3909+6e1c1eb7
crun
AlmaLinux:8
 before 1.14.3-2.module_el8.10.0+3926+f12484f5
1.14.3-2.module_el8.10.0+3926+f12484f5
fuse-overlayfs
AlmaLinux:8
 before 1.13-1.module_el8.10.0+4047+545787c4
1.13-1.module_el8.10.0+4047+545787c4
fuse-overlayfs
AlmaLinux:8
 before 1.13-1.module_el8.10.0+3909+6e1c1eb7
1.13-1.module_el8.10.0+3909+6e1c1eb7
fuse-overlayfs
AlmaLinux:8
 before 1.13-1.module_el8.10.0+3792+03eaed9c
1.13-1.module_el8.10.0+3792+03eaed9c
libslirp
AlmaLinux:8
 before 4.4.0-2.module_el8.10.0+3876+e55593a8
4.4.0-2.module_el8.10.0+3876+e55593a8
libslirp
AlmaLinux:8
 before 4.4.0-2.module_el8.10.0+4023+db236c53
4.4.0-2.module_el8.10.0+4023+db236c53
libslirp
AlmaLinux:8
 before 4.4.0-2.module_el8.10.0+3845+87b84552
4.4.0-2.module_el8.10.0+3845+87b84552
libslirp
AlmaLinux:8
 before 4.4.0-2.module_el8.10.0+3858+6ad51f9f
4.4.0-2.module_el8.10.0+3858+6ad51f9f
libslirp-devel
AlmaLinux:8
 before 4.4.0-2.module_el8.10.0+3909+6e1c1eb7
4.4.0-2.module_el8.10.0+3909+6e1c1eb7
libslirp-devel
AlmaLinux:8
 before 4.4.0-2.module_el8.10.0+3970+8445edf6
4.4.0-2.module_el8.10.0+3970+8445edf6
libslirp-devel
AlmaLinux:8
 before 4.4.0-2.module_el8.10.0+3901+4b80ecd7
4.4.0-2.module_el8.10.0+3901+4b80ecd7
netavark
AlmaLinux:8
 before 2:1.10.3-1.module_el8.10.0+4023+db236c53
2:1.10.3-1.module_el8.10.0+4023+db236c53
netavark
AlmaLinux:8
 before 2:1.10.3-1.module_el8.10.0+3926+f12484f5
2:1.10.3-1.module_el8.10.0+3926+f12484f5
netavark
AlmaLinux:8
 before 2:1.10.3-1.module_el8.10.0+3970+8445edf6
2:1.10.3-1.module_el8.10.0+3970+8445edf6
netavark
AlmaLinux:8
 before 2:1.10.3-1.module_el8.10.0+4016+efd18bf8
2:1.10.3-1.module_el8.10.0+4016+efd18bf8
oci-seccomp-bpf-hook
AlmaLinux:8
 before 1.2.10-1.module_el8.10.0+3909+6e1c1eb7
1.2.10-1.module_el8.10.0+3909+6e1c1eb7
oci-seccomp-bpf-hook
AlmaLinux:8
 before 1.2.10-1.module_el8.10.0+4047+545787c4
1.2.10-1.module_el8.10.0+4047+545787c4
oci-seccomp-bpf-hook
AlmaLinux:8
 before 1.2.10-1.module_el8.10.0+3876+e55593a8
1.2.10-1.module_el8.10.0+3876+e55593a8
podman
AlmaLinux:8
 before 4:4.9.4-23.module_el8.10.0+4047+545787c4
4:4.9.4-23.module_el8.10.0+4047+545787c4
podman-catatonit
AlmaLinux:8
 before 4:4.9.4-23.module_el8.10.0+4047+545787c4
4:4.9.4-23.module_el8.10.0+4047+545787c4
podman-docker
AlmaLinux:8
 before 4:4.9.4-23.module_el8.10.0+4047+545787c4
4:4.9.4-23.module_el8.10.0+4047+545787c4
podman-gvproxy
AlmaLinux:8
 before 4:4.9.4-23.module_el8.10.0+4047+545787c4
4:4.9.4-23.module_el8.10.0+4047+545787c4
podman-plugins
AlmaLinux:8
 before 4:4.9.4-23.module_el8.10.0+4047+545787c4
4:4.9.4-23.module_el8.10.0+4047+545787c4
podman-remote
AlmaLinux:8
 before 4:4.9.4-23.module_el8.10.0+4047+545787c4
4:4.9.4-23.module_el8.10.0+4047+545787c4
podman-tests
AlmaLinux:8
 before 4:4.9.4-23.module_el8.10.0+4047+545787c4
4:4.9.4-23.module_el8.10.0+4047+545787c4
python3-criu
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3970+8445edf6
3.18-5.module_el8.10.0+3970+8445edf6
python3-criu
AlmaLinux:8
 before 3.18-5.module_el8.10.0+4023+db236c53
3.18-5.module_el8.10.0+4023+db236c53
python3-criu
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3926+f12484f5
3.18-5.module_el8.10.0+3926+f12484f5
python3-criu
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3876+e55593a8
3.18-5.module_el8.10.0+3876+e55593a8
python3-podman
AlmaLinux:8
 before 4.9.0-3.module_el8.10.0+4016+efd18bf8
4.9.0-3.module_el8.10.0+4016+efd18bf8
runc
AlmaLinux:8
 before 1:1.1.12-6.module_el8.10.0+3959+b8dc5e6a
1:1.1.12-6.module_el8.10.0+3959+b8dc5e6a
runc
AlmaLinux:8
 before 1:1.1.12-6.module_el8.10.0+3970+8445edf6
1:1.1.12-6.module_el8.10.0+3970+8445edf6
runc
AlmaLinux:8
 before 1:1.1.12-6.module_el8.10.0+4023+db236c53
1:1.1.12-6.module_el8.10.0+4023+db236c53
skopeo
AlmaLinux:8
 before 2:1.14.5-4.module_el8.10.0+4047+545787c4
2:1.14.5-4.module_el8.10.0+4047+545787c4
skopeo
AlmaLinux:8
 before 2:1.14.5-4.module_el8.10.0+4016+efd18bf8
2:1.14.5-4.module_el8.10.0+4016+efd18bf8
skopeo-tests
AlmaLinux:8
 before 2:1.14.5-4.module_el8.10.0+4047+545787c4
2:1.14.5-4.module_el8.10.0+4047+545787c4
skopeo-tests
AlmaLinux:8
 before 2:1.14.5-4.module_el8.10.0+4016+efd18bf8
2:1.14.5-4.module_el8.10.0+4016+efd18bf8
podman
Azure Linux:2
 through 4.1.1-26 None known
podman
Azure Linux:3
 through 5.6.1-10 None known
podman
Alpaquita:23
 4.3.1-r0 and later None known
podman
Alpaquita:25
 5.5.0-r0 up to 5.6.1-r1
5.6.1-r1
podman
Alpaquita:stream
 4.5.1-r1 up to 5.6.1-r0
5.6.1-r0
podman
TuxCare:AlmaLinux:9.2
 before 2:4.4.1-13.el9_2.tuxcare.els4
2:4.4.1-13.el9_2.tuxcare.els4
podman-docker
TuxCare:AlmaLinux:9.2
 before 2:4.4.1-13.el9_2.tuxcare.els4
2:4.4.1-13.el9_2.tuxcare.els4
podman-gvproxy
TuxCare:AlmaLinux:9.2
 before 2:4.4.1-13.el9_2.tuxcare.els4
2:4.4.1-13.el9_2.tuxcare.els4
podman-plugins
TuxCare:AlmaLinux:9.2
 before 2:4.4.1-13.el9_2.tuxcare.els4
2:4.4.1-13.el9_2.tuxcare.els4
podman-remote
TuxCare:AlmaLinux:9.2
 before 2:4.4.1-13.el9_2.tuxcare.els4
2:4.4.1-13.el9_2.tuxcare.els4
podman-tests
TuxCare:AlmaLinux:9.2
 before 2:4.4.1-13.el9_2.tuxcare.els4
2:4.4.1-13.el9_2.tuxcare.els4
libpod
Debian:12
 All versions, plus listed versions
4.3.1+ds1-84.3.1+ds1-8+deb12u14.4.0+ds1-14.5.0+ds2-14.5.1+ds1-1
Show 41 moreShow less
4.5.1+ds1-24.6.2+ds1-14.6.2+ds1-24.6.2+ds1-34.6.2+ds1-44.7.1+ds4-14.7.1+ds4-24.7.1+ds4-34.7.1+ds4-44.7.1+ds4-54.7.2+ds1-14.7.2+ds1-24.8.3+ds1-14.8.3+ds1-24.9.0+ds1-14.9.0+ds1-24.9.2+ds1-14.9.2+ds1-24.9.3+ds1-14.9.4+ds1-14.9.5+ds1-15.0.0+ds1-15.0.2+ds1-15.0.2+ds1-25.0.2+ds1-35.0.3+ds1-15.0.3+ds1-25.0.3+ds1-35.0.3+ds1-45.0.3+ds1-55.2.0+ds1-15.2.0+ds1-25.2.0+ds1-35.2.0+ds1-45.2.0+ds1-55.2.1+ds1-15.2.1+ds1-25.2.1+ds1-35.2.1+ds1-45.2.2+ds1-15.2.2+ds1-2
 None known
podman
Debian:13
 All versions, plus listed versions
5.4.2+ds1-25.6.1+ds1-15.6.1+ds1-25.6.1+ds2-25.6.1+ds2-3
Show 22 moreShow less
5.6.2+ds1-15.6.2+ds1-25.6.2+ds1-35.6.2+ds1-3+exp15.6.2+ds1-45.7.0+ds2-15.7.0+ds2-25.7.0+ds2-35.8.0+ds1-15.8.1+ds1-15.8.1+ds1-25.8.1+ds1-35.8.2+ds1-15.8.2+ds1-25.8.2+ds1-35.8.3+ds1-15.8.4+ds1-15.8.4+ds1-25.8.6+ds1-15.8.6+ds1-25.8.6+ds1-36.1.1+ds1-1
 None known
podman
Debian:14
 before 5.6.1+ds1-2, plus listed versions
5.4.2+ds1-25.6.1+ds1-1
5.6.1+ds1-2
github.com/containers/podman/v5
Go
 before 5.6.1
5.6.1
github.com/containers/podman
Go
 All versions None known
github.com/containers/podman/v2
Go
 All versions None known
github.com/containers/podman/v3
Go
 All versions None known
github.com/containers/podman/v4
Go
 All versions None known
container-selinux
Red Hat:openshift:4.19::el9
 before 4:2.237.0-1.rhaos4.19.el9
4:2.237.0-1.rhaos4.19.el9
cri-o
Red Hat:openshift:4.19::el9
 before 0:1.32.8-3.rhaos4.19.git60d4e21.el9
0:1.32.8-3.rhaos4.19.git60d4e21.el9
cri-o-debuginfo
Red Hat:openshift:4.19::el9
 before 0:1.32.8-3.rhaos4.19.git60d4e21.el9
0:1.32.8-3.rhaos4.19.git60d4e21.el9
cri-o-debugsource
Red Hat:openshift:4.19::el9
 before 0:1.32.8-3.rhaos4.19.git60d4e21.el9
0:1.32.8-3.rhaos4.19.git60d4e21.el9
openshift
Red Hat:openshift:4.19::el9
 before 0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9
0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9
openshift-hyperkube
Red Hat:openshift:4.19::el9
 before 0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9
0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9
openshift-kube-apiserver
Red Hat:openshift:4.19::el9
 before 0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9
0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9
openshift-kube-controller-manager
Red Hat:openshift:4.19::el9
 before 0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9
0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9
openshift-kube-scheduler
Red Hat:openshift:4.19::el9
 before 0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9
0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9
openshift-kubelet
Red Hat:openshift:4.19::el9
 before 0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9
0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9
podman
Red Hat:openshift:4.19::el9
 before 5:5.4.0-7.rhaos4.19.el9
5:5.4.0-7.rhaos4.19.el9
podman-debuginfo
Red Hat:openshift:4.19::el9
 before 5:5.4.0-7.rhaos4.19.el9
5:5.4.0-7.rhaos4.19.el9
podman-debugsource
Red Hat:openshift:4.19::el9
 before 5:5.4.0-7.rhaos4.19.el9
5:5.4.0-7.rhaos4.19.el9
podman-docker
Red Hat:openshift:4.19::el9
 before 5:5.4.0-7.rhaos4.19.el9
5:5.4.0-7.rhaos4.19.el9
podman-plugins
Red Hat:openshift:4.19::el9
 before 5:5.4.0-7.rhaos4.19.el9
5:5.4.0-7.rhaos4.19.el9
podman-plugins-debuginfo
Red Hat:openshift:4.19::el9
 before 5:5.4.0-7.rhaos4.19.el9
5:5.4.0-7.rhaos4.19.el9
podman-remote
Red Hat:openshift:4.19::el9
 before 5:5.4.0-7.rhaos4.19.el9
5:5.4.0-7.rhaos4.19.el9
podman-remote-debuginfo
Red Hat:openshift:4.19::el9
 before 5:5.4.0-7.rhaos4.19.el9
5:5.4.0-7.rhaos4.19.el9
podman-tests
Red Hat:openshift:4.19::el9
 before 5:5.4.0-7.rhaos4.19.el9
5:5.4.0-7.rhaos4.19.el9
podman-tests-debuginfo
Red Hat:openshift:4.19::el9
 before 5:5.4.0-7.rhaos4.19.el9
5:5.4.0-7.rhaos4.19.el9
cri-o
Red Hat:openshift:4.18::el8
 before 0:1.31.12-3.rhaos4.18.gitdc59c78.el8
0:1.31.12-3.rhaos4.18.gitdc59c78.el8
cri-o-debuginfo
Red Hat:openshift:4.18::el8
 before 0:1.31.12-3.rhaos4.18.gitdc59c78.el8
0:1.31.12-3.rhaos4.18.gitdc59c78.el8
cri-o-debugsource
Red Hat:openshift:4.18::el8
 before 0:1.31.12-3.rhaos4.18.gitdc59c78.el8
0:1.31.12-3.rhaos4.18.gitdc59c78.el8
openshift
Red Hat:openshift:4.18::el8
 before 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8
0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8
openshift-ansible
Red Hat:openshift:4.18::el8
 before 0:4.18.0-202509011551.p2.g018e43a.assembly.stream.el8
0:4.18.0-202509011551.p2.g018e43a.assembly.stream.el8
openshift-ansible-test
Red Hat:openshift:4.18::el8
 before 0:4.18.0-202509011551.p2.g018e43a.assembly.stream.el8
0:4.18.0-202509011551.p2.g018e43a.assembly.stream.el8
openshift-hyperkube
Red Hat:openshift:4.18::el8
 before 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8
0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8
openshift-kube-apiserver
Red Hat:openshift:4.18::el8
 before 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8
0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8
openshift-kube-controller-manager
Red Hat:openshift:4.18::el8
 before 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8
0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8
openshift-kube-scheduler
Red Hat:openshift:4.18::el8
 before 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8
0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8
openshift-kubelet
Red Hat:openshift:4.18::el8
 before 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8
0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8
bpftool
Red Hat:openshift:4.18::el9
 before 0:7.3.0-427.87.1.el9_4
0:7.3.0-427.87.1.el9_4
bpftool-debuginfo
Red Hat:openshift:4.18::el9
 before 0:7.3.0-427.87.1.el9_4
0:7.3.0-427.87.1.el9_4
container-selinux
Red Hat:openshift:4.18::el9
 before 4:2.237.0-1.rhaos4.18.el9
4:2.237.0-1.rhaos4.18.el9
cri-o
Red Hat:openshift:4.18::el9
 before 0:1.31.12-3.rhaos4.18.gitdc59c78.el9
0:1.31.12-3.rhaos4.18.gitdc59c78.el9
cri-o-debuginfo
Red Hat:openshift:4.18::el9
 before 0:1.31.12-3.rhaos4.18.gitdc59c78.el9
0:1.31.12-3.rhaos4.18.gitdc59c78.el9
cri-o-debugsource
Red Hat:openshift:4.18::el9
 before 0:1.31.12-3.rhaos4.18.gitdc59c78.el9
0:1.31.12-3.rhaos4.18.gitdc59c78.el9
kernel
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k-core
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k-debug
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k-debug-core
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k-debug-debuginfo
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k-debug-devel
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k-debug-devel-matched
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k-debug-modules
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k-debug-modules-core
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k-debug-modules-extra
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k-debug-modules-internal
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k-debug-modules-partner
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k-debuginfo
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k-devel
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k-devel-matched
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k-modules
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k-modules-core
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k-modules-extra
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k-modules-internal
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-64k-modules-partner
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-abi-stablelists
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-core
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-debug
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-debug-core
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-debug-debuginfo
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-debug-devel
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-debug-devel-matched
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-debug-modules
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-debug-modules-core
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-debug-modules-extra
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-debug-modules-internal
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-debug-modules-partner
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-debug-uki-virt
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-debuginfo
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-debuginfo-common-aarch64
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-debuginfo-common-ppc64le
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-debuginfo-common-s390x
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-debuginfo-common-x86_64
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-devel
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
kernel-devel-matched
Red Hat:openshift:4.18::el9
 before 0:5.14.0-427.87.1.el9_4
0:5.14.0-427.87.1.el9_4
podman
Rocky Linux:9
 before 5:5.4.0-13.el9_6
5:5.4.0-13.el9_6
podman
Rocky Linux:10
 before 6:5.4.0-13.el10_0
6:5.4.0-13.el10_0
aardvark-dns
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:1.10.1-2.module+el8.10.0+1874+ce489889
2:1.10.1-2.module+el8.10.0+1874+ce489889
aardvark-dns
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:1.10.1-2.module+el8.10.0+1896+b18fa106
2:1.10.1-2.module+el8.10.0+1896+b18fa106
aardvark-dns
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:1.10.1-2.module+el8.10.0+1880+8e896d1b
2:1.10.1-2.module+el8.10.0+1880+8e896d1b
aardvark-dns
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:1.10.1-2.module+el8.10.0+1948+4b5cd4a9
2:1.10.1-2.module+el8.10.0+1948+4b5cd4a9
aardvark-dns
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:1.10.1-2.module+el8.10.0+2001+6a33db9f
2:1.10.1-2.module+el8.10.0+2001+6a33db9f
buildah
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:1.33.12-2.module+el8.10.0+2001+6a33db9f
2:1.33.12-2.module+el8.10.0+2001+6a33db9f
cockpit-podman
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:84.1-1.module+el8.10.0+2001+6a33db9f
0:84.1-1.module+el8.10.0+2001+6a33db9f
cockpit-podman
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:84.1-1.module+el8.10.0+1896+b18fa106
0:84.1-1.module+el8.10.0+1896+b18fa106
cockpit-podman
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:84.1-1.module+el8.10.0+1815+5fe7415e
0:84.1-1.module+el8.10.0+1815+5fe7415e
cockpit-podman
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:84.1-1.module+el8.10.0+1948+4b5cd4a9
0:84.1-1.module+el8.10.0+1948+4b5cd4a9
cockpit-podman
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:84.1-1.module+el8.10.0+1872+2e18eb19
0:84.1-1.module+el8.10.0+1872+2e18eb19
cockpit-podman
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:84.1-1.module+el8.10.0+1874+ce489889
0:84.1-1.module+el8.10.0+1874+ce489889
cockpit-podman
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:84.1-1.module+el8.10.0+1825+623b0c20
0:84.1-1.module+el8.10.0+1825+623b0c20
cockpit-podman
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:84.1-1.module+el8.10.0+1880+8e896d1b
0:84.1-1.module+el8.10.0+1880+8e896d1b
cockpit-podman
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:84.1-1.module+el8.10.0+1843+6892ab28
0:84.1-1.module+el8.10.0+1843+6892ab28
conmon
Rocky Linux:8
From an advisory covering 2 CVEs
 before 3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9
3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9
conmon
Rocky Linux:8
From an advisory covering 2 CVEs
 before 3:2.1.10-1.module+el8.10.0+1872+2e18eb19
3:2.1.10-1.module+el8.10.0+1872+2e18eb19
conmon
Rocky Linux:8
From an advisory covering 2 CVEs
 before 3:2.1.10-1.module+el8.10.0+1874+ce489889
3:2.1.10-1.module+el8.10.0+1874+ce489889
conmon
Rocky Linux:8
From an advisory covering 2 CVEs
 before 3:2.1.10-1.module+el8.10.0+1815+5fe7415e
3:2.1.10-1.module+el8.10.0+1815+5fe7415e
conmon
Rocky Linux:8
From an advisory covering 2 CVEs
 before 3:2.1.10-1.module+el8.10.0+1843+6892ab28
3:2.1.10-1.module+el8.10.0+1843+6892ab28
conmon
Rocky Linux:8
From an advisory covering 2 CVEs
 before 3:2.1.10-1.module+el8.10.0+1880+8e896d1b
3:2.1.10-1.module+el8.10.0+1880+8e896d1b
conmon
Rocky Linux:8
From an advisory covering 2 CVEs
 before 3:2.1.10-1.module+el8.10.0+2001+6a33db9f
3:2.1.10-1.module+el8.10.0+2001+6a33db9f
conmon
Rocky Linux:8
From an advisory covering 2 CVEs
 before 3:2.1.10-1.module+el8.10.0+1896+b18fa106
3:2.1.10-1.module+el8.10.0+1896+b18fa106
containernetworking-plugins
Rocky Linux:8
From an advisory covering 2 CVEs
 before 1:1.4.0-6.module+el8.10.0+2001+6a33db9f
1:1.4.0-6.module+el8.10.0+2001+6a33db9f
container-selinux
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:2.229.0-2.module+el8.10.0+1896+b18fa106
2:2.229.0-2.module+el8.10.0+1896+b18fa106
container-selinux
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:2.229.0-2.module+el8.10.0+1948+4b5cd4a9
2:2.229.0-2.module+el8.10.0+1948+4b5cd4a9
container-selinux
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:2.229.0-2.module+el8.10.0+1815+5fe7415e
2:2.229.0-2.module+el8.10.0+1815+5fe7415e
container-selinux
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:2.229.0-2.module+el8.10.0+2001+6a33db9f
2:2.229.0-2.module+el8.10.0+2001+6a33db9f
container-selinux
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:2.229.0-2.module+el8.10.0+1825+623b0c20
2:2.229.0-2.module+el8.10.0+1825+623b0c20
container-selinux
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:2.229.0-2.module+el8.10.0+1843+6892ab28
2:2.229.0-2.module+el8.10.0+1843+6892ab28
container-selinux
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:2.229.0-2.module+el8.10.0+1880+8e896d1b
2:2.229.0-2.module+el8.10.0+1880+8e896d1b
container-selinux
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:2.229.0-2.module+el8.10.0+1872+2e18eb19
2:2.229.0-2.module+el8.10.0+1872+2e18eb19
container-selinux
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:2.229.0-2.module+el8.10.0+1874+ce489889
2:2.229.0-2.module+el8.10.0+1874+ce489889
containers-common
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:1-82.module+el8.10.0+1948+4b5cd4a9
2:1-82.module+el8.10.0+1948+4b5cd4a9
containers-common
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:1-82.module+el8.10.0+2001+6a33db9f
2:1-82.module+el8.10.0+2001+6a33db9f
containers-common
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:1-82.module+el8.10.0+1843+6892ab28
2:1-82.module+el8.10.0+1843+6892ab28
containers-common
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:1-82.module+el8.10.0+1880+8e896d1b
2:1-82.module+el8.10.0+1880+8e896d1b
containers-common
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:1-82.module+el8.10.0+1872+2e18eb19
2:1-82.module+el8.10.0+1872+2e18eb19
containers-common
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:1-82.module+el8.10.0+1896+b18fa106
2:1-82.module+el8.10.0+1896+b18fa106
containers-common
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:1-82.module+el8.10.0+1874+ce489889
2:1-82.module+el8.10.0+1874+ce489889
criu
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.18-5.module+el8.10.0+1872+2e18eb19
0:3.18-5.module+el8.10.0+1872+2e18eb19
criu
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.18-5.module+el8.10.0+1815+5fe7415e
0:3.18-5.module+el8.10.0+1815+5fe7415e
criu
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.18-5.module+el8.10.0+1896+b18fa106
0:3.18-5.module+el8.10.0+1896+b18fa106
criu
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.18-5.module+el8.10.0+1880+8e896d1b
0:3.18-5.module+el8.10.0+1880+8e896d1b
criu
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.18-5.module+el8.10.0+1825+623b0c20
0:3.18-5.module+el8.10.0+1825+623b0c20
criu
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.18-5.module+el8.10.0+2001+6a33db9f
0:3.18-5.module+el8.10.0+2001+6a33db9f
criu
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.18-5.module+el8.10.0+1874+ce489889
0:3.18-5.module+el8.10.0+1874+ce489889
criu
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.18-5.module+el8.10.0+1843+6892ab28
0:3.18-5.module+el8.10.0+1843+6892ab28
criu
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.18-5.module+el8.10.0+1948+4b5cd4a9
0:3.18-5.module+el8.10.0+1948+4b5cd4a9
crun
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.14.3-2.module+el8.10.0+1825+623b0c20
0:1.14.3-2.module+el8.10.0+1825+623b0c20
crun
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.14.3-2.module+el8.10.0+1948+4b5cd4a9
0:1.14.3-2.module+el8.10.0+1948+4b5cd4a9
crun
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.14.3-2.module+el8.10.0+1843+6892ab28
0:1.14.3-2.module+el8.10.0+1843+6892ab28
crun
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.14.3-2.module+el8.10.0+1896+b18fa106
0:1.14.3-2.module+el8.10.0+1896+b18fa106
crun
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.14.3-2.module+el8.10.0+1874+ce489889
0:1.14.3-2.module+el8.10.0+1874+ce489889
crun
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.14.3-2.module+el8.10.0+1880+8e896d1b
0:1.14.3-2.module+el8.10.0+1880+8e896d1b
crun
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.14.3-2.module+el8.10.0+2001+6a33db9f
0:1.14.3-2.module+el8.10.0+2001+6a33db9f
crun
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.14.3-2.module+el8.10.0+1872+2e18eb19
0:1.14.3-2.module+el8.10.0+1872+2e18eb19
crun
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.14.3-2.module+el8.10.0+1815+5fe7415e
0:1.14.3-2.module+el8.10.0+1815+5fe7415e
fuse-overlayfs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.13-1.module+el8.10.0+1880+8e896d1b
0:1.13-1.module+el8.10.0+1880+8e896d1b
fuse-overlayfs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.13-1.module+el8.10.0+1896+b18fa106
0:1.13-1.module+el8.10.0+1896+b18fa106
fuse-overlayfs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.13-1.module+el8.10.0+1948+4b5cd4a9
0:1.13-1.module+el8.10.0+1948+4b5cd4a9
fuse-overlayfs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.13-1.module+el8.10.0+1872+2e18eb19
0:1.13-1.module+el8.10.0+1872+2e18eb19
fuse-overlayfs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.13-1.module+el8.10.0+1815+5fe7415e
0:1.13-1.module+el8.10.0+1815+5fe7415e
fuse-overlayfs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.13-1.module+el8.10.0+1874+ce489889
0:1.13-1.module+el8.10.0+1874+ce489889
fuse-overlayfs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.13-1.module+el8.10.0+2001+6a33db9f
0:1.13-1.module+el8.10.0+2001+6a33db9f
fuse-overlayfs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.13-1.module+el8.10.0+1825+623b0c20
0:1.13-1.module+el8.10.0+1825+623b0c20
fuse-overlayfs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.13-1.module+el8.10.0+1843+6892ab28
0:1.13-1.module+el8.10.0+1843+6892ab28
libslirp
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:4.4.0-2.module+el8.10.0+1843+6892ab28
0:4.4.0-2.module+el8.10.0+1843+6892ab28
libslirp
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:4.4.0-2.module+el8.10.0+1896+b18fa106
0:4.4.0-2.module+el8.10.0+1896+b18fa106
libslirp
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:4.4.0-2.module+el8.10.0+1872+2e18eb19
0:4.4.0-2.module+el8.10.0+1872+2e18eb19
libslirp
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:4.4.0-2.module+el8.10.0+1948+4b5cd4a9
0:4.4.0-2.module+el8.10.0+1948+4b5cd4a9
libslirp
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:4.4.0-2.module+el8.10.0+1874+ce489889
0:4.4.0-2.module+el8.10.0+1874+ce489889
libslirp
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:4.4.0-2.module+el8.10.0+1880+8e896d1b
0:4.4.0-2.module+el8.10.0+1880+8e896d1b
libslirp
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:4.4.0-2.module+el8.10.0+1815+5fe7415e
0:4.4.0-2.module+el8.10.0+1815+5fe7415e
libslirp
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:4.4.0-2.module+el8.10.0+2001+6a33db9f
0:4.4.0-2.module+el8.10.0+2001+6a33db9f
govulncheck-vulndb
SUSE:Linux Enterprise Module for Package Hub 15 SP6
From an advisory covering 35 CVEs
 before 0.0.20250918T182144-150000.1.107.1
0.0.20250918T182144-150000.1.107.1
govulncheck-vulndb
openSUSE:Leap 15.6
From an advisory covering 35 CVEs
 before 0.0.20250918T182144-150000.1.107.1
0.0.20250918T182144-150000.1.107.1
podman
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 4.9.5-150300.9.55.1
4.9.5-150300.9.55.1
podman
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 4.9.5-150300.9.55.1
4.9.5-150300.9.55.1
podman
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 4.9.5-150300.9.55.1
4.9.5-150300.9.55.1
podman
SUSE:Linux Enterprise Micro 5.1
 before 4.9.5-150300.9.55.1
4.9.5-150300.9.55.1
podman
SUSE:Linux Enterprise Micro 5.2
 before 4.9.5-150300.9.55.1
4.9.5-150300.9.55.1
podman
SUSE:Enterprise Storage 7.1
 before 4.9.5-150300.9.55.1
4.9.5-150300.9.55.1
podman
SUSE:Linux Enterprise Micro 5.3
 before 4.9.5-150400.4.53.1
4.9.5-150400.4.53.1
podman
SUSE:Linux Enterprise Micro 5.4
 before 4.9.5-150400.4.53.1
4.9.5-150400.4.53.1
podman
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 4.9.5-150400.4.53.1
4.9.5-150400.4.53.1
podman
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 4.9.5-150400.4.53.1
4.9.5-150400.4.53.1
podman
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 4.9.5-150400.4.53.1
4.9.5-150400.4.53.1
podman
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 4.9.5-150400.4.53.1
4.9.5-150400.4.53.1
podman
SUSE:Linux Micro 6.0
From an advisory covering 5 CVEs
 before 4.9.5-8.1
4.9.5-8.1
podman
SUSE:Linux Micro 6.1
 before 5.4.2-slfo.1.1_2.1
5.4.2-slfo.1.1_2.1
podman
SUSE:Multi-Linux Manager Proxy Extension for SLE 5.1
 before 4.9.5-150500.3.49.1
4.9.5-150500.3.49.1
podman
SUSE:Multi-Linux Manager Server Extension for SLE 5.1
 before 4.9.5-150500.3.49.1
4.9.5-150500.3.49.1
podman
SUSE:Linux Enterprise Micro 5.5
 before 4.9.5-150500.3.49.1
4.9.5-150500.3.49.1
podman
SUSE:Linux Enterprise Module for Containers 15 SP6
 before 4.9.5-150500.3.49.1
4.9.5-150500.3.49.1
podman
SUSE:Linux Enterprise Module for Containers 15 SP7
 before 4.9.5-150500.3.49.1
4.9.5-150500.3.49.1
podman
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 4.9.5-150500.3.49.1
4.9.5-150500.3.49.1
podman
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 4.9.5-150500.3.49.1
4.9.5-150500.3.49.1
podman
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 4.9.5-150500.3.49.1
4.9.5-150500.3.49.1
podman
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 4.9.5-150500.3.49.1
4.9.5-150500.3.49.1
podman
openSUSE:Leap 15.6
 before 4.9.5-150500.3.49.1
4.9.5-150500.3.49.1
podman
SUSE:Linux Enterprise Server 16.0
From an advisory covering 4 CVEs
 before 5.4.2-160000.3.1
5.4.2-160000.3.1
podman
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 4 CVEs
 before 5.4.2-160000.3.1
5.4.2-160000.3.1
podman
SUSE:Linux Micro 6.2
From an advisory covering 4 CVEs
 before 5.4.2-160000.3.1
5.4.2-160000.3.1
podman
SUSE:Linux Enterprise Server 16.0
From an advisory covering 8 CVEs
 before 5.4.2-160000.4.1
5.4.2-160000.4.1
podman
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 8 CVEs
 before 5.4.2-160000.4.1
5.4.2-160000.4.1
podman
SUSE:Linux Micro 6.2
From an advisory covering 8 CVEs
 before 5.4.2-160000.4.1
5.4.2-160000.4.1
podman
SUSE:Linux Micro 6.1
From an advisory covering 20 CVEs
 before 5.4.2-slfo.1.1_5.1
5.4.2-slfo.1.1_5.1
podman
SUSE:Linux Micro 6.0
From an advisory covering 22 CVEs
 before 4.9.5-12.1
4.9.5-12.1
podman
SUSE:Linux Micro 6.1
From an advisory covering 12 CVEs
 before 5.4.2-slfo.1.1_6.1
5.4.2-slfo.1.1_6.1
libpod
Ubuntu:Pro:24.04:LTS
 All versions, plus listed versions
4.3.1+ds1-84.7.2+ds1-24.7.2+ds1-2build14.8.3+ds1-24.9.0+ds1-2
Show 8 moreShow less
4.9.3+ds1-14.9.3+ds1-1build14.9.3+ds1-1build24.9.3+ds1-1ubuntu0.14.9.3+ds1-1ubuntu0.24.9.3+ds1-1ubuntu0.2+esm14.9.3+ds1-1ubuntu0.2+esm24.9.3+ds1-1ubuntu0.2+esm3
 None known
podman
Ubuntu:25.10
 All versions, plus listed versions
5.4.1+ds1-15.4.2+ds1-15.4.2+ds1-2
 None known
govulncheck-vulndb
openSUSE:Tumbleweed
From an advisory covering 12 CVEs
 before 0.0.20250908T141310-1.1
0.0.20250908T141310-1.1
podman
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 5.7.1-1.1
5.7.1-1.1
podman
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 5.4.2-160000.3.1
5.4.2-160000.3.1
podman
openSUSE:Leap 16.0
From an advisory covering 8 CVEs
 before 5.4.2-160000.4.1
5.4.2-160000.4.1
podman
openSUSE:Leap 16.0
From an advisory covering 20 CVEs
 before 5.4.2-160000.5.1
5.4.2-160000.5.1
govulncheck-vulndb
openSUSE:Leap 16.0
From an advisory covering 1734 CVEs
 before 0.0.20260723T184607-160000.1.1
0.0.20260723T184607-160000.1.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
referencesOSV
factsGitHub Advisories
affectedOSV
affected, aliases, referencesOSV
referencesCVE List, EUVD, GitHub Advisories, NVD
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-9566 is a high vulnerability (CVSS 8.1) in Red Hat Enterprise Linux 10, published September 4, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.21%, the 68th percentile. Fixed in github.com/containers/podman/v5 5.6.1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 998 package rows, 1,675 references and the rest of 1 source description. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 8 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open