Critical Security Update for Podman: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:3337: Important: podman security update. Affects podman versions < 6:5.6.0-14.el9_7. Fixed in 6:5.6.0-14.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Podman is a powerful tool for managing pods, container images, and containers, integral to the libpod library used in Kubernetes environments. It allows users to create, manage, and run containers efficiently without requiring a daemon. This flexibility makes Podman a popular choice for developers and system administrators. However, recent vulnerabilities have been identified that could lead to denial of service and resource exhaustion, necessitating immediate attention.
Vulnerability Detail
The vulnerabilities identified in Podman stem from issues in the underlying Go libraries. These include a denial of service due to excessive resource consumption from crafted certificates (CVE-2025-61729), excessive CPU usage when building archive indexes (CVE-2025-61728), memory exhaustion during query parameter parsing (CVE-2025-61726), and unexpected session resumption in TLS (CVE-2025-68121). These vulnerabilities could allow attackers to exploit the system, leading to service interruptions and potential data breaches.
How To Fix
Minimum fixed version
6:5.6.0-14.el9_7
This is the first release that contains the fix.
sudo dnf update podmanTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit resource allocation for the affected services or implement network policies to restrict access to the vulnerable components until the update is applied.
Conclusion
The recent vulnerabilities in Podman highlight the importance of maintaining up-to-date software to protect against potential exploits. By promptly updating to the patched version, users can safeguard their systems from these identified risks.
See every vulnerability recorded for podman →
FAQ
Podman is a container management tool that allows users to create and manage containers and pods without requiring a central daemon.
The vulnerabilities include denial of service, excessive CPU consumption, memory exhaustion, and unexpected TLS session resumption.
You can use Vulert, which monitors open-source vulnerabilities in your software using a manifest file. Visit Vulert Scanner to check your application without needing to sign up.
Consider implementing resource limits or network restrictions as a temporary workaround until you can apply the necessary updates.
Detailed information about the vulnerabilities can be found on the respective CVE pages: CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, and CVE-2025-68121.
Related vulnerabilities
Recent vulnerabilities recorded for podman.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
