Количество 32
Количество 32
RLSA-2025:15904
Important: container-tools:rhel8 security update
CVE-2025-4953
A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible.
CVE-2025-4953
A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible.
CVE-2025-4953
A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible.
CVE-2025-4953
Podman: build context bind mount
CVE-2025-4953
A flaw was found in Podman. In a Containerfile or Podman, data written ...
CVE-2025-9566
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1
CVE-2025-9566
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1
CVE-2025-9566
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1
CVE-2025-9566
Podman: podman kube play command may overwrite host files
CVE-2025-9566
There's a vulnerability in podman where an attacker may use the kube p ...
GHSA-m68q-4hqr-mc6f
Podman Creates Temporary File with Insecure Permissions
SUSE-SU-2025:3782-1
Security update for podman
SUSE-SU-2025:03584-1
Security update for podman
SUSE-SU-2025:03534-1
Security update for podman
RLSA-2026:18722
Important: podman security update
RLSA-2025:15901
Important: podman security update
RLSA-2025:15900
Important: podman security update
GHSA-wp3j-xq48-xpjw
podman kube play symlink traversal vulnerability
ELSA-2026-18722
ELSA-2026-18722: podman security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | RLSA-2025:15904 Important: container-tools:rhel8 security update | 10 месяцев назад | ||
 | CVE-2025-4953 A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible. | CVSS3: 7.4 | 1% Низкий | около 1 года назад |
 | CVE-2025-4953 A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible. | CVSS3: 7.4 | 1% Низкий | около 1 года назад |
 | CVE-2025-4953 A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible. | CVSS3: 7.4 | 1% Низкий | около 1 года назад |
 | CVE-2025-4953 Podman: build context bind mount | 1% Низкий | 10 месяцев назад | |
| CVE-2025-4953 A flaw was found in Podman. In a Containerfile or Podman, data written ... | CVSS3: 7.4 | 1% Низкий | около 1 года назад |
| CVE-2025-9566 There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1 | CVSS3: 8.1 | 1% Низкий | около 1 года назад |
| CVE-2025-9566 There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1 | CVSS3: 8.1 | 1% Низкий | около 1 года назад |
| CVE-2025-9566 There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1 | CVSS3: 8.1 | 1% Низкий | около 1 года назад |
| CVE-2025-9566 Podman: podman kube play command may overwrite host files | 1% Низкий | около 1 года назад | |
| CVE-2025-9566 There's a vulnerability in podman where an attacker may use the kube p ... | CVSS3: 8.1 | 1% Низкий | около 1 года назад |
| GHSA-m68q-4hqr-mc6f Podman Creates Temporary File with Insecure Permissions | CVSS3: 7.4 | 1% Низкий | около 1 года назад |
 | SUSE-SU-2025:3782-1 Security update for podman | 1% Низкий | 11 месяцев назад | |
| SUSE-SU-2025:03584-1 Security update for podman | 1% Низкий | 12 месяцев назад | |
| SUSE-SU-2025:03534-1 Security update for podman | 1% Низкий | 12 месяцев назад | |
| RLSA-2026:18722 Important: podman security update | 1% Низкий | 4 месяца назад | |
| RLSA-2025:15901 Important: podman security update | 1% Низкий | 12 месяцев назад | |
| RLSA-2025:15900 Important: podman security update | 1% Низкий | 12 месяцев назад | |
| GHSA-wp3j-xq48-xpjw podman kube play symlink traversal vulnerability | CVSS3: 8.1 | 1% Низкий | около 1 года назад |
| ELSA-2026-18722 ELSA-2026-18722: podman security update (IMPORTANT) | 1% Низкий | 3 месяца назад |
Уязвимостей на страницу