ELSA-2025-20909

ELSA-2025-20909 - podman security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-11-25

Description

[5.6.0-6.0.1]
- Add devices on container startup, not on creation
- overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]

[6:5.6.0-6]
- update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
(https://github.com/containers/podman/commit/61231e1)
- fixes 'Timeouts while pushing Sigstore logs to Rekor - [RHEL 9.7] 0day'
- Resolves: RHEL-111076

[6:5.6.0-5]
- rebuild as last build was built in the wrong tag
- Related: RHEL-110317

[6:5.6.0-4]
- update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
(https://github.com/containers/podman/commit/c5a3735)
- fixes 'Can not find network create and rm message from podman event when set --events-backend to journald - [RHEL 9.7] 0day'
- Resolves: RHEL-110317

[6:5.6.0-3]
- update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
(https://github.com/containers/podman/commit/7078b79)
- fixes 'CVE-2025-9566 podman: Podman kube play command may overwrite host files [rhel-9.7]'
- Resolves: RHEL-113151

Related CVEs

CVE-2025-47907

CVE-2025-9566

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	podman-5.6.0-6.0.1.el9_7.src.rpm	c348a2cc8be54ec1daabef4cc78997c7c538ec9686a57d66238994a7e3cee225	-	ol9_aarch64_appstream
	podman-5.6.0-6.0.1.el9_7.aarch64.rpm	1f9af67b925e55b481ed98a5735cfe12839796727acb7047302520dab873307d	-	ol9_aarch64_appstream
	podman-docker-5.6.0-6.0.1.el9_7.noarch.rpm	a23baccf06177a2ec3078099b99354606de470c18b6e2759de3249b72ce24df9	-	ol9_aarch64_appstream
	podman-plugins-5.6.0-6.0.1.el9_7.aarch64.rpm	d81fd8b03810354dbb1d2e5d80442d119fc4e210f8f053e5d5afbcb1b32b6195	-	ol9_aarch64_appstream
	podman-remote-5.6.0-6.0.1.el9_7.aarch64.rpm	945a2b8af92c7562f8420951fd20e31bb41b5193f0a3ca1fb8b85fc4611fb570	-	ol9_aarch64_appstream
	podman-tests-5.6.0-6.0.1.el9_7.aarch64.rpm	63c74f3221ae16a590178f52d432e5c56ee9a9f5d79ae22533a2195878e7e2a8	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	podman-5.6.0-6.0.1.el9_7.src.rpm	c348a2cc8be54ec1daabef4cc78997c7c538ec9686a57d66238994a7e3cee225	-	ol9_x86_64_appstream
	podman-5.6.0-6.0.1.el9_7.x86_64.rpm	6c15ce186a15870b7f670e885a6e30b96d1cf8cd30c7820769f36e13add5a498	-	ol9_x86_64_appstream
	podman-docker-5.6.0-6.0.1.el9_7.noarch.rpm	a23baccf06177a2ec3078099b99354606de470c18b6e2759de3249b72ce24df9	-	ol9_x86_64_appstream
	podman-plugins-5.6.0-6.0.1.el9_7.x86_64.rpm	193f0e05d0cd4595f38452ff401a9e6046643efe3416a654bd0b4b29e8ebef75	-	ol9_x86_64_appstream
	podman-remote-5.6.0-6.0.1.el9_7.x86_64.rpm	7c4e37ceacb3c4ead670eb29c0266be74130bf731587ac886df80597cf5fbb67	-	ol9_x86_64_appstream
	podman-tests-5.6.0-6.0.1.el9_7.x86_64.rpm	07f1d8ab9d3167c6407dcd237940c7f61ec19526ec9e7c125d539bcabba49c1d	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team