SUSE-SU-2026:20116-1

Security update for podman

view advisory published 2026-01-21

Security update for podman

describes (4)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-52881US	high7.5	0.80% (56th)	Exploit	2025-11-06
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting wri…
CVE-2025-52565US	high7.5	0.81% (57th)	—	2025-11-06
runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0-…
CVE-2025-31133US	high7.8	1.24% (69th)	Exploit	2025-11-06
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, r…
CVE-2025-9566US	—	1.16% (67th)	—	2025-09-05
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and suc…

references

External citations — patches, advisories, analysis.

SUSE Bug 1249154self
SUSE Bug 1252376self
URL of this CSAF noticeself
E-Mail link for SUSE-SU-2026:20116-1self
SUSE CVE CVE-2025-31133 pageself
SUSE CVE CVE-2025-52565 pageself
SUSE CVE CVE-2025-52881 pageself
SUSE CVE CVE-2025-9566 pageself

remediations (52)

Fixedpodman-0:5.4.2-160000.3.1.aarch64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-0:5.4.2-160000.3.1.aarch64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-0:5.4.2-160000.3.1.aarch64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-0:5.4.2-160000.3.1.aarch64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-0:5.4.2-160000.3.1.ppc64le as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-0:5.4.2-160000.3.1.ppc64le as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-0:5.4.2-160000.3.1.ppc64le as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-0:5.4.2-160000.3.1.ppc64le as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-0:5.4.2-160000.3.1.s390x as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-0:5.4.2-160000.3.1.s390x as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-0:5.4.2-160000.3.1.s390x as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-0:5.4.2-160000.3.1.s390x as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-0:5.4.2-160000.3.1.x86_64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-0:5.4.2-160000.3.1.x86_64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-0:5.4.2-160000.3.1.x86_64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-0:5.4.2-160000.3.1.x86_64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-docker-0:5.4.2-160000.3.1.noarch as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-docker-0:5.4.2-160000.3.1.noarch as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-docker-0:5.4.2-160000.3.1.noarch as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-docker-0:5.4.2-160000.3.1.noarch as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-remote-0:5.4.2-160000.3.1.aarch64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-remote-0:5.4.2-160000.3.1.aarch64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-remote-0:5.4.2-160000.3.1.aarch64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-remote-0:5.4.2-160000.3.1.aarch64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-remote-0:5.4.2-160000.3.1.ppc64le as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-remote-0:5.4.2-160000.3.1.ppc64le as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-remote-0:5.4.2-160000.3.1.ppc64le as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-remote-0:5.4.2-160000.3.1.ppc64le as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-remote-0:5.4.2-160000.3.1.s390x as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-remote-0:5.4.2-160000.3.1.s390x as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-remote-0:5.4.2-160000.3.1.s390x as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-remote-0:5.4.2-160000.3.1.s390x as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-remote-0:5.4.2-160000.3.1.x86_64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-remote-0:5.4.2-160000.3.1.x86_64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-remote-0:5.4.2-160000.3.1.x86_64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodman-remote-0:5.4.2-160000.3.1.x86_64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodmansh-0:5.4.2-160000.3.1.aarch64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodmansh-0:5.4.2-160000.3.1.aarch64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodmansh-0:5.4.2-160000.3.1.aarch64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodmansh-0:5.4.2-160000.3.1.aarch64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodmansh-0:5.4.2-160000.3.1.ppc64le as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodmansh-0:5.4.2-160000.3.1.ppc64le as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodmansh-0:5.4.2-160000.3.1.ppc64le as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodmansh-0:5.4.2-160000.3.1.ppc64le as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodmansh-0:5.4.2-160000.3.1.s390x as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodmansh-0:5.4.2-160000.3.1.s390x as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodmansh-0:5.4.2-160000.3.1.s390x as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodmansh-0:5.4.2-160000.3.1.s390x as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodmansh-0:5.4.2-160000.3.1.x86_64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodmansh-0:5.4.2-160000.3.1.x86_64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodmansh-0:5.4.2-160000.3.1.x86_64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpodmansh-0:5.4.2-160000.3.1.x86_64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan