The podman tool, part of the libpod library used for managing container pods, has two security issues fixed in the Red Hat Enterprise Linux 9 update. CVE-2025-47907 is a race condition in the Postgres Scan operation within database/sql, and CVE-2025-9566 is a vulnerability where the podman kube play command may overwrite files on the host system. These vulnerabilities are addressed in the podman 5.6.0-6.el9_7 update provided by Red Hat. The advisory references Red Hat Security Advisory RHSA-2025:20909 and includes fixes for multiple architectures including x86_64, s390x, ppc64le, and aarch64. No known exploits in the wild have been reported at this time.

The CVE-2025-9566 vulnerability could allow the podman kube play command to overwrite files on the host, potentially leading to unauthorized modification of host files. The CVE-2025-47907 race condition in Postgres scanning could cause unpredictable behavior or data integrity issues in applications using database/sql with Postgres. Both issues affect container management and could impact system stability or security if exploited.

A security update for podman is available from Red Hat for Red Hat Enterprise Linux 9, specifically podman version 5.6.0-6.el9_7 and related packages. Users should apply this update promptly to remediate the vulnerabilities. Detailed update instructions are available at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor advisory.