Bug 2367235 (CVE-2025-4953)
| Summary: | CVE-2025-4953 podman: Build Context Bind Mount | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | jhonce, mheon, nalin, security-response-team, trathi, tsweeney |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | Flags: | tsweeney:
needinfo?
(nalin) |
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2395827 | ||
| Bug Blocks: | |||
| Deadline: | 2025-09-16 | ||
|
Description
OSIDB Bzimport
2025-05-19 11:56:31 UTC
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2025:16724 https://access.redhat.com/errata/RHSA-2025:16724 This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.18 Via RHSA-2025:16729 https://access.redhat.com/errata/RHSA-2025:16729 This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.12 Via RHSA-2025:17669 https://access.redhat.com/errata/RHSA-2025:17669 This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.17 Via RHSA-2025:22265 https://access.redhat.com/errata/RHSA-2025:22265 This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.13 Via RHSA-2025:22275 https://access.redhat.com/errata/RHSA-2025:22275 This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2025:22724 https://access.redhat.com/errata/RHSA-2025:22724 This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.18 Via RHSA-2025:22695 https://access.redhat.com/errata/RHSA-2025:22695 This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.14 Via RHSA-2025:22732 https://access.redhat.com/errata/RHSA-2025:22732 This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.15 Via RHSA-2025:23113 https://access.redhat.com/errata/RHSA-2025:23113 |