Security update for podman
This update for podman rebuilds it against the current go security release.
- Update to 4.9.5-150400.4.85.1
Published Updated
PatchFirst · Latest vulnerabilities
podman vulnerabilities
Vulnerabilities published for podman in the last 30 days: 2. Listed in the KEV catalogue: 0.
Vulnerabilities: 25
Security update for podman
This update for podman rebuilds it against the current go security release.
- Update to 4.9.5-150400.4.83.1
Published UpdatedSecurity update for podman
This update for podman rebuilds it against the current go security release.
- Update to 4.9.5-150400.4.81.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2026-55686: specially crafted image where the `WORKDIR` path contains a symlink allows for directory creation and ownership modification on the host filesystem (bsc#1268579). - CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the container (bsc#1269471).
- Update to 4.9.5-150400.4.79.1
Published UpdatedSecurity update for podman
This update for podman rebuilds it against the current go security release.
- Update to 4.9.5-150400.4.76.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262856). - CVE-2026-39829,CVE-2026-39830,CVE-2026-42508,CVE-2026-46598: golang.org/x/crypto/ssh: multiple issues (bsc#1266125).
- Update to 4.9.5-150400.4.74.2
Published UpdatedSecurity update for podman
This update for podman rebuilds it against the current go security release.
- Update to 4.9.5-150400.4.71.1
Published UpdatedSecurity update for podman
This update for podman rebuilds it against the current go 1.25 security release.
- Update to 4.9.5-150400.4.67.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-47914: Fixed ssh-agent that could cause a panic due to an out-of-bounds read with non validated message size (bsc#1253993)
- Update to 4.9.5-150400.4.65.2
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253542)
- Update to 4.9.5-150400.4.62.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-31133: Fixed container escape via 'masked path' abuse due to mount race conditions (bsc#1252376) - CVE-2025-52565: Fixed container escape with malicious config due to /dev/console mount and related races (bsc#1252376) - CVE-2025-52881: Fixed container escape and denial of service due to arbitrary write gadgets and procfs write redirects (bsc#1252376) Other fixes: - podman and buildah with runc 1.3.2 fail with lots of warnings as rootless (bsc#1252543)
- Update to 4.9.5-150400.4.59.2
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-9566: fixed an issue in kube play command that could cause overwriting host files (bsc#1249154)
- Update to 4.9.5-150400.4.53.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-6032: Fixed machine init command failing to verify TLS certificate (bsc#1245320)
- Update to 4.9.5-150400.4.50.1
Published UpdatedRecommended update for podman
This update for podman fixes the following issues: - Added patch to remove using rw as a default mount option (bsc#1239776)
- Update to 4.9.5-150400.4.47.2
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239330).
- Update to 4.9.5-150400.4.44.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE (bsc#1237641)
- Update to 4.9.5-150400.4.41.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2024-6104: possible sensitive data exposure due to hashicorp/go-retryablehttp not sanitizing URLs when writing them to log files. (bsc#1227052) - CVE-2023-45288: possible excessive CPU consumption due to no limit being set on the number of CONTINUATION frames read for an HTTP/2 request in golang.org/x/net/http2. (bsc#1236507)
- Update to 4.9.5-150400.4.38.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2024-9676: github.com/containers/storage: Fixed symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (bsc#1231698) - Load ip_tables and ip6_tables kernel module (bsc#1214612) * Required for rootless mode as a regular user has no permission to load kernel modules - CVE-2024-9675: Fixed cache arbitrary directory mount in buildah (bsc#1231499) - CVE-2024-9407: Fixed Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction in buildah (bsc#1231208) - CVE-2024-9341: cri-o: FIPS Crypto-Policy Directory
- Update to 4.9.5-150400.4.35.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2024-6104: Fixed a potential leak of sensitive information on HTTP log file (bsc#1227052).
- Update to 4.9.5-150400.4.30.1
Published UpdatedSecurity update for podman
This update for podman fixes the following issues: - CVE-2024-6104: Fixed a potential leak of sensitive information on HTTP log file (bsc#1227052).
- Update to 4.9.5-150400.4.30.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.