There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.
Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-remoteUpgrade libslirp-develUpgrade container-selinuxUpgrade runcUpgrade podman-dockerUpgrade crunUpgrade criu-develUpgrade critUpgrade udicaUpgrade podman-testsUpgrade containernetworking-pluginsUpgrade python3-criuUpgrade skopeo-testsUpgrade podman-pluginsUpgrade fuse-overlayfsUpgrade criuUpgrade slirp4netnsUpgrade toolboxUpgrade containers-commonUpgrade buildahUpgrade criu-libsUpgrade python3-podmanUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade podmanUpgrade skopeoUpgrade libslirpUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade buildah-testsUpgrade aardvark-dnsUpgrade podman-gvproxy | Sep 18, 2025 | Sep 16, 2025 |
| Alpine Linux | — | Upgrade podman | Sep 8, 2025 | Sep 5, 2025 |
| Oracle_linux | — | Upgrade netavarkUpgrade udicaUpgrade skopeoUpgrade buildahUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade crunUpgrade podmanUpgrade conmonUpgrade criuUpgrade podman-pluginsUpgrade podman-catatonitUpgrade runcUpgrade python3-podmanUpgrade podman-gvproxyUpgrade podman-testsUpgrade libslirp-develUpgrade podman-remoteUpgrade cockpit-podmanUpgrade podman-dockerUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade containers-commonUpgrade buildah-testsUpgrade aardvark-dnsUpgrade python3-criuUpgrade critUpgrade criu-libsUpgrade slirp4netnsUpgrade skopeo-testsUpgrade libslirp | Sep 18, 2025 | Sep 4, 2025 |
| Redhat Openshift | — | Upgrade container-selinuxUpgrade openshift-ansibleUpgrade cri-oUpgrade ose-rhel-coreosUpgrade kernelUpgrade openshiftUpgrade kernel-rtUpgrade podman | Aug 10, 2026 | Sep 4, 2025 |
| Redhat_linux | — | Upgrade fuse-overlayfs-debuginfoUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade criu-debuginfoUpgrade crun-debugsourceUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade conmon-debuginfoUpgrade containers-commonUpgrade runc-debugsourceUpgrade cockpit-podmanUpgrade python3-podmanUpgrade aardvark-dnsUpgrade libslirp-develUpgrade toolbox-testsUpgrade buildahUpgrade buildah-testsUpgrade criu-libsUpgrade netavarkUpgrade podmanUpgrade criuUpgrade fuse-overlayfs-debugsourceUpgrade crun-debuginfoUpgrade containernetworking-pluginsUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debugsourceUpgrade toolbox-debugsourceUpgrade skopeo-testsUpgrade podman-testsUpgrade podman-gvproxy-debuginfoUpgrade podman-remoteUpgrade containernetworking-plugins-debugsourceUpgrade podman-tests-debuginfoUpgrade slirp4netns-debugsourceUpgrade criu-develUpgrade python3-criuUpgrade toolbox-debuginfoUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade libslirpUpgrade slirp4netnsUpgrade toolboxUpgrade crunUpgrade criu-libs-debuginfoUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-gvproxyUpgrade critUpgrade skopeoUpgrade podman-pluginsUpgrade podman-plugins-debuginfoUpgrade udicaUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade container-selinuxUpgrade podman-dockerUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade conmon | Sep 17, 2025 | Sep 4, 2025 |
| Rocky_linux | — | Upgrade slirp4netnsUpgrade critUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debugsourceUpgrade netavarkUpgrade buildah-debugsourceUpgrade skopeo-testsUpgrade crunUpgrade skopeoUpgrade podman-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-tests-debuginfoUpgrade toolboxUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-pluginsUpgrade podman-gvproxyUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade criu-libs-debuginfoUpgrade toolbox-debugsourceUpgrade crun-debuginfoUpgrade podman-remote-debuginfoUpgrade toolbox-debuginfoUpgrade podman-catatonit-debuginfoUpgrade runc-debuginfoUpgrade slirp4netns-debugsourceUpgrade podmanUpgrade conmonUpgrade libslirpUpgrade podman-testsUpgrade podman-debuginfoUpgrade aardvark-dnsUpgrade libslirp-develUpgrade podman-catatonitUpgrade buildah-testsUpgrade libslirp-debuginfoUpgrade conmon-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-remoteUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade criuUpgrade containers-commonUpgrade buildah-debuginfoUpgrade buildahUpgrade toolbox-testsUpgrade python3-criuUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfsUpgrade runc-debugsourceUpgrade crun-debugsourceUpgrade criu-libsUpgrade criu-debugsourceUpgrade containernetworking-pluginsUpgrade conmon-debuginfoUpgrade criu-debuginfo | Feb 5, 2026 | Nov 29, 2025 |
| Suse | — | Upgrade podmanshUpgrade podman-remoteUpgrade podman-dockerUpgrade podman | Dec 5, 2025 | Sep 17, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Sep 5, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub