Red Hat Security AdvisoryRHSA-2025:16515
container-tools:rhel8 security update
Released 2025-09-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+22334+bb93e398.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+22334+bb93e398.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+22334+bb93e398.x86_64::container-tools:rhel8 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+22334+bb93e398.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+22334+bb93e398.x86_64::container-tools:rhel8, buildah-1:1.29.5-1.module+el8.8.0+23219+eb2ac228.1.src::container-tools:rhel8 +47
Fixes 1 record
Priority LOW 38
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a h…
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01207 · Published 2025-09-05 · Fixed in 5.6.1, 6:5.4.0-13.el10_0 +38 CWE-22
