Security update for podman
This update for podman rebuilds it against the current go security release.
- Update to 4.9.5-150300.9.89.1
Published Updated
PatchFirst · Latest vulnerabilities
podman vulnerabilities
Vulnerabilities published for podman in the last 30 days: 2. Listed in the KEV catalogue: 0.
Vulnerabilities: 24
Security update for podman
This update for podman rebuilds it against the current go security release.
- Update to 4.9.5-150300.9.87.1
Published UpdatedSecurity update for podman
This update for podman rebuilds it against the current go security release.
- Update to 4.9.5-150300.9.85.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2026-55686: specially crafted image where the `WORKDIR` path contains a symlink allows for directory creation and ownership modification on the host filesystem (bsc#1268579). - CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the container (bsc#1269471).
- Update to 4.9.5-150300.9.83.1
Published UpdatedSecurity update for podman
This update for podman rebuilds it against the current go security release.
- Update to 4.9.5-150300.9.80.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262856). - CVE-2026-39829,CVE-2026-39830,CVE-2026-42508,CVE-2026-46598: golang.org/x/crypto/ssh: multiple issues (bsc#1266125).
- Update to 4.9.5-150300.9.78.1
Published UpdatedSecurity update for podman
This update for podman rebuilds it against the current go security release.
- Update to 4.9.5-150300.9.75.1
Published UpdatedSecurity update for podman
This update for podman rebuilds it against the current go 1.25 security release.
- Update to 4.9.5-150300.9.71.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed SSH Agent that could cause a panic due to an out-of-bounds read with non-validated message sizes (bsc#1253993)
- Update to 4.9.5-150300.9.69.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253542)
- Update to 4.9.5-150300.9.66.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-31133: Fixed container escape via 'masked path' abuse due to mount race conditions (bsc#1252376) - CVE-2025-52565: Fixed container escape with malicious config due to /dev/console mount and related races (bsc#1252376) - CVE-2025-52881: Fixed container escape and denial of service due to arbitrary write gadgets and procfs write redirects (bsc#1252376) Other fixes: - Fix: podman and buildah with runc 1.3.2 fail with lots of warnings as rootless (bsc#1252543) - Add symlink to catatonit in /usr/libexec/podman (bsc#1248988)
- Update to 4.9.5-150300.9.63.2
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-9566: fixed an issue where kube play command could cause host files to get overwritten (bsc#1249154)
- Update to 4.9.5-150300.9.55.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-6032: Fixed machine init command failing to verify TLS certificate (bsc#1245320)
- Update to 4.9.5-150300.9.52.1
Published UpdatedRecommended update for podman
This update for podman fixes the following issues: - Added patch to remove using rw as a default mount option (bsc#1239776)
- Update to 4.9.5-150300.9.49.2
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239330).
- Update to 4.9.5-150300.9.46.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE (bsc#1237641) - CVE-2024-9676: github.com/containers/storage: Fixed symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (bsc#1231698) - CVE-2024-9675: Fixed cache arbitrary directory mount in buildah (bsc#1231499) - CVE-2024-9407: Fixed Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction in buildah (bsc#1231208) - CVE-2024-9341: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (bsc#
- Update to 4.9.5-150300.9.43.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2024-6104: Fixed sensitive information disclosure in log files in go-retryablehttp (bsc#1227052)
- Update to 4.9.5-150300.9.34.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - Update to version 4.9.5 - CVE-2024-3727: Fixed a flaw that allowed attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks. (bsc#1224122) - CVE-2024-24786: Fixed an infinite loop in protojson. (bsc#1226136)
- Update to 4.9.5-150300.9.31.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - Update to version 4.9.5 - CVE-2024-3727: Fixed a flaw that allowed attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks. (bsc#1224122) - CVE-2024-24786: Fixed an infinite loop in protojson. (bsc#1226136)
- Update to 4.9.5-150300.9.31.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2024-1753: Fixed full container escape at build time in buildah (bsc#1221677).
- Update to 4.4.4-150300.9.26.2
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.