The podman tool, used for managing container pods and images, is affected by two denial of service vulnerabilities. CVE-2025-27144 involves a parsing issue in the Go JOSE library, and CVE-2025-22869 involves a denial of service in the key exchange of golang.org/x/crypto/ssh. Red Hat has released an update for podman in Red Hat Enterprise Linux 10 to address these vulnerabilities. The advisory references Red Hat Product Security's errata RHSA-2025:7462 for detailed information and remediation instructions.

Successful exploitation of these vulnerabilities could allow an attacker to cause a denial of service condition in applications using podman, potentially disrupting container management operations. No evidence of active exploitation in the wild is reported. The impact is limited to service availability degradation rather than code execution or data compromise.

Red Hat has released an official security update for podman in Red Hat Enterprise Linux 10 that addresses these vulnerabilities. Users should apply the update as described in Red Hat advisory RHSA-2025:7462 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor advisory.