Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2025:10549

Опубликовано: 03 окт. 2025
Источник: rocky
Оценка: Important

Описание

Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

  • podman: podman missing TLS verification (CVE-2025-6032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 10

НаименованиеАрхитектураРелизRPM
podmanx86_6412.el10_0podman-5.4.0-12.el10_0.x86_64.rpm
podman-dockernoarch12.el10_0podman-docker-5.4.0-12.el10_0.noarch.rpm
podman-remotex86_6412.el10_0podman-remote-5.4.0-12.el10_0.x86_64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 8.3
ubuntu
4 месяца назад

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.

CVSS3: 8.3
redhat
4 месяца назад

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.

CVSS3: 8.3
nvd
4 месяца назад

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.

msrc
2 месяца назад

Podman: podman missing tls verification

CVSS3: 8.3
debian
4 месяца назад

A flaw was found in Podman. The podman machine init command fails to v ...