Red Hat Security Advisory: podman security update
Red Hat has issued a security advisory for the podman tool, which manages container pods and images. The advisory addresses two denial of service vulnerabilities: one in the Go JOSE library's parsing (CVE-2025-27144) and another in the key exchange mechanism of golang. org/x/crypto/ssh (CVE-2025-22869). These vulnerabilities could potentially allow denial of service conditions in affected systems running Red Hat Enterprise Linux 9 and related versions. The update is rated as Important by Red Hat Product Security. A fix is available through updated packages provided by Red Hat.
AI Analysis
Technical Summary
The podman tool, part of the libpod library used for managing container pods, has been updated to fix two denial of service vulnerabilities. CVE-2025-27144 affects the Go JOSE library's parsing functionality, while CVE-2025-22869 involves a denial of service in the key exchange process of golang.org/x/crypto/ssh. These issues impact Red Hat Enterprise Linux 9 and related distributions. Red Hat has released updated podman packages to remediate these vulnerabilities as detailed in advisory RHSA-2025:7391.
Potential Impact
The vulnerabilities could allow an attacker to cause denial of service conditions in systems using podman by exploiting flaws in cryptographic libraries and parsing routines. This may disrupt container management operations but does not indicate code execution or privilege escalation. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated podman packages that address these vulnerabilities. Users should apply the official security update as described in Red Hat advisory RHSA-2025:7391 and the referenced article https://access.redhat.com/articles/11258. Applying these updates will mitigate the denial of service issues. No additional mitigation steps are indicated by the vendor.
Red Hat Security Advisory: podman security update
Description
Red Hat has issued a security advisory for the podman tool, which manages container pods and images. The advisory addresses two denial of service vulnerabilities: one in the Go JOSE library's parsing (CVE-2025-27144) and another in the key exchange mechanism of golang. org/x/crypto/ssh (CVE-2025-22869). These vulnerabilities could potentially allow denial of service conditions in affected systems running Red Hat Enterprise Linux 9 and related versions. The update is rated as Important by Red Hat Product Security. A fix is available through updated packages provided by Red Hat.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The podman tool, part of the libpod library used for managing container pods, has been updated to fix two denial of service vulnerabilities. CVE-2025-27144 affects the Go JOSE library's parsing functionality, while CVE-2025-22869 involves a denial of service in the key exchange process of golang.org/x/crypto/ssh. These issues impact Red Hat Enterprise Linux 9 and related distributions. Red Hat has released updated podman packages to remediate these vulnerabilities as detailed in advisory RHSA-2025:7391.
Potential Impact
The vulnerabilities could allow an attacker to cause denial of service conditions in systems using podman by exploiting flaws in cryptographic libraries and parsing routines. This may disrupt container management operations but does not indicate code execution or privilege escalation. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated podman packages that address these vulnerabilities. Users should apply the official security update as described in Red Hat advisory RHSA-2025:7391 and the referenced article https://access.redhat.com/articles/11258. Applying these updates will mitigate the denial of service issues. No additional mitigation steps are indicated by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:7391
- Cve Count
- 2
- Additional Cves
- ["CVE-2025-27144"]
- Cvss Version
- null
Threat ID: 6a160971e29bf47b50639dc2
Added to database: 5/26/2026, 8:58:25 PM
Last enriched: 5/27/2026, 12:36:32 AM
Last updated: 5/27/2026, 4:58:17 AM
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.