CVE-2025-9566: Podman: podman kube play command may overwrite host files

Deferred

AliasesSUSE-SU-2025:03534-1SUSE-SU-2025:03584-1SUSE-SU-2025:20899-1+24 more

Published 05-09-2025Last modified 03-11-2026

Vulnerability summary

CVE-2025-9566 is a high (CVSS 8.1) vulnerability in podman. EPSS estimates a 1.16% chance of exploitation in the next 30 days, higher than 67.2% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 8.1, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

8.1/10

010

High · v3.1 (CVE.org)

EPSS score

1.16%

0%100%

Low · +0.05 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Timeline

05-09-2025
PublishedVulnerability first disclosed.
03-11-2026
Last modifiedVulnerability information updated.

Description

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1

CVSS metrics

8 scores · 8 sources · 1 version

v3.18.1

EPSS trend

Probability

1.16%

Chance of exploitation in the next 30 days

Percentile

67%

Versus all other CVEs

30-day change

Increase +0.05 pp

From 1.10% on 05-10-2026

05-10-202604-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-22Improper Limitation of a Pathname to a Restricted DirectoryThe product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Affected systems

Version check

Known conditions: network-reachable, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat175 products

aardvark-dns< 2:1.0.1-40.module+el8.6.0+22769+fa0fe772 | < 2:1.5.0-2.module+el8.8.0+22334+bb93e398
bpftool< 0:7.3.0-427.87.1.el9_4 | < 0:7.0.0-284.138.1.el9_2
bpftool-debuginfo< 0:7.3.0-427.87.1.el9_4 | < 0:7.0.0-284.138.1.el9_2
buildah< 1:1.26.9-2.module+el8.6.0+23285+f8f75f94.1 | < 1:1.29.5-1.module+el8.8.0+23219+eb2ac228.1
buildah-debuginfo< 1:1.26.9-2.module+el8.6.0+23285+f8f75f94.1 | < 1:1.29.5-1.module+el8.8.0+23219+eb2ac228.1

buildah-debugsource< 1:1.26.9-2.module+el8.6.0+23285+f8f75f94.1 | < 1:1.29.5-1.module+el8.8.0+23219+eb2ac228.1
buildah-tests< 1:1.26.9-2.module+el8.6.0+23285+f8f75f94.1 | < 1:1.29.5-1.module+el8.8.0+23219+eb2ac228.1
buildah-tests-debuginfo< 1:1.26.9-2.module+el8.6.0+23285+f8f75f94.1 | < 1:1.29.5-1.module+el8.8.0+23219+eb2ac228.1
cockpit-podman< 0:49.1-1.module+el8.6.0+22769+fa0fe772 | < 0:63.1-1.module+el8.8.0+22334+bb93e398
conmon< 2:2.1.4-1.module+el8.6.0+22769+fa0fe772 | < 3:2.1.6-1.module+el8.8.0+22334+bb93e398
conmon-debuginfo< 2:2.1.4-1.module+el8.6.0+22769+fa0fe772 | < 3:2.1.6-1.module+el8.8.0+22334+bb93e398
conmon-debugsource< 2:2.1.4-1.module+el8.6.0+22769+fa0fe772 | < 3:2.1.6-1.module+el8.8.0+22334+bb93e398
container-selinux< 4:2.237.0-1.rhaos4.19.el9 | < 4:2.237.0-1.rhaos4.18.el9 | < 2:2.189.0-1.module+el8.6.0+22769+fa0fe772 | < 2:2.229.0-1.module+el8.8.0+22334+bb93e398
containernetworking-plugins< 1:1.1.1-5.module+el8.6.0+23285+f8f75f94.1 | < 1:1.2.0-3.module+el8.8.0+23219+eb2ac228
containernetworking-plugins-debuginfo< 1:1.1.1-5.module+el8.6.0+23285+f8f75f94.1 | < 1:1.2.0-3.module+el8.8.0+23219+eb2ac228
containernetworking-plugins-debugsource< 1:1.1.1-5.module+el8.6.0+23285+f8f75f94.1 | < 1:1.2.0-3.module+el8.8.0+23219+eb2ac228
containers-common< 2:1-40.module+el8.6.0+22769+fa0fe772 | < 2:1-67.module+el8.8.0+22334+bb93e398
cri-o< 0:1.32.8-3.rhaos4.19.git60d4e21.el9 | < 0:1.31.12-3.rhaos4.18.gitdc59c78.el8 | < 0:1.31.12-3.rhaos4.18.gitdc59c78.el9
cri-o-debuginfo< 0:1.32.8-3.rhaos4.19.git60d4e21.el9 | < 0:1.31.12-3.rhaos4.18.gitdc59c78.el8 | < 0:1.31.12-3.rhaos4.18.gitdc59c78.el9
cri-o-debugsource< 0:1.32.8-3.rhaos4.19.git60d4e21.el9 | < 0:1.31.12-3.rhaos4.18.gitdc59c78.el8 | < 0:1.31.12-3.rhaos4.18.gitdc59c78.el9
crit< 0:3.15-3.module+el8.6.0+22769+fa0fe772 | < 0:3.15-4.module+el8.8.0+22334+bb93e398
criu< 0:3.15-3.module+el8.6.0+22769+fa0fe772 | < 0:3.15-4.module+el8.8.0+22334+bb93e398
criu-debuginfo< 0:3.15-3.module+el8.6.0+22769+fa0fe772 | < 0:3.15-4.module+el8.8.0+22334+bb93e398
criu-debugsource< 0:3.15-3.module+el8.6.0+22769+fa0fe772 | < 0:3.15-4.module+el8.8.0+22334+bb93e398
criu-devel< 0:3.15-3.module+el8.6.0+22769+fa0fe772 | < 0:3.15-4.module+el8.8.0+22334+bb93e398
criu-libs< 0:3.15-3.module+el8.6.0+22769+fa0fe772 | < 0:3.15-4.module+el8.8.0+22334+bb93e398
criu-libs-debuginfo< 0:3.15-3.module+el8.6.0+22769+fa0fe772 | < 0:3.15-4.module+el8.8.0+22334+bb93e398
crun< 0:1.5-1.module+el8.6.0+22769+fa0fe772 | < 0:1.8.4-2.module+el8.8.0+22334+bb93e398
crun-debuginfo< 0:1.5-1.module+el8.6.0+22769+fa0fe772 | < 0:1.8.4-2.module+el8.8.0+22334+bb93e398
crun-debugsource< 0:1.5-1.module+el8.6.0+22769+fa0fe772 | < 0:1.8.4-2.module+el8.8.0+22334+bb93e398
fuse-overlayfs< 0:1.9-1.module+el8.6.0+22769+fa0fe772 | < 0:1.11-1.module+el8.8.0+22334+bb93e398
fuse-overlayfs-debuginfo< 0:1.9-1.module+el8.6.0+22769+fa0fe772 | < 0:1.11-1.module+el8.8.0+22334+bb93e398
fuse-overlayfs-debugsource< 0:1.9-1.module+el8.6.0+22769+fa0fe772 | < 0:1.11-1.module+el8.8.0+22334+bb93e398
kernel< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k-core< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k-debug< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k-debug-core< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k-debug-debuginfo< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k-debug-devel< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k-debug-devel-matched< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k-debug-modules< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k-debug-modules-core< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k-debug-modules-extra< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k-debug-modules-internal< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k-debug-modules-partner< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k-debuginfo< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k-devel< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k-devel-matched< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k-modules< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k-modules-core< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k-modules-extra< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k-modules-internal< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-64k-modules-partner< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-abi-stablelists< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-core< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-debug< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-debug-core< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-debug-debuginfo< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-debug-devel< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-debug-devel-matched< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-debug-modules< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-debug-modules-core< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-debug-modules-extra< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-debug-modules-internal< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-debug-modules-partner< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-debug-uki-virt< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-debuginfo< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-debuginfo-common-aarch64< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-debuginfo-common-ppc64le< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-debuginfo-common-s390x< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-debuginfo-common-x86_64< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-devel< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-devel-matched< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-doc< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-ipaclones-internal< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-modules< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-modules-core< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-modules-extra< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-modules-internal< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-modules-partner< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-rt< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-core< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-debug< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-debug-core< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-debug-debuginfo< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-debug-devel< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-debug-devel-matched< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-debug-kvm< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-debug-modules< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-debug-modules-core< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-debug-modules-extra< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-debug-modules-internal< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-debug-modules-partner< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-debuginfo< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-debuginfo-common-x86_64< 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-devel< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-devel-matched< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-kvm< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-modules< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-modules-core< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-modules-extra< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-modules-internal< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-modules-partner< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-rt-selftests-internal< 0:5.14.0-284.138.1.rt14.423.el9_2
kernel-selftests-internal< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-tools< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-tools-debuginfo< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-tools-libs< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-tools-libs-devel< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-uki-virt< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-zfcpdump< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-zfcpdump-core< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-zfcpdump-debuginfo< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-zfcpdump-devel< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-zfcpdump-devel-matched< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-zfcpdump-modules< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-zfcpdump-modules-core< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-zfcpdump-modules-extra< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-zfcpdump-modules-internal< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
kernel-zfcpdump-modules-partner< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
libperf-debuginfo< 0:5.14.0-427.87.1.el9_4
libslirp< 0:4.4.0-1.module+el8.6.0+22769+fa0fe772 | < 0:4.4.0-1.module+el8.8.0+22334+bb93e398
libslirp-debuginfo< 0:4.4.0-1.module+el8.6.0+22769+fa0fe772 | < 0:4.4.0-1.module+el8.8.0+22334+bb93e398
libslirp-debugsource< 0:4.4.0-1.module+el8.6.0+22769+fa0fe772 | < 0:4.4.0-1.module+el8.8.0+22334+bb93e398
libslirp-devel< 0:4.4.0-1.module+el8.6.0+22769+fa0fe772 | < 0:4.4.0-1.module+el8.8.0+22334+bb93e398
netavark< 2:1.0.1-40.module+el8.6.0+22769+fa0fe772 | < 2:1.5.1-3.module+el8.8.0+22334+bb93e398
oci-seccomp-bpf-hook< 0:1.2.6-1.module+el8.6.0+22769+fa0fe772 | < 0:1.2.8-1.module+el8.8.0+22334+bb93e398
oci-seccomp-bpf-hook-debuginfo< 0:1.2.6-1.module+el8.6.0+22769+fa0fe772 | < 0:1.2.8-1.module+el8.8.0+22334+bb93e398
oci-seccomp-bpf-hook-debugsource< 0:1.2.6-1.module+el8.6.0+22769+fa0fe772 | < 0:1.2.8-1.module+el8.8.0+22334+bb93e398
openshift< 0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9 | < 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8 | < 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el9
openshift-ansible< 0:4.18.0-202509011551.p2.g018e43a.assembly.stream.el8 | < 0:4.18.0-202509011551.p2.g018e43a.assembly.stream.el9
openshift-ansible-test< 0:4.18.0-202509011551.p2.g018e43a.assembly.stream.el8 | < 0:4.18.0-202509011551.p2.g018e43a.assembly.stream.el9
openshift-hyperkube< 0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9 | < 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8 | < 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el9
openshift-kube-apiserver< 0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9 | < 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8 | < 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el9
openshift-kube-controller-manager< 0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9 | < 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8 | < 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el9
openshift-kube-scheduler< 0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9 | < 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8 | < 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el9
openshift-kubelet< 0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9 | < 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8 | < 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el9
perf< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
perf-debuginfo< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
podman< 5:5.4.0-7.rhaos4.19.el9 | < 5:5.2.2-11.rhaos4.18.el9 | < 3:4.4.1-35.rhaos4.15.el8 | < 3:4.4.1-35.rhaos4.15.el9 | < 3:4.4.1-23.rhaos4.14.el8 | < 3:4.4.1-23.rhaos4.14.el9 | < 5:5.4.0-12.rhaos4.20.el9 | < 5:5.4.0-13.el9_6 | < 6:5.4.0-13.el10_0 | < 2:4.2.0-6.el9_0.5 | < 4:4.9.4-18.el9_4.3 | < 2:4.2.0-8.module+el8.6.0+23536+c4752ca8.4 | < 2:4.4.1-22.el9_2.4 | < 3:4.4.1-27.module+el8.8.0+23535+3509efd3.3 | < 7:5.8.0-2.el10 | < 6:5.8.0-1.el9
podman-catatonit< 3:4.4.1-35.rhaos4.15.el8 | < 3:4.4.1-23.rhaos4.14.el8 | < 2:4.2.0-6.el9_0.5 | < 2:4.2.0-8.module+el8.6.0+23536+c4752ca8.4 | < 3:4.4.1-27.module+el8.8.0+23535+3509efd3.3
podman-catatonit-debuginfo< 3:4.4.1-35.rhaos4.15.el8 | < 3:4.4.1-23.rhaos4.14.el8 | < 2:4.2.0-6.el9_0.5 | < 2:4.2.0-8.module+el8.6.0+23536+c4752ca8.4 | < 3:4.4.1-27.module+el8.8.0+23535+3509efd3.3
podman-debuginfo< 5:5.4.0-7.rhaos4.19.el9 | < 5:5.2.2-11.rhaos4.18.el9 | < 3:4.4.1-35.rhaos4.15.el8 | < 3:4.4.1-35.rhaos4.15.el9 | < 3:4.4.1-23.rhaos4.14.el8 | < 3:4.4.1-23.rhaos4.14.el9 | < 5:5.4.0-12.rhaos4.20.el9 | < 5:5.4.0-13.el9_6 | < 6:5.4.0-13.el10_0 | < 2:4.2.0-6.el9_0.5 | < 4:4.9.4-18.el9_4.3 | < 2:4.2.0-8.module+el8.6.0+23536+c4752ca8.4 | < 2:4.4.1-22.el9_2.4 | < 3:4.4.1-27.module+el8.8.0+23535+3509efd3.3 | < 7:5.8.0-2.el10 | < 6:5.8.0-1.el9
podman-debugsource< 5:5.4.0-7.rhaos4.19.el9 | < 5:5.2.2-11.rhaos4.18.el9 | < 3:4.4.1-35.rhaos4.15.el8 | < 3:4.4.1-35.rhaos4.15.el9 | < 3:4.4.1-23.rhaos4.14.el8 | < 3:4.4.1-23.rhaos4.14.el9 | < 5:5.4.0-12.rhaos4.20.el9 | < 5:5.4.0-13.el9_6 | < 6:5.4.0-13.el10_0 | < 2:4.2.0-6.el9_0.5 | < 4:4.9.4-18.el9_4.3 | < 2:4.2.0-8.module+el8.6.0+23536+c4752ca8.4 | < 2:4.4.1-22.el9_2.4 | < 3:4.4.1-27.module+el8.8.0+23535+3509efd3.3 | < 7:5.8.0-2.el10 | < 6:5.8.0-1.el9
podman-docker< 5:5.4.0-7.rhaos4.19.el9 | < 5:5.2.2-11.rhaos4.18.el9 | < 3:4.4.1-35.rhaos4.15.el8 | < 3:4.4.1-35.rhaos4.15.el9 | < 3:4.4.1-23.rhaos4.14.el8 | < 3:4.4.1-23.rhaos4.14.el9 | < 5:5.4.0-12.rhaos4.20.el9 | < 5:5.4.0-13.el9_6 | < 6:5.4.0-13.el10_0 | < 2:4.2.0-6.el9_0.5 | < 4:4.9.4-18.el9_4.3 | < 2:4.2.0-8.module+el8.6.0+23536+c4752ca8.4 | < 2:4.4.1-22.el9_2.4 | < 3:4.4.1-27.module+el8.8.0+23535+3509efd3.3 | < 7:5.8.0-2.el10 | < 6:5.8.0-1.el9
podman-gvproxy< 3:4.4.1-35.rhaos4.15.el8 | < 3:4.4.1-35.rhaos4.15.el9 | < 3:4.4.1-23.rhaos4.14.el8 | < 3:4.4.1-23.rhaos4.14.el9 | < 2:4.2.0-6.el9_0.5 | < 2:4.2.0-8.module+el8.6.0+23536+c4752ca8.4 | < 2:4.4.1-22.el9_2.4 | < 3:4.4.1-27.module+el8.8.0+23535+3509efd3.3
podman-gvproxy-debuginfo< 3:4.4.1-35.rhaos4.15.el8 | < 3:4.4.1-35.rhaos4.15.el9 | < 3:4.4.1-23.rhaos4.14.el8 | < 3:4.4.1-23.rhaos4.14.el9 | < 2:4.2.0-6.el9_0.5 | < 2:4.2.0-8.module+el8.6.0+23536+c4752ca8.4 | < 2:4.4.1-22.el9_2.4 | < 3:4.4.1-27.module+el8.8.0+23535+3509efd3.3
podman-plugins< 5:5.4.0-7.rhaos4.19.el9 | < 5:5.2.2-11.rhaos4.18.el9 | < 3:4.4.1-35.rhaos4.15.el8 | < 3:4.4.1-35.rhaos4.15.el9 | < 3:4.4.1-23.rhaos4.14.el8 | < 3:4.4.1-23.rhaos4.14.el9 | < 5:5.4.0-12.rhaos4.20.el9 | < 5:5.4.0-13.el9_6 | < 2:4.2.0-6.el9_0.5 | < 4:4.9.4-18.el9_4.3 | < 2:4.2.0-8.module+el8.6.0+23536+c4752ca8.4 | < 2:4.4.1-22.el9_2.4 | < 3:4.4.1-27.module+el8.8.0+23535+3509efd3.3 | < 6:5.8.0-1.el9
podman-plugins-debuginfo< 5:5.4.0-7.rhaos4.19.el9 | < 5:5.2.2-11.rhaos4.18.el9 | < 3:4.4.1-35.rhaos4.15.el8 | < 3:4.4.1-35.rhaos4.15.el9 | < 3:4.4.1-23.rhaos4.14.el8 | < 3:4.4.1-23.rhaos4.14.el9 | < 5:5.4.0-12.rhaos4.20.el9 | < 5:5.4.0-13.el9_6 | < 2:4.2.0-6.el9_0.5 | < 4:4.9.4-18.el9_4.3 | < 2:4.2.0-8.module+el8.6.0+23536+c4752ca8.4 | < 2:4.4.1-22.el9_2.4 | < 3:4.4.1-27.module+el8.8.0+23535+3509efd3.3 | < 6:5.8.0-1.el9
podman-remote< 5:5.4.0-7.rhaos4.19.el9 | < 5:5.2.2-11.rhaos4.18.el9 | < 3:4.4.1-35.rhaos4.15.el8 | < 3:4.4.1-35.rhaos4.15.el9 | < 3:4.4.1-23.rhaos4.14.el8 | < 3:4.4.1-23.rhaos4.14.el9 | < 5:5.4.0-12.rhaos4.20.el9 | < 5:5.4.0-13.el9_6 | < 6:5.4.0-13.el10_0 | < 2:4.2.0-6.el9_0.5 | < 4:4.9.4-18.el9_4.3 | < 2:4.2.0-8.module+el8.6.0+23536+c4752ca8.4 | < 2:4.4.1-22.el9_2.4 | < 3:4.4.1-27.module+el8.8.0+23535+3509efd3.3 | < 7:5.8.0-2.el10 | < 6:5.8.0-1.el9
podman-remote-debuginfo< 5:5.4.0-7.rhaos4.19.el9 | < 5:5.2.2-11.rhaos4.18.el9 | < 3:4.4.1-35.rhaos4.15.el8 | < 3:4.4.1-35.rhaos4.15.el9 | < 3:4.4.1-23.rhaos4.14.el8 | < 3:4.4.1-23.rhaos4.14.el9 | < 5:5.4.0-12.rhaos4.20.el9 | < 5:5.4.0-13.el9_6 | < 6:5.4.0-13.el10_0 | < 2:4.2.0-6.el9_0.5 | < 4:4.9.4-18.el9_4.3 | < 2:4.2.0-8.module+el8.6.0+23536+c4752ca8.4 | < 2:4.4.1-22.el9_2.4 | < 3:4.4.1-27.module+el8.8.0+23535+3509efd3.3 | < 7:5.8.0-2.el10 | < 6:5.8.0-1.el9
podman-tests< 5:5.4.0-7.rhaos4.19.el9 | < 5:5.2.2-11.rhaos4.18.el9 | < 3:4.4.1-35.rhaos4.15.el8 | < 3:4.4.1-35.rhaos4.15.el9 | < 3:4.4.1-23.rhaos4.14.el8 | < 3:4.4.1-23.rhaos4.14.el9 | < 5:5.4.0-12.rhaos4.20.el9 | < 5:5.4.0-13.el9_6 | < 6:5.4.0-13.el10_0 | < 2:4.2.0-6.el9_0.5 | < 4:4.9.4-18.el9_4.3 | < 2:4.2.0-8.module+el8.6.0+23536+c4752ca8.4 | < 2:4.4.1-22.el9_2.4 | < 3:4.4.1-27.module+el8.8.0+23535+3509efd3.3 | < 7:5.8.0-2.el10 | < 6:5.8.0-1.el9
podman-tests-debuginfo< 5:5.4.0-7.rhaos4.19.el9 | < 5:5.4.0-13.el9_6 | < 6:5.4.0-13.el10_0 | < 7:5.8.0-2.el10 | < 6:5.8.0-1.el9
python-podman< 0:4.0.1-1.module+el8.6.0+22769+fa0fe772 | < 0:4.4.1-1.module+el8.8.0+22334+bb93e398
python3-criu< 0:3.15-3.module+el8.6.0+22769+fa0fe772 | < 0:3.15-4.module+el8.8.0+22334+bb93e398
python3-perf< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
python3-perf-debuginfo< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
python3-podman< 0:4.0.1-1.module+el8.6.0+22769+fa0fe772 | < 0:4.4.1-1.module+el8.8.0+22334+bb93e398
rtla< 0:5.14.0-427.87.1.el9_4 | < 0:5.14.0-284.138.1.el9_2
runc< 1:1.1.12-1.module+el8.6.0+22769+fa0fe772 | < 1:1.1.12-1.module+el8.8.0+22334+bb93e398
runc-debuginfo< 1:1.1.12-1.module+el8.6.0+22769+fa0fe772 | < 1:1.1.12-1.module+el8.8.0+22334+bb93e398
runc-debugsource< 1:1.1.12-1.module+el8.6.0+22769+fa0fe772 | < 1:1.1.12-1.module+el8.8.0+22334+bb93e398
skopeo< 2:1.9.1-2.module+el8.6.0+23536+c4752ca8.1 | < 2:1.11.3-0.1.module+el8.8.0+23535+3509efd3
skopeo-debuginfo< 2:1.9.1-2.module+el8.6.0+23536+c4752ca8.1
skopeo-debugsource< 2:1.9.1-2.module+el8.6.0+23536+c4752ca8.1
skopeo-tests< 2:1.9.1-2.module+el8.6.0+23536+c4752ca8.1 | < 2:1.11.3-0.1.module+el8.8.0+23535+3509efd3
slirp4netns< 0:1.2.0-3.module+el8.6.0+22769+fa0fe772 | < 0:1.2.0-3.module+el8.8.0+22334+bb93e398
slirp4netns-debuginfo< 0:1.2.0-3.module+el8.6.0+22769+fa0fe772 | < 0:1.2.0-3.module+el8.8.0+22334+bb93e398
slirp4netns-debugsource< 0:1.2.0-3.module+el8.6.0+22769+fa0fe772 | < 0:1.2.0-3.module+el8.8.0+22334+bb93e398
toolbox< 0:0.0.99.3-0.7.module+el8.6.0+22769+fa0fe772 | < 0:0.0.99.3-7.module+el8.8.0+22334+bb93e398
toolbox-debuginfo< 0:0.0.99.3-0.7.module+el8.6.0+22769+fa0fe772 | < 0:0.0.99.3-7.module+el8.8.0+22334+bb93e398
toolbox-debugsource< 0:0.0.99.3-0.7.module+el8.6.0+22769+fa0fe772 | < 0:0.0.99.3-7.module+el8.8.0+22334+bb93e398
toolbox-tests< 0:0.0.99.3-0.7.module+el8.6.0+22769+fa0fe772 | < 0:0.0.99.3-7.module+el8.8.0+22334+bb93e398
udica< 0:0.2.6-5.module+el8.6.0+22769+fa0fe772 | < 0:0.2.6-20.module+el8.8.0+22334+bb93e398

Show all 175

Suse12 products

podman&distro=SUSE Enterprise Storage 7.1< 4.9.5-150300.9.55.1
podman&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 4.9.5-150300.9.55.1
podman&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 4.9.5-150400.4.53.1
podman&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 4.9.5-150400.4.53.1
podman&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS< 4.9.5-150500.3.49.1

Show all 12

Github.com/containers/podman4 products

v2All versions (No fix recorded)
v3All versions (No fix recorded)
v4All versions (No fix recorded) | ≤ 4.9.5
v5< 5.6.1

Chainguard2 products

prometheus-podman-exporter< 1.18.0-r2
prometheus-podman-exporter-fips< 1.18.0-r2

Debian2 products

libpodAll versions (No fix recorded)
podmanAll versions (No fix recorded) | < 5.6.1+ds1-2

Ubuntu2 products

libpodAll versions (No fix recorded)
podmanAll versions (No fix recorded)

Alpine1 product

podman< 5.6.1-r0

Github.com/containers1 product

podmanAll versions (No fix recorded)

Opensuse1 product

podman&distro=openSUSE Leap 15.6< 4.9.5-150500.3.49.1

9 vendors · 200 products · Showing 200 of 210

References

74 links

access.redhat.com/errata/RHBA-2025:15692Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHBA-2025:15712Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHBA-2025:16158Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHBA-2025:16163Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHEA-2025:4782Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:15900Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:15901Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:15904Vendor AdvisoryX Refsource REDHATWEBAdvisory
access.redhat.com/errata/RHSA-2025:16480Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:16481Vendor AdvisoryX Refsource REDHATAdvisoryWEB

Show all 74 references

access.redhat.com/errata/RHSA-2025:16482Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:16488Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:16515Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:16724Vendor AdvisoryX Refsource REDHATWEBAdvisory
access.redhat.com/errata/RHSA-2025:17669Vendor AdvisoryX Refsource REDHATWEBAdvisory
access.redhat.com/errata/RHSA-2025:18217Vendor AdvisoryX Refsource REDHATWEBAdvisory
access.redhat.com/errata/RHSA-2025:18218Vendor AdvisoryX Refsource REDHATWEBAdvisory
access.redhat.com/errata/RHSA-2025:18240Vendor AdvisoryX Refsource REDHATWEBAdvisory
access.redhat.com/errata/RHSA-2025:19002Vendor AdvisoryX Refsource REDHATWEBAdvisory
access.redhat.com/errata/RHSA-2025:19041Vendor AdvisoryX Refsource REDHATWEBAdvisory
access.redhat.com/errata/RHSA-2025:19046Vendor AdvisoryX Refsource REDHATWEBAdvisory
access.redhat.com/errata/RHSA-2025:19094Vendor AdvisoryX Refsource REDHATWEBAdvisory
access.redhat.com/errata/RHSA-2025:19894Vendor AdvisoryX Refsource REDHATWEBAdvisory
access.redhat.com/errata/RHSA-2025:20909Vendor AdvisoryX Refsource REDHATWEBAdvisory
access.redhat.com/errata/RHSA-2025:20983Vendor AdvisoryX Refsource REDHATWEBAdvisory
access.redhat.com/errata/RHSA-2026:18289Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2026:18722Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2026:62549Vendor AdvisoryX Refsource REDHATWEB
access.redhat.com/errata/RHSA-2026:67857Vendor AdvisoryX Refsource REDHATWEB
access.redhat.com/errata/RHSA-2026:8211Vendor AdvisoryX Refsource REDHATWEBAdvisory
access.redhat.com/security/cve/CVE-2025-9566VDB EntryX Refsource REDHATREPORTWEBAdvisory
bugzilla.redhat.com/show_bug.cgi?id=2393152Issue TrackingX Refsource REDHATREPORTWEB
github.com/containers/podman/commit/43fbde4e665fe6cee6921868f04b7ccd3de5ad89ARTICLEWEBFIX
github.com/containers/podman/security/advisories/GHSA-wp3j-xq48-xpjwARTICLEWEBAdvisory
www.suse.com/support/update/announcement/2025/suse-su-202503534-1/Advisory
bugzilla.suse.com/1249154REPORT
www.suse.com/security/cve/CVE-2025-9566WEB
www.suse.com/support/update/announcement/2025/suse-su-202503584-1/Advisory
www.suse.com/support/update/announcement/2025/suse-su-202520899-1/Advisory
www.suse.com/support/update/announcement/2025/suse-su-20253782-1/Advisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_15692.jsonAdvisory
www.cve.org/CVERecord?id=CVE-2025-9566AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2025-9566Advisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_15712.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_16158.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_16163.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhea-2025_4782.jsonAdvisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15900.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15901.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16480.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16481.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16482.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16488.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16515.jsonAdvisory
docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.2_release_notes/indexARTICLE
issues.redhat.com/browse/RHEL-132823ARTICLE
issues.redhat.com/browse/RHEL-145596ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18289.jsonAdvisory
docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.8_release_notes/indexARTICLE
issues.redhat.com/browse/RHEL-127541ARTICLE
issues.redhat.com/browse/RHEL-132826ARTICLE
issues.redhat.com/browse/RHEL-142896ARTICLE
issues.redhat.com/browse/RHEL-15873ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18722.jsonAdvisory
ubuntu.com/security/CVE-2025-9566REPORT
security-tracker.debian.org/tracker/CVE-2025-9566Advisory
github.com/containers/podmanPACKAGE
access.redhat.com/downloads/content/package-browser/WEB
catalog.redhat.com/software/containers/WEB
github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9566.jsonAdvisory
access.redhat.com/errata/RHBA-2025:16131Vendor AdvisoryX Refsource REDHATWEB
access.redhat.com/errata/RHBA-2025:18215Vendor AdvisoryX Refsource REDHATWEB
security.alpinelinux.org/vuln/CVE-2025-9566Advisory