RHSA-2025:16515: Important: container-tools:rhel8 security update
Published Sep 23, 2025
·Updated
Important: container-tools:rhel8 security update
Other sources
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.Security Fix(es): podman: Podman kube play command may overwrite host files (CVE-2025-9566) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
147 affected componentsFixes available
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension
Red Hat Red Hat Enterprise Linux Server - TUS
redhat/aardvark-dns<1.5.0-2.module+el8.8.0+22334+bb93e398
1.5.0-2.module+el8.8.0+22334+bb93e398
redhat/buildah<1.29.5-1.module+el8.8.0+23219+eb2ac228.1
1.29.5-1.module+el8.8.0+23219+eb2ac228.1
redhat/cockpit-podman<63.1-1.module+el8.8.0+22334+bb93e398
63.1-1.module+el8.8.0+22334+bb93e398
redhat/conmon<2.1.6-1.module+el8.8.0+22334+bb93e398
2.1.6-1.module+el8.8.0+22334+bb93e398
redhat/container-selinux<2.229.0-1.module+el8.8.0+22334+bb93e398
2.229.0-1.module+el8.8.0+22334+bb93e398
redhat/containernetworking-plugins<1.2.0-3.module+el8.8.0+23219+eb2ac228
1.2.0-3.module+el8.8.0+23219+eb2ac228
redhat/containers-common<1-67.module+el8.8.0+22334+bb93e398
1-67.module+el8.8.0+22334+bb93e398
redhat/criu<3.15-4.module+el8.8.0+22334+bb93e398
3.15-4.module+el8.8.0+22334+bb93e398
redhat/crun<1.8.4-2.module+el8.8.0+22334+bb93e398
1.8.4-2.module+el8.8.0+22334+bb93e398
redhat/fuse-overlayfs<1.11-1.module+el8.8.0+22334+bb93e398
1.11-1.module+el8.8.0+22334+bb93e398
redhat/libslirp<4.4.0-1.module+el8.8.0+22334+bb93e398
4.4.0-1.module+el8.8.0+22334+bb93e398
redhat/netavark<1.5.1-3.module+el8.8.0+22334+bb93e398
1.5.1-3.module+el8.8.0+22334+bb93e398
redhat/oci-seccomp-bpf-hook<1.2.8-1.module+el8.8.0+22334+bb93e398
1.2.8-1.module+el8.8.0+22334+bb93e398
redhat/podman<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/python-podman<4.4.1-1.module+el8.8.0+22334+bb93e398
4.4.1-1.module+el8.8.0+22334+bb93e398
redhat/runc<1.1.12-1.module+el8.8.0+22334+bb93e398
1.1.12-1.module+el8.8.0+22334+bb93e398
redhat/skopeo<1.11.3-0.1.module+el8.8.0+23535+3509efd3
1.11.3-0.1.module+el8.8.0+23535+3509efd3
redhat/slirp4netns<1.2.0-3.module+el8.8.0+22334+bb93e398
1.2.0-3.module+el8.8.0+22334+bb93e398
redhat/toolbox<0.0.99.3-7.module+el8.8.0+22334+bb93e398
0.0.99.3-7.module+el8.8.0+22334+bb93e398
redhat/udica<0.2.6-20.module+el8.8.0+22334+bb93e398
0.2.6-20.module+el8.8.0+22334+bb93e398
redhat/cockpit-podman<63.1-1.module+el8.8.0+22334+bb93e398
63.1-1.module+el8.8.0+22334+bb93e398
redhat/container-selinux<2.229.0-1.module+el8.8.0+22334+bb93e398
2.229.0-1.module+el8.8.0+22334+bb93e398
redhat/podman-docker<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/python3-podman<4.4.1-1.module+el8.8.0+22334+bb93e398
4.4.1-1.module+el8.8.0+22334+bb93e398
redhat/udica<0.2.6-20.module+el8.8.0+22334+bb93e398
0.2.6-20.module+el8.8.0+22334+bb93e398
redhat/aardvark-dns<1.5.0-2.module+el8.8.0+22334+bb93e398
1.5.0-2.module+el8.8.0+22334+bb93e398
redhat/buildah<1.29.5-1.module+el8.8.0+23219+eb2ac228.1
1.29.5-1.module+el8.8.0+23219+eb2ac228.1
redhat/buildah-debuginfo<1.29.5-1.module+el8.8.0+23219+eb2ac228.1
1.29.5-1.module+el8.8.0+23219+eb2ac228.1
redhat/buildah-debugsource<1.29.5-1.module+el8.8.0+23219+eb2ac228.1
1.29.5-1.module+el8.8.0+23219+eb2ac228.1
redhat/buildah-tests<1.29.5-1.module+el8.8.0+23219+eb2ac228.1
1.29.5-1.module+el8.8.0+23219+eb2ac228.1
redhat/buildah-tests-debuginfo<1.29.5-1.module+el8.8.0+23219+eb2ac228.1
1.29.5-1.module+el8.8.0+23219+eb2ac228.1
redhat/conmon<2.1.6-1.module+el8.8.0+22334+bb93e398
2.1.6-1.module+el8.8.0+22334+bb93e398
redhat/conmon-debuginfo<2.1.6-1.module+el8.8.0+22334+bb93e398
2.1.6-1.module+el8.8.0+22334+bb93e398
redhat/conmon-debugsource<2.1.6-1.module+el8.8.0+22334+bb93e398
2.1.6-1.module+el8.8.0+22334+bb93e398
redhat/containernetworking-plugins<1.2.0-3.module+el8.8.0+23219+eb2ac228
1.2.0-3.module+el8.8.0+23219+eb2ac228
redhat/containernetworking-plugins-debuginfo<1.2.0-3.module+el8.8.0+23219+eb2ac228
1.2.0-3.module+el8.8.0+23219+eb2ac228
redhat/containernetworking-plugins-debugsource<1.2.0-3.module+el8.8.0+23219+eb2ac228
1.2.0-3.module+el8.8.0+23219+eb2ac228
redhat/containers-common<1-67.module+el8.8.0+22334+bb93e398
1-67.module+el8.8.0+22334+bb93e398
redhat/crit<3.15-4.module+el8.8.0+22334+bb93e398
3.15-4.module+el8.8.0+22334+bb93e398
redhat/criu<3.15-4.module+el8.8.0+22334+bb93e398
3.15-4.module+el8.8.0+22334+bb93e398
redhat/criu-debuginfo<3.15-4.module+el8.8.0+22334+bb93e398
3.15-4.module+el8.8.0+22334+bb93e398
redhat/criu-debugsource<3.15-4.module+el8.8.0+22334+bb93e398
3.15-4.module+el8.8.0+22334+bb93e398
redhat/criu-devel<3.15-4.module+el8.8.0+22334+bb93e398
3.15-4.module+el8.8.0+22334+bb93e398
redhat/criu-libs<3.15-4.module+el8.8.0+22334+bb93e398
3.15-4.module+el8.8.0+22334+bb93e398
redhat/criu-libs-debuginfo<3.15-4.module+el8.8.0+22334+bb93e398
3.15-4.module+el8.8.0+22334+bb93e398
redhat/crun<1.8.4-2.module+el8.8.0+22334+bb93e398
1.8.4-2.module+el8.8.0+22334+bb93e398
redhat/crun-debuginfo<1.8.4-2.module+el8.8.0+22334+bb93e398
1.8.4-2.module+el8.8.0+22334+bb93e398
redhat/crun-debugsource<1.8.4-2.module+el8.8.0+22334+bb93e398
1.8.4-2.module+el8.8.0+22334+bb93e398
redhat/fuse-overlayfs<1.11-1.module+el8.8.0+22334+bb93e398
1.11-1.module+el8.8.0+22334+bb93e398
redhat/fuse-overlayfs-debuginfo<1.11-1.module+el8.8.0+22334+bb93e398
1.11-1.module+el8.8.0+22334+bb93e398
redhat/fuse-overlayfs-debugsource<1.11-1.module+el8.8.0+22334+bb93e398
1.11-1.module+el8.8.0+22334+bb93e398
redhat/libslirp<4.4.0-1.module+el8.8.0+22334+bb93e398
4.4.0-1.module+el8.8.0+22334+bb93e398
redhat/libslirp-debuginfo<4.4.0-1.module+el8.8.0+22334+bb93e398
4.4.0-1.module+el8.8.0+22334+bb93e398
redhat/libslirp-debugsource<4.4.0-1.module+el8.8.0+22334+bb93e398
4.4.0-1.module+el8.8.0+22334+bb93e398
redhat/libslirp-devel<4.4.0-1.module+el8.8.0+22334+bb93e398
4.4.0-1.module+el8.8.0+22334+bb93e398
redhat/netavark<1.5.1-3.module+el8.8.0+22334+bb93e398
1.5.1-3.module+el8.8.0+22334+bb93e398
redhat/oci-seccomp-bpf-hook<1.2.8-1.module+el8.8.0+22334+bb93e398
1.2.8-1.module+el8.8.0+22334+bb93e398
redhat/oci-seccomp-bpf-hook-debuginfo<1.2.8-1.module+el8.8.0+22334+bb93e398
1.2.8-1.module+el8.8.0+22334+bb93e398
redhat/oci-seccomp-bpf-hook-debugsource<1.2.8-1.module+el8.8.0+22334+bb93e398
1.2.8-1.module+el8.8.0+22334+bb93e398
redhat/podman<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-catatonit<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-catatonit-debuginfo<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-debuginfo<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-debugsource<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-gvproxy<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-gvproxy-debuginfo<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-plugins<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-plugins-debuginfo<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-remote<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-remote-debuginfo<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-tests<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/python3-criu<3.15-4.module+el8.8.0+22334+bb93e398
3.15-4.module+el8.8.0+22334+bb93e398
redhat/runc<1.1.12-1.module+el8.8.0+22334+bb93e398
1.1.12-1.module+el8.8.0+22334+bb93e398
redhat/runc-debuginfo<1.1.12-1.module+el8.8.0+22334+bb93e398
1.1.12-1.module+el8.8.0+22334+bb93e398
redhat/runc-debugsource<1.1.12-1.module+el8.8.0+22334+bb93e398
1.1.12-1.module+el8.8.0+22334+bb93e398
redhat/skopeo<1.11.3-0.1.module+el8.8.0+23535+3509efd3
1.11.3-0.1.module+el8.8.0+23535+3509efd3
redhat/skopeo-tests<1.11.3-0.1.module+el8.8.0+23535+3509efd3
1.11.3-0.1.module+el8.8.0+23535+3509efd3
redhat/slirp4netns<1.2.0-3.module+el8.8.0+22334+bb93e398
1.2.0-3.module+el8.8.0+22334+bb93e398
redhat/slirp4netns-debuginfo<1.2.0-3.module+el8.8.0+22334+bb93e398
1.2.0-3.module+el8.8.0+22334+bb93e398
redhat/slirp4netns-debugsource<1.2.0-3.module+el8.8.0+22334+bb93e398
1.2.0-3.module+el8.8.0+22334+bb93e398
redhat/toolbox<0.0.99.3-7.module+el8.8.0+22334+bb93e398
0.0.99.3-7.module+el8.8.0+22334+bb93e398
redhat/toolbox-debuginfo<0.0.99.3-7.module+el8.8.0+22334+bb93e398
0.0.99.3-7.module+el8.8.0+22334+bb93e398
redhat/toolbox-debugsource<0.0.99.3-7.module+el8.8.0+22334+bb93e398
0.0.99.3-7.module+el8.8.0+22334+bb93e398
redhat/toolbox-tests<0.0.99.3-7.module+el8.8.0+22334+bb93e398
0.0.99.3-7.module+el8.8.0+22334+bb93e398
redhat/aardvark-dns<1.5.0-2.module+el8.8.0+22334+bb93e398
1.5.0-2.module+el8.8.0+22334+bb93e398
redhat/buildah<1.29.5-1.module+el8.8.0+23219+eb2ac228.1
1.29.5-1.module+el8.8.0+23219+eb2ac228.1
redhat/buildah-debuginfo<1.29.5-1.module+el8.8.0+23219+eb2ac228.1
1.29.5-1.module+el8.8.0+23219+eb2ac228.1
redhat/buildah-debugsource<1.29.5-1.module+el8.8.0+23219+eb2ac228.1
1.29.5-1.module+el8.8.0+23219+eb2ac228.1
redhat/buildah-tests<1.29.5-1.module+el8.8.0+23219+eb2ac228.1
1.29.5-1.module+el8.8.0+23219+eb2ac228.1
redhat/buildah-tests-debuginfo<1.29.5-1.module+el8.8.0+23219+eb2ac228.1
1.29.5-1.module+el8.8.0+23219+eb2ac228.1
redhat/conmon<2.1.6-1.module+el8.8.0+22334+bb93e398
2.1.6-1.module+el8.8.0+22334+bb93e398
redhat/conmon-debuginfo<2.1.6-1.module+el8.8.0+22334+bb93e398
2.1.6-1.module+el8.8.0+22334+bb93e398
redhat/conmon-debugsource<2.1.6-1.module+el8.8.0+22334+bb93e398
2.1.6-1.module+el8.8.0+22334+bb93e398
redhat/containernetworking-plugins<1.2.0-3.module+el8.8.0+23219+eb2ac228
1.2.0-3.module+el8.8.0+23219+eb2ac228
redhat/containernetworking-plugins-debuginfo<1.2.0-3.module+el8.8.0+23219+eb2ac228
1.2.0-3.module+el8.8.0+23219+eb2ac228
redhat/containernetworking-plugins-debugsource<1.2.0-3.module+el8.8.0+23219+eb2ac228
1.2.0-3.module+el8.8.0+23219+eb2ac228
redhat/containers-common<1-67.module+el8.8.0+22334+bb93e398
1-67.module+el8.8.0+22334+bb93e398
redhat/crit<3.15-4.module+el8.8.0+22334+bb93e398
3.15-4.module+el8.8.0+22334+bb93e398
redhat/criu<3.15-4.module+el8.8.0+22334+bb93e398
3.15-4.module+el8.8.0+22334+bb93e398
redhat/criu-debuginfo<3.15-4.module+el8.8.0+22334+bb93e398
3.15-4.module+el8.8.0+22334+bb93e398
redhat/criu-debugsource<3.15-4.module+el8.8.0+22334+bb93e398
3.15-4.module+el8.8.0+22334+bb93e398
redhat/criu-devel<3.15-4.module+el8.8.0+22334+bb93e398
3.15-4.module+el8.8.0+22334+bb93e398
redhat/criu-libs<3.15-4.module+el8.8.0+22334+bb93e398
3.15-4.module+el8.8.0+22334+bb93e398
redhat/criu-libs-debuginfo<3.15-4.module+el8.8.0+22334+bb93e398
3.15-4.module+el8.8.0+22334+bb93e398
redhat/crun<1.8.4-2.module+el8.8.0+22334+bb93e398
1.8.4-2.module+el8.8.0+22334+bb93e398
redhat/crun-debuginfo<1.8.4-2.module+el8.8.0+22334+bb93e398
1.8.4-2.module+el8.8.0+22334+bb93e398
redhat/crun-debugsource<1.8.4-2.module+el8.8.0+22334+bb93e398
1.8.4-2.module+el8.8.0+22334+bb93e398
redhat/fuse-overlayfs<1.11-1.module+el8.8.0+22334+bb93e398
1.11-1.module+el8.8.0+22334+bb93e398
redhat/fuse-overlayfs-debuginfo<1.11-1.module+el8.8.0+22334+bb93e398
1.11-1.module+el8.8.0+22334+bb93e398
redhat/fuse-overlayfs-debugsource<1.11-1.module+el8.8.0+22334+bb93e398
1.11-1.module+el8.8.0+22334+bb93e398
redhat/libslirp<4.4.0-1.module+el8.8.0+22334+bb93e398
4.4.0-1.module+el8.8.0+22334+bb93e398
redhat/libslirp-debuginfo<4.4.0-1.module+el8.8.0+22334+bb93e398
4.4.0-1.module+el8.8.0+22334+bb93e398
redhat/libslirp-debugsource<4.4.0-1.module+el8.8.0+22334+bb93e398
4.4.0-1.module+el8.8.0+22334+bb93e398
redhat/libslirp-devel<4.4.0-1.module+el8.8.0+22334+bb93e398
4.4.0-1.module+el8.8.0+22334+bb93e398
redhat/netavark<1.5.1-3.module+el8.8.0+22334+bb93e398
1.5.1-3.module+el8.8.0+22334+bb93e398
redhat/oci-seccomp-bpf-hook<1.2.8-1.module+el8.8.0+22334+bb93e398
1.2.8-1.module+el8.8.0+22334+bb93e398
redhat/oci-seccomp-bpf-hook-debuginfo<1.2.8-1.module+el8.8.0+22334+bb93e398
1.2.8-1.module+el8.8.0+22334+bb93e398
redhat/oci-seccomp-bpf-hook-debugsource<1.2.8-1.module+el8.8.0+22334+bb93e398
1.2.8-1.module+el8.8.0+22334+bb93e398
redhat/podman<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-catatonit<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-catatonit-debuginfo<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-debuginfo<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-debugsource<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-gvproxy<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-gvproxy-debuginfo<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-plugins<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-plugins-debuginfo<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-remote<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-remote-debuginfo<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/podman-tests<4.4.1-27.module+el8.8.0+23535+3509efd3.3
4.4.1-27.module+el8.8.0+23535+3509efd3.3
redhat/python3-criu<3.15-4.module+el8.8.0+22334+bb93e398
3.15-4.module+el8.8.0+22334+bb93e398
redhat/runc<1.1.12-1.module+el8.8.0+22334+bb93e398
1.1.12-1.module+el8.8.0+22334+bb93e398
redhat/runc-debuginfo<1.1.12-1.module+el8.8.0+22334+bb93e398
1.1.12-1.module+el8.8.0+22334+bb93e398
redhat/runc-debugsource<1.1.12-1.module+el8.8.0+22334+bb93e398
1.1.12-1.module+el8.8.0+22334+bb93e398
redhat/skopeo<1.11.3-0.1.module+el8.8.0+23535+3509efd3
1.11.3-0.1.module+el8.8.0+23535+3509efd3
redhat/skopeo-tests<1.11.3-0.1.module+el8.8.0+23535+3509efd3
1.11.3-0.1.module+el8.8.0+23535+3509efd3
redhat/slirp4netns<1.2.0-3.module+el8.8.0+22334+bb93e398
1.2.0-3.module+el8.8.0+22334+bb93e398
redhat/slirp4netns-debuginfo<1.2.0-3.module+el8.8.0+22334+bb93e398
1.2.0-3.module+el8.8.0+22334+bb93e398
redhat/slirp4netns-debugsource<1.2.0-3.module+el8.8.0+22334+bb93e398
1.2.0-3.module+el8.8.0+22334+bb93e398
redhat/toolbox<0.0.99.3-7.module+el8.8.0+22334+bb93e398
0.0.99.3-7.module+el8.8.0+22334+bb93e398
redhat/toolbox-debuginfo<0.0.99.3-7.module+el8.8.0+22334+bb93e398
0.0.99.3-7.module+el8.8.0+22334+bb93e398
redhat/toolbox-debugsource<0.0.99.3-7.module+el8.8.0+22334+bb93e398
0.0.99.3-7.module+el8.8.0+22334+bb93e398
redhat/toolbox-tests<0.0.99.3-7.module+el8.8.0+22334+bb93e398
0.0.99.3-7.module+el8.8.0+22334+bb93e398
Remediation
Event History
Sep 23, 2025
Advisory Published
via Red Hat·06:10 PM
Data Sourced
via Red Hat·06:10 PM
DescriptionSeverityAffected Software
Oct 13, 2025
Advisory Published
via Red Hat·06:46 PM
Data Sourced
via Red Hat·06:46 PM
Remedy
Frequently Asked Questions
1
What is the severity of RHSA-2025:16515?
The severity of RHSA-2025:16515 is classified as Important.
2
How do I fix RHSA-2025:16515?
To fix RHSA-2025:16515, update the affected container-tools to the latest versions mentioned in the advisory.
3
What products are affected by RHSA-2025:16515?
RHSA-2025:16515 affects several Red Hat products, including Red Hat Enterprise Linux Server for Power LE and Red Hat Enterprise Linux for x86_64.
4
What is the CVE associated with RHSA-2025:16515?
The CVE associated with RHSA-2025:16515 is CVE-2025-9566.
5
Why is it important to address RHSA-2025:16515?
Addressing RHSA-2025:16515 is important to prevent potential scenarios where the podman kube play command may overwrite host files.