https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:26:17.213172+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:10549 ALSA-2025:10549 — Important: podman security update 2026-10-03T14:26:17.669029+00:00

Affected: AlmaLinux:10: podman-docker

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

* podman: podman missing TLS verification (CVE-2025-6032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-09074 bdu:2025-09074 2026-10-03T14:26:17.669109+00:00 bdu:2025-09074 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0789 certfr-2025-avi-0789 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T14:26:17.669128+00:00 certfr-2025-avi-0789 https://cve.radiocsirt.org/vuln/euvd-2026-361950 EUVD-2026-361950 2026-10-03T14:26:17.669145+00:00 EUVD-2026-361950 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6032 fkie_cve-2025-6032 2026-10-03T14:26:17.669157+00:00

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.

 https://cve.radiocsirt.org/vuln/ghsa-65gg-3w2w-hr4h GHSA-65gg-3w2w-hr4h — Podman Improper Certificate Validation; machine missing TLS verification 2026-10-03T14:26:17.669180+00:00

Affected: Go: github.com/containers/podman/v4, Go: github.com/containers/podman/v5

### Impact The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry (which it does by default since 5.0.0) allowing a possible Man In The Middle attack.

### Patches https://github.com/containers/podman/commit/726b506acc8a00d99f1a3a1357ecf619a1f798c3 Fixed in v5.5.2

### Workarounds Download the disk image manually via some other tool that verifies the TLS connection. Then pass the local image as file path (podman machine init --image ./somepath)

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-6032 msrc_CVE-2025-6032 — Podman: podman missing tls verification 2026-10-03T14:26:17.669208+00:00 msrc_CVE-2025-6032 https://cve.radiocsirt.org/vuln/oesa-2026-3402 OESA-2026-3402 — podman security update 2026-10-03T14:26:17.669226+00:00

Affected: openEuler:24.03-LTS-SP1: podman

Podman manages the entire container ecosystem which includes pods, containers, container images, and container volumes using the libpod library. Security Fix(es):

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.(CVE-2025-6032)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15262-1 openSUSE-SU-2025:15262-1 — podman-5.5.2-1.1 on GA media 2026-10-03T14:26:17.669247+00:00

podman-5.5.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:10295 RHSA-2025:10295 — Red Hat Security Advisory: OpenShift Container Platform 4.17.35 packages and security update 2026-10-03T14:26:17.669264+00:00

podman: podman missing TLS verification net/http: Request smuggling due to acceptance of invalid chunked data in net/http

 https://cve.radiocsirt.org/vuln/suse-su-2025:02806-1 SUSE-SU-2025:02806-1 — Security update for podman 2026-10-03T14:26:17.669283+00:00

Security update for podman

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-6032 UBUNTU-CVE-2025-6032 2026-10-03T14:26:17.669297+00:00

Affected: Ubuntu:25.10: podman, Ubuntu:26.04:LTS: podman

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1389 WID-SEC-W-2025-1389 — Podman: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T14:26:17.669317+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Podman ausnutzen, um Sicherheitsvorkehrungen zu umgehen.