# CVE-2025-4953: Podman: build context bind mount CVE-2025-4953 is fixed in 36 products on 1 platform, first by RHSA-2025:15904, released September 16, 2025. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2025-4953 - Priority: High - CVSS: 8.1 (Moderate) - EPSS: 0.0064 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Sep 16, 2025 - Weakness: Creation of Temporary File With Insecure Permissions - Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-4953 ## Description The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: Podman kube play command may overwrite host files (CVE-2025-9566) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | aardvark-dns RHEL 8 | 2:1.10.1-2.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | aardvark-dns rocky 8 | 2:1.10.1-2.module+el8.10.0+1874+ce489889 | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | | Linux | buildah RHEL 8 | 2:1.33.12-2.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | buildah rocky 8 | 2:1.33.12-2.module+el8.10.0+2001+6a33db9f | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | | Linux | buildah-tests RHEL 8 | 2:1.33.12-2.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | cockpit-podman RHEL 8 | 0:84.1-1.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | cockpit-podman rocky 8 | 0:84.1-1.module+el8.10.0+2001+6a33db9f | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | | Linux | conmon RHEL 8 | 3:2.1.10-1.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | conmon rocky 8 | 3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9 | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | | Linux | container-selinux RHEL 8 | 2:2.229.0-2.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | container-selinux rocky 8 | 2:2.229.0-2.module+el8.10.0+1896+b18fa106 | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | | Linux | containernetworking-plugins RHEL 8 | 1:1.4.0-6.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | containernetworking-plugins rocky 8 | 1:1.4.0-6.module+el8.10.0+2001+6a33db9f | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | | Linux | containers-common RHEL 8 | 2:1-82.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | containers-common rocky 8 | 2:1-82.module+el8.10.0+1948+4b5cd4a9 | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | | Linux | crit RHEL 8 | 0:3.18-5.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | criu RHEL 8 | 0:3.18-5.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | criu rocky 8 | 0:3.18-5.module+el8.10.0+1872+2e18eb19 | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | | Linux | criu-devel RHEL 8 | 0:3.18-5.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | criu-libs RHEL 8 | 0:3.18-5.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | crun RHEL 8 | 0:1.14.3-2.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | crun rocky 8 | 0:1.14.3-2.module+el8.10.0+1825+623b0c20 | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | | Linux | fuse-overlayfs RHEL 8 | 0:1.13-1.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | fuse-overlayfs rocky 8 | 0:1.13-1.module+el8.10.0+1880+8e896d1b | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | | Linux | govulncheck-vulndb opensuse-leap 15.6 | 0.0.20250918T182144-150000.1.107.1 | [SUSE-SU-2025:03289-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03289-1.md) | Sep 22, 2025 | | Linux | govulncheck-vulndb opensuse-leap 16.0 | 0.0.20260723T184607-160000.1.1 | [OPENSUSE-SU-2026:21483-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21483-1.md) | Jul 30, 2026 | | Linux | govulncheck-vulndb sles 15.6 | 0.0.20250918T182144-150000.1.107.1 | [SUSE-SU-2025:03289-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03289-1.md) | Sep 22, 2025 | | Linux | libslirp RHEL 8 | 0:4.4.0-2.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | libslirp rocky 8 | 0:4.4.0-2.module+el8.10.0+1843+6892ab28 | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | | Linux | libslirp-devel RHEL 8 | 0:4.4.0-2.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | netavark RHEL 8 | 2:1.10.3-1.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | netavark rocky 8 | 2:1.10.3-1.module+el8.10.0+2001+6a33db9f | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | | Linux | oci-seccomp-bpf-hook RHEL 8 | 0:1.2.10-1.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | oci-seccomp-bpf-hook rocky 8 | 0:1.2.10-1.module+el8.10.0+1896+b18fa106 | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | | Linux | podman Debian 13.5 (trixie) | 5.3.2+ds1-1 | [DEBIAN-CVE-2025-4953](https://patchblox.com/security/data/fix/linux/debian-cve-2025-4953.md) | Sep 16, 2025 | | Linux | podman Debian 14 | 5.3.2+ds1-1 | [DEBIAN-CVE-2025-4953](https://patchblox.com/security/data/fix/linux/debian-cve-2025-4953.md) | Sep 16, 2025 | | Linux | podman RHEL 8 | 4:4.9.4-23.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | podman rocky 8 | 4:4.9.4-23.module+el8.10.0+2064+309a12a4 | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | | Linux | podman-catatonit RHEL 8 | 4:4.9.4-23.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | podman-docker RHEL 8 | 4:4.9.4-23.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | podman-gvproxy RHEL 8 | 4:4.9.4-23.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | podman-plugins RHEL 8 | 4:4.9.4-23.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | podman-remote RHEL 8 | 4:4.9.4-23.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | podman-tests RHEL 8 | 4:4.9.4-23.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | python-podman rocky 8 | 0:4.9.0-3.module+el8.10.0+2001+6a33db9f | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | | Linux | python3-criu RHEL 8 | 0:3.18-5.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | python3-podman RHEL 8 | 0:4.9.0-3.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | runc RHEL 8 | 1:1.1.12-6.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | runc rocky 8 | 1:1.1.12-6.module+el8.10.0+1933+1fc610b1 | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | | Linux | skopeo RHEL 8 | 2:1.14.5-4.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | skopeo rocky 8 | 2:1.14.5-4.module+el8.10.0+2001+6a33db9f | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | | Linux | skopeo-tests RHEL 8 | 2:1.14.5-4.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | slirp4netns RHEL 8 | 0:1.2.3-1.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | slirp4netns rocky 8 | 0:1.2.3-1.module+el8.10.0+1874+ce489889 | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | | Linux | toolbox RHEL 8 | 0:0.0.99.5-2.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | toolbox rocky 8 | 0:0.0.99.5-2.module+el8.10.0+1872+2e18eb19.rocky.0.2 | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | | Linux | toolbox-tests RHEL 8 | 0:0.0.99.5-2.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | udica RHEL 8 | 0:0.2.6-21.module+el8.10.0+23498+f7d19d48 | [RHSA-2025:15904](https://patchblox.com/security/data/fix/linux/rhsa-2025-15904.md) | Sep 16, 2025 | | Linux | udica rocky 8 | 0:0.2.6-21.module+el8.10.0+1815+5fe7415e | [RLSA-2025:15904](https://patchblox.com/security/data/fix/linux/rlsa-2025-15904.md) | Nov 29, 2025 | --- Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.