ELSA-2025-21220

ELSA-2025-21220 - podman security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-12-02

Description

[5.6.0-6.0.1]
- Add devices on container startup, not on creation
- overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]

[7:5.6.0-6]
- update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
(https://github.com/containers/podman/commit/2791007)
- fixes '[Minor Incident] CVE-2025-52881 podman: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [rhel-10.1.z]'
- Resolves: RHEL-126635

[7:5.6.0-5]
- update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
(https://github.com/containers/podman/commit/61231e1)
- fixes 'Timeouts while pushing Sigstore logs to Rekor - [RHEL 10.1] 0day'
- Resolves: RHEL-111077

Related CVEs

CVE-2025-52881

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	podman-5.6.0-6.0.1.el10_1.src.rpm	8c8fa1eaf7018bb4912db20fd7f21382fdad19b6d5d5f3fba0264ebadae6af9e	-	ol10_aarch64_appstream
	podman-5.6.0-6.0.1.el10_1.src.rpm	8c8fa1eaf7018bb4912db20fd7f21382fdad19b6d5d5f3fba0264ebadae6af9e	-	ol10_aarch64_codeready_builder
	podman-5.6.0-6.0.1.el10_1.aarch64.rpm	2f3f2eedc38010ed3675d1e3eeacde16ebb533cfccc8db643542af6a5ea98825	-	ol10_aarch64_appstream
	podman-docker-5.6.0-6.0.1.el10_1.noarch.rpm	791800d2d44edf16b78d9159cd9ae28bbfb20de99577307499df6216fb891eb5	-	ol10_aarch64_appstream
	podman-remote-5.6.0-6.0.1.el10_1.aarch64.rpm	3a558eb7293c45e9e77cf16f5f839cbbf67693edf02bec1b60778042732a4a64	-	ol10_aarch64_appstream
	podman-tests-5.6.0-6.0.1.el10_1.aarch64.rpm	72ff6552de04ac73e9d07b672cfb3faa0dfcc0608f5c7e3d37fca7e4fe8c121e	-	ol10_aarch64_codeready_builder
Oracle Linux 10 (x86_64)	podman-5.6.0-6.0.1.el10_1.src.rpm	8c8fa1eaf7018bb4912db20fd7f21382fdad19b6d5d5f3fba0264ebadae6af9e	-	ol10_x86_64_appstream
	podman-5.6.0-6.0.1.el10_1.src.rpm	8c8fa1eaf7018bb4912db20fd7f21382fdad19b6d5d5f3fba0264ebadae6af9e	-	ol10_x86_64_codeready_builder
	podman-5.6.0-6.0.1.el10_1.x86_64.rpm	6d3144e8e3a2163f33df5cdfa6bb2765418701378fe296a2408a6b10a721b353	-	ol10_x86_64_appstream
	podman-docker-5.6.0-6.0.1.el10_1.noarch.rpm	791800d2d44edf16b78d9159cd9ae28bbfb20de99577307499df6216fb891eb5	-	ol10_x86_64_appstream
	podman-remote-5.6.0-6.0.1.el10_1.x86_64.rpm	82cecd706eed8720db84e5e59e8308962c79223a71fc95f996067b29dbad823e	-	ol10_x86_64_appstream
	podman-tests-5.6.0-6.0.1.el10_1.x86_64.rpm	273f446df1066f5dc3d662feb85339d7754a6239cff73a605bf08975bbb9ee7a	-	ol10_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team