Red Hat Security Advisory

RHSA-2025:20909

podman security update

Released 2025-11-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) podman-6:5.6.0-6.el9_7, podman-docker-6:5.6.0-6.el9_7, podman-plugins-6:5.6.0-6.el9_7 +2

Fixes 2 records

TI-2025-08759 CVE-2025-9566 · GHSA-wp3j-xq48-xpjw

Podman: podman kube play command may overwrite host files

LOW 38

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a h…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01207 Published 2025-09-05 Fixed in 5.6.1, 6:5.4.0-13.el10_0 +38 CWE-22

TI-2025-30311 CVE-2025-47907 · GHSA-j5pm-7495-qmr3

Incorrect results returned from Rows.Scan in database/sql

LOW 31

Cancelling a query (e.g.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00406 Published 2025-08-07 Partial fix · 1.23.12, 1.24.6 CWE-362