Red Hat Security Advisory: OpenShift Container Platform 4.16.49 packages and security update

Fixed packages 35

Vulnerabilities 2

• High 8.1
  CVE-2025-9566

  Podman: podman kube play command may overwrite host files

  There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux Alpine Go
  Sep 5, 2025
• High 7.4
  CVE-2025-4953

  Podman: build context bind mount

  A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on th…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux Go
  Sep 16, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2367235
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16724.json
• report
  https://access.redhat.com/security/cve/CVE-2025-4953
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-4953
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-4953
• article
  https://github.com/containers/podman/pull/25173
• report
  https://access.redhat.com/security/cve/CVE-2025-9566
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2393152
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-9566
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-9566
• article
  https://github.com/containers/podman/commit/43fbde4e665fe6cee6921868f04b7ccd3de5ad89
• article
  https://github.com/containers/podman/security/advisories/GHSA-wp3j-xq48-xpjw