Red Hat Security Advisory: OpenShift Container Platform 4.18.25 packages and security update

Fixed packages 13

Vulnerabilities 1

• High 7.4
  CVE-2025-4953

  Podman: build context bind mount

  A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on th…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux Go
  Sep 16, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2367235
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16729.json
• report
  https://access.redhat.com/security/cve/CVE-2025-4953
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-4953
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-4953
• article
  https://github.com/containers/podman/pull/25173