Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-68054.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-68054
Upstream
Published
2025-09-16T15:15:45Z
Modified
2026-04-01T05:21:20.114294Z
Summary
CVE-2025-4953 affecting package podman for versions less than 5.6.1-2
Details

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible.

References

Affected packages

Azure Linux:3 / podman

Package

Name
podman
Purl
pkg:rpm/azure-linux/podman

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.6.1-2

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-68054.json"