Security update for podman
This update for podman rebuilds it against the current go 1.25 security release.
- Mettez à jour vers 4.9.5-150300.9.71.1
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de podman
Vulnérabilité publiée pour podman au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 17
Security update for podman
This update for podman fixes the following issues: - CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed SSH Agent that could cause a panic due to an out-of-bounds read with non-validated message sizes (bsc#1253993)
- Mettez à jour vers 4.9.5-150300.9.69.1
Publication Mise à jourSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253542)
- Mettez à jour vers 4.9.5-150300.9.66.1
Publication Mise à jourSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-31133: Fixed container escape via 'masked path' abuse due to mount race conditions (bsc#1252376) - CVE-2025-52565: Fixed container escape with malicious config due to /dev/console mount and related races (bsc#1252376) - CVE-2025-52881: Fixed container escape and denial of service due to arbitrary write gadgets and procfs write redirects (bsc#1252376) Other fixes: - Fix: podman and buildah with runc 1.3.2 fail with lots of warnings as rootless (bsc#1252543) - Add symlink to catatonit in /usr/libexec/podman (bsc#1248988)
- Mettez à jour vers 4.9.5-150300.9.63.2
Publication Mise à jourSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-9566: fixed an issue where kube play command could cause host files to get overwritten (bsc#1249154)
- Mettez à jour vers 4.9.5-150300.9.55.1
Publication Mise à jourSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-6032: Fixed machine init command failing to verify TLS certificate (bsc#1245320)
- Mettez à jour vers 4.9.5-150300.9.52.1
Publication Mise à jourRecommended update for podman
This update for podman fixes the following issues: - Added patch to remove using rw as a default mount option (bsc#1239776)
- Mettez à jour vers 4.9.5-150300.9.49.2
Publication Mise à jourSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239330).
- Mettez à jour vers 4.9.5-150300.9.46.1
Publication Mise à jourSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE (bsc#1237641) - CVE-2024-9676: github.com/containers/storage: Fixed symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (bsc#1231698) - CVE-2024-9675: Fixed cache arbitrary directory mount in buildah (bsc#1231499) - CVE-2024-9407: Fixed Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction in buildah (bsc#1231208) - CVE-2024-9341: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (bsc#
- Mettez à jour vers 4.9.5-150300.9.43.1
Publication Mise à jourSecurity update for podman
This update for podman fixes the following issues: - CVE-2024-6104: Fixed sensitive information disclosure in log files in go-retryablehttp (bsc#1227052)
- Mettez à jour vers 4.9.5-150300.9.34.1
Publication Mise à jourSecurity update for podman
This update for podman fixes the following issues: - Update to version 4.9.5 - CVE-2024-3727: Fixed a flaw that allowed attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks. (bsc#1224122) - CVE-2024-24786: Fixed an infinite loop in protojson. (bsc#1226136)
- Mettez à jour vers 4.9.5-150300.9.31.1
Publication Mise à jourSecurity update for podman
This update for podman fixes the following issues: - Update to version 4.9.5 - CVE-2024-3727: Fixed a flaw that allowed attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks. (bsc#1224122) - CVE-2024-24786: Fixed an infinite loop in protojson. (bsc#1226136)
- Mettez à jour vers 4.9.5-150300.9.31.1
Publication Mise à jourSecurity update for podman
This update for podman fixes the following issues: - CVE-2024-1753: Fixed full container escape at build time in buildah (bsc#1221677).
- Mettez à jour vers 4.4.4-150300.9.26.2
Publication Mise à jourSecurity update for podman
This update for podman fixes the following issues: Update to version 4.4.4: * libpod: always use direct mapping * macos pkginstaller: do not fail when podman-mac-helper fails * podman-mac-helper: install: do not error if already installed - podman.spec: Bump required version for libcontainers-common (bsc#1209495) Update to version 4.4.3: * compat: /auth: parse server address correctly * vendor github.com/containers/[email protected] * pkginstaller: bump Qemu to version 7.2.0 * podman machine: Adjust Chrony makestep config * [v4.4] fix --health-on-failure=restart in transient unit * podman logs passthrough driver support --
- Mettez à jour vers 4.4.4-150300.9.20.1
Publication Mise à jourSecurity update for podman
This update for podman fixes the following issues: podman was updated to version 4.3.1: 4.3.1: * Bugfixes - Fixed a deadlock between the `podman ps` and `podman container inspect` commands * Misc - Updated the containers/image library to v5.23.1 4.3.0: * Features - A new command, `podman generate spec`, has been added, which creates a JSON struct based on a given container that can be used with the Podman REST API to create containers. - A new command, `podman update`, has been added,which makes changes to the resource limits of existing containers. Please note that these changes do not persist if the container is restarted - A new
- Mettez à jour vers 4.3.1-150300.9.15.1
Publication Mise à jourSecurity update for podman
This update for podman fixes the following issues: - CVE-2022-2989: Fixed possible information disclosure and modification (bsc#1202809).
- Mettez à jour vers 3.4.7-150300.9.12.1
Publication Mise à jourSecurity update for podman
This update for podman fixes the following issues: Updated to version 3.4.7: - CVE-2022-1227: Fixed an issue that could allow an attacker to publish a malicious image to a public registry and run arbitrary code in the victim's context via the 'podman top' command (bsc#1182428). - CVE-2022-27191: Fixed a potential crash via SSH under specific configurations (bsc#1197284). - CVE-2022-21698: Fixed a potential denial of service that affected servers that used Prometheus instrumentation (bsc#1196338).
- Mettez à jour vers 3.4.7-150300.9.9.2
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.