https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:11:15 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:10549 <p><strong>Affected:</strong> AlmaLinux:10: podman-docker</p> <p>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.</p> <p>Security Fix(es):</p> <p>* podman: podman missing TLS verification (CVE-2025-6032)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: podman-docker</p> <p>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.</p> <p>Security Fix(es):</p> <p>* podman: podman missing TLS verification (CVE-2025-6032)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:10549 https://cve.radiocsirt.org/vuln/bdu:2025-09074 bdu:2025-09074 https://cve.radiocsirt.org/vuln/bdu:2025-09074 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0789 certfr-2025-avi-0789 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0789 https://cve.radiocsirt.org/vuln/euvd-2026-361950 EUVD-2026-361950 https://cve.radiocsirt.org/vuln/euvd-2026-361950 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6032 <p>A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.</p> <p>A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-6032 https://cve.radiocsirt.org/vuln/ghsa-65gg-3w2w-hr4h <p><strong>Affected:</strong> Go: github.com/containers/podman/v4, Go: github.com/containers/podman/v5</p> <p>### Impact The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry (which it does by default since 5.0.0) allowing a possible Man In The Middle attack.</p> <p>### Patches https://github.com/containers/podman/commit/726b506acc8a00d99f1a3a1357ecf619a1f798c3 Fixed in v5.5.2</p> <p>### Workarounds Download the disk image manually via some other tool that verifies the TLS connection. Then pass the local image as file path (podman machine init --image ./somepath)</p> <p><strong>Affected:</strong> Go: github.com/containers/podman/v4, Go: github.com/containers/podman/v5</p> <p>### Impact The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry (which it does by default since 5.0.0) allowing a possible Man In The Middle attack.</p> <p>### Patches https://github.com/containers/podman/commit/726b506acc8a00d99f1a3a1357ecf619a1f798c3 Fixed in v5.5.2</p> <p>### Workarounds Download the disk image manually via some other tool that verifies the TLS connection. Then pass the local image as file path (podman machine init --image ./somepath)</p> https://cve.radiocsirt.org/vuln/ghsa-65gg-3w2w-hr4h https://cve.radiocsirt.org/vuln/msrc_cve-2025-6032 msrc_CVE-2025-6032 https://cve.radiocsirt.org/vuln/msrc_cve-2025-6032 https://cve.radiocsirt.org/vuln/oesa-2026-3402 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: podman</p> <p>Podman manages the entire container ecosystem which includes pods, containers, container images, and container volumes using the libpod library. Security Fix(es):</p> <p>A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.(CVE-2025-6032)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: podman</p> <p>Podman manages the entire container ecosystem which includes pods, containers, container images, and container volumes using the libpod library. Security Fix(es):</p> <p>A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.(CVE-2025-6032)</p> https://cve.radiocsirt.org/vuln/oesa-2026-3402 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15262-1 <p>podman-5.5.2-1.1 on GA media</p> <p>podman-5.5.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15262-1 https://cve.radiocsirt.org/vuln/rhsa-2025:10295 <p>podman: podman missing TLS verification net/http: Request smuggling due to acceptance of invalid chunked data in net/http</p> <p>podman: podman missing TLS verification net/http: Request smuggling due to acceptance of invalid chunked data in net/http</p> https://cve.radiocsirt.org/vuln/rhsa-2025:10295 https://cve.radiocsirt.org/vuln/suse-su-2025:02806-1 <p>Security update for podman</p> <p>Security update for podman</p> https://cve.radiocsirt.org/vuln/suse-su-2025:02806-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-6032 <p><strong>Affected:</strong> Ubuntu:25.10: podman, Ubuntu:26.04:LTS: podman</p> <p>A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.</p> <p><strong>Affected:</strong> Ubuntu:25.10: podman, Ubuntu:26.04:LTS: podman</p> <p>A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-6032 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1389 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Podman ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Podman ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1389