Critical Security Update for Podman: Addressing SSH Client Panic Vulnerability
Summary
ALSA-2026:0545: Important: podman security update. Affects podman versions < 7:5.6.0-11.el10_1. Fixed in 7:5.6.0-11.el10_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Podman is a powerful tool for managing pods, container images, and containers, integral to the libpod library used in Kubernetes environments. It allows users to create, run, and manage containers without requiring a daemon, providing a lightweight alternative to Docker. The recent vulnerability affects the SSH client functionality within Podman, potentially leading to unexpected behavior and security risks.
Vulnerability Detail
The vulnerability identified as CVE-2025-47913 arises from a panic in the SSH client due to an unexpected SSH_AGENT_SUCCESS response. This issue can lead to application crashes, compromising the stability and security of systems using Podman for container management. The root cause stems from improper handling of SSH agent responses, which can be exploited in certain scenarios, making it critical for users to address this vulnerability promptly.
How To Fix
Minimum fixed version
7:5.6.0-11.el10_1
This is the first release that contains the fix.
sudo dnf update podmanTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the security update as soon as possible to mitigate risks.
Conclusion
The vulnerability CVE-2025-47913 in Podman poses significant risks due to potential application crashes and security issues. Users are strongly advised to update to the patched version 7:5.6.0-11.el10_1 to ensure their systems remain secure and stable.
See every vulnerability recorded for podman →
FAQ
CVE-2025-47913 is a vulnerability in the Podman tool that causes an SSH client panic due to unexpected SSH_AGENT_SUCCESS responses.
This vulnerability can lead to application crashes and may compromise the stability and security of systems using Podman.
You should update your Podman installation to the fixed version 7:5.6.0-11.el10_1 to mitigate the vulnerability.
Currently, there are no specific workarounds. The best course of action is to apply the security update.
You can use Vulert, which monitors and alerts in real-time for open-source vulnerabilities using a manifest file like package-lock.json. You can check if your application is affected by this vulnerability using the Vulert playground.
Related vulnerabilities
Recent vulnerabilities recorded for podman.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
