Red Hat Product Security issued an important security advisory (RHSA-2025:22030) for podman in Red Hat Enterprise Linux 9.6 Extended Update Support. The advisory addresses multiple vulnerabilities including CVE-2025-52881, which involves container escape and denial of service due to arbitrary write gadgets and procfs write redirects in runc, and CVE-2025-58183, an unbounded allocation vulnerability in golang's archive/tar when parsing GNU sparse maps. These vulnerabilities affect the podman tool, which manages container pods and images. The advisory provides updated podman packages to remediate these issues.

The vulnerabilities could allow an attacker to escape container isolation and cause denial of service conditions, potentially compromising containerized environments managed by podman. The unbounded allocation vulnerability could lead to resource exhaustion. These issues affect Red Hat Enterprise Linux 9.6 Extended Update Support versions using podman prior to the fixed update.

Red Hat has released updated podman packages (version 5.4.0-15.el9_6) that address these vulnerabilities. Users should apply the provided security update as detailed in the Red Hat advisory RHSA-2025:22030. No additional mitigation steps are indicated beyond applying the official patch.