The Red Hat security advisory RHSA-2025:20983 reports two vulnerabilities affecting podman, a container management tool part of the libpod library. CVE-2025-47907 is a race condition in the database/sql Postgres scan implementation. CVE-2025-9566 involves the podman kube play command potentially overwriting files on the host system, which could lead to unauthorized file modification. The advisory covers Red Hat Enterprise Linux 10 and associated CodeReady Linux Builder variants across multiple architectures. The update fixes these issues and is classified as Important severity by Red Hat. No CVSS score is provided in the advisory, and no known exploits in the wild are reported.

The podman kube play command vulnerability (CVE-2025-9566) may allow overwriting of host files, potentially leading to unauthorized modification of critical system files. The race condition in Postgres scanning (CVE-2025-47907) could cause unexpected behavior or data corruption in applications using database/sql with Postgres. Both issues affect container management and could impact system stability or security if exploited.

Red Hat has released an update for podman in Red Hat Enterprise Linux 10 that addresses these vulnerabilities. Users should apply the official patch as detailed in Red Hat advisory RHSA-2025:20983 and the referenced update article (https://access.redhat.com/articles/11258). No additional mitigation steps are indicated beyond applying the update.