Skip to content
Fencer Vulns
high 8.3

CVE-2025-6032 json

Podman: podman missing tls verification

published 2025-06-24 16 mo ago modified 2026-10-12 27 d ago also GHSA-65gg-3w2w-hr4h , GO-2025-3777 , EUVD-2025-19013

cvss
8.3
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.5%
EPSS 0.5% chance of exploitation in 30 days, percentile 44%
public exploits
0
none known

Summary

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.

Patch / fix

  • go github.com/containers/podman/v5 5.5.2
  • Red Hat Red Hat Enterprise Linux 10 6:5.4.0-12.el10_0
  • Red Hat Red Hat Enterprise Linux 8 8100020250625105344.afee755d
  • Red Hat Red Hat Enterprise Linux 9 5:5.4.0-12.el9_6
  • Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support 4:4.9.4-18.el9_4.2
  • Red Hat Red Hat OpenShift Container Platform 4.16 4:4.9.4-14.rhaos4.16.el8, 416.94.202507222002-0
  • Red Hat Red Hat OpenShift Container Platform 4.17 5:5.2.2-8.rhaos4.17.el8, 417.94.202507132309-0
  • Red Hat Red Hat OpenShift Container Platform 4.18 5:5.2.2-9.rhaos4.18.el9, 418.94.202507221927-0
  • Red Hat Red Hat OpenShift Container Platform 4.19 4.19.9.6.202507152218-0, 5:5.4.0-6.rhaos4.19.el9
  • Red Hat Red Hat OpenShift Container Platform 4.20 4.20.9.6.202509251656-0
  • podman Debian 14, Debian 13 5.4.2+ds1-2

debian advisories DEBIAN-CVE-2025-6032

  • cri-o openshift 4.17 1.30.14-3.rhaos4.17.git0a197ae.el8
  • cri-o openshift 4.17 1.30.14-3.rhaos4.17.git0a197ae.el9
  • podman openshift 4.17 5:5.2.2-8.rhaos4.17.el8
  • podman openshift 4.17 5:5.2.2-8.rhaos4.17.el9
  • skopeo openshift 4.17 2:1.16.1-2.rhaos4.17.el8
  • skopeo openshift 4.17 2:1.16.1-2.rhaos4.17.el9
  • cri-tools openshift 4.17 1.30.0-6.el8
  • cri-tools openshift 4.17 1.30.0-6.el9

red hat advisories RHSA-2025:10668RHSA-2025:10295RHSA-2025:10550RHSA-2025:10551RHSA-2025:10549RHSA-2025:9766

  • podman Linux Micro 6.1 5.4.2-slfo.1.1_6.1
  • podman Linux Micro 6.0 4.9.5-12.1
  • podman Linux Micro 6.1 5.4.2-slfo.1.1_5.1
  • podman SLES 16.0, Linux Micro 6.2, SLES for SAP applications 16.0 5.4.2-160000.4.1
  • podman Linux Micro 6.0 4.9.5-8.1
  • podman Linux Micro 6.1 5.4.2-slfo.1.1_1.1
  • podman Linux Micro 6.0 4.9.5-7.1
  • podman SLES for SAP 15 SP5, SLES 15 SP5-LTSS, SLE Module for Containers 15 SP7 +5 more 4.9.5-150500.3.46.1

suse advisories SUSE-SU-2026:24378-1SUSE-SU-2026:22516-1SUSE-SU-2026:22451-1SUSE-SU-2026:20626-1SUSE-SU-2026:20641-1SUSE-SU-2025:20869-1

  • podman openSUSE Leap 16.0 5.4.2-160000.5.1
  • podman openSUSE Leap 16.0 5.4.2-160000.4.1
  • govulncheck-vulndb openSUSE Tumbleweed 0.0.20250730T213748-1.1
  • podman openSUSE Tumbleweed 5.5.2-1.1

opensuse advisories openSUSE-SU-2026:21244-1openSUSE-SU-2026:20305-1openSUSE-SU-2025:15405-1openSUSE-SU-2025:15262-1

  • podman-docker AlmaLinux 10 6:5.4.0-12.el10_0
  • podman AlmaLinux 9 5:5.4.0-12.el9_6
  • podman-tests AlmaLinux 9 5:5.4.0-12.el9_6
  • podman-docker AlmaLinux 9 5:5.4.0-12.el9_6
  • podman-remote AlmaLinux 9 5:5.4.0-12.el9_6
  • podman-plugins AlmaLinux 9 5:5.4.0-12.el9_6
  • crit AlmaLinux 8 3.18-5.module_el8.10.0+3901+4b80ecd7
  • crit AlmaLinux 8 3.18-5.module_el8.10.0+3845+87b84552

almalinux advisories ALSA-2025:10549ALSA-2025:10550ALSA-2025:10551

  • podman Rocky Linux 9 5:5.4.0-12.el9_6
  • podman Rocky Linux 10 6:5.4.0-12.el10_0
  • criu Rocky Linux 8 3.18-5.module+el8.10.0+1872+2e18eb19
  • criu Rocky Linux 8 3.18-5.module+el8.10.0+1874+ce489889
  • criu Rocky Linux 8 3.18-5.module+el8.10.0+1880+8e896d1b
  • criu Rocky Linux 8 3.18-5.module+el8.10.0+1896+b18fa106
  • criu Rocky Linux 8 3.18-5.module+el8.10.0+1815+5fe7415e
  • criu Rocky Linux 8 3.18-5.module+el8.10.0+1948+4b5cd4a9

rocky linux advisories RLSA-2025:10550RLSA-2025:10549RLSA-2025:10551

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2025-6032 updated cvss 8.3

podman: podman missing TLS verification

  • Red Hat OpenShift Container Platform 4 openshift/ose-rhel-coreos-8
    affected: workaround, no fix planned “Will not fix”
  • Red Hat Enterprise Linux AppStream (v. 8) crit 3.18-5.module+el8.10.0+23320+f7205097, criu 3.18-5.module+el8.10.0+23320+f7205097, crun 1.14.3-2.module+el8.10.0+23320+f7205097, runc 1.1.12-6.module+el8.10.0+23320+f7205097, udica 0.2.6-21.module+el8.10.0+23320+f7205097, conmon 2.1.10-1.module+el8.10.0+23320+f7205097, +27 more
    fixed: vendor fix RHSA-2025:10551
  • Red Hat Enterprise Linux AppStream (v. 9) podman 5.4.0-12.el9_6, podman-tests 5.4.0-12.el9_6, podman-docker 5.4.0-12.el9_6, podman-remote 5.4.0-12.el9_6, podman-plugins 5.4.0-12.el9_6
    fixed: vendor fix RHSA-2025:10550
  • Red Hat Enterprise Linux AppStream (v. 10) podman 5.4.0-12.el10_0, podman-docker 5.4.0-12.el10_0, podman-remote 5.4.0-12.el10_0
    fixed: vendor fix RHSA-2025:10549
  • Red Hat Enterprise Linux AppStream EUS (v.9.4) podman 4.9.4-18.el9_4.2, podman-tests 4.9.4-18.el9_4.2, podman-docker 4.9.4-18.el9_4.2, podman-remote 4.9.4-18.el9_4.2, podman-plugins 4.9.4-18.el9_4.2
    fixed: vendor fix RHSA-2025:10668
  • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests 5.4.0-12.el10_0
    fixed: vendor fix RHSA-2025:10549
  • Red Hat OpenShift Container Platform 4.16 rhcos 416.94.202507222002-0, podman 4.9.4-14.rhaos4.16.el8, podman 4.9.4-16.rhaos4.16.el9, podman-tests 4.9.4-14.rhaos4.16.el8, podman-tests 4.9.4-16.rhaos4.16.el9, podman-docker 4.9.4-14.rhaos4.16.el8, +7 more
    fixed: vendor fix RHSA-2025:9766
  • Red Hat OpenShift Container Platform 4.17 rhcos 417.94.202507132309-0, podman 5.2.2-8.rhaos4.17.el8, podman 5.2.2-8.rhaos4.17.el9, podman-tests 5.2.2-8.rhaos4.17.el8, podman-tests 5.2.2-8.rhaos4.17.el9, podman-docker 5.2.2-8.rhaos4.17.el8, +7 more
    fixed: vendor fix RHSA-2025:10295
show 4 more
  • Red Hat OpenShift Container Platform 4.18 rhcos 418.94.202507221927-0, podman 5.2.2-9.rhaos4.18.el9, podman-tests 5.2.2-9.rhaos4.18.el9, podman-docker 5.2.2-9.rhaos4.18.el9, podman-remote 5.2.2-9.rhaos4.18.el9, podman-plugins 5.2.2-9.rhaos4.18.el9
    fixed: vendor fix RHSA-2025:9726
  • Red Hat OpenShift Container Platform 4.19 podman 5.4.0-6.rhaos4.19.el9, rhcos 4.19.9.6.202507152218-0, podman-tests 5.4.0-6.rhaos4.19.el9, podman-docker 5.4.0-6.rhaos4.19.el9, podman-remote 5.4.0-6.rhaos4.19.el9, podman-plugins 5.4.0-6.rhaos4.19.el9
    fixed: vendor fix RHSA-2025:9751
  • Red Hat OpenShift Container Platform 4.20 rhcos 4.20.9.6.202509251656
    fixed: vendor fix RHSA-2025:15397
  • Red Hat OpenShift Container Platform 4.16 openshift 4.16.0-202506251307.p0.g29b5494.assembly.stream.el8, openshift 4.16.0-202506251307.p0.g29b5494.assembly.stream.el9, openshift-kubelet 4.16.0-202506251307.p0.g29b5494.assembly.stream.el8, openshift-kubelet 4.16.0-202506251307.p0.g29b5494.assembly.stream.el9, openshift-hyperkube 4.16.0-202506251307.p0.g29b5494.assembly.stream.el8, openshift-hyperkube 4.16.0-202506251307.p0.g29b5494.assembly.stream.el9, +197 more Red Hat OpenShift Container Platform 4.17 cri-tools 1.30.0-6.el8, cri-tools 1.30.0-6.el9, perf 5.14.0-427.76.1.el9_4, rtla 5.14.0-427.76.1.el9_4, bpftool 7.3.0-427.76.1.el9_4, kernel 5.14.0-427.76.1.el9_4, +289 more Red Hat OpenShift Container Platform 4.18 cri-o 1.31.9-3.rhaos4.18.git0f69ddd.el8, cri-o 1.31.9-3.rhaos4.18.git0f69ddd.el9, openshift 4.18.0-202506201603.p0.g84b31a3.assembly.stream.el8, openshift 4.18.0-202506201603.p0.g84b31a3.assembly.stream.el9, openshift-clients 4.18.0-202506241202.p0.g04e91ac.assembly.stream.el8, openshift-clients 4.18.0-202506241202.p0.g04e91ac.assembly.stream.el9, +193 more Red Hat OpenShift Container Platform 4.19 perf 5.14.0-570.24.1.el9_6, rtla 5.14.0-570.24.1.el9_6, kernel 5.14.0-570.24.1.el9_6, kernel-rt 5.14.0-570.24.1.el9_6, kernel-64k 5.14.0-570.24.1.el9_6, kernel-core 5.14.0-570.24.1.el9_6, +103 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
16 mo ago

Exploit prediction

0.52% chance of exploitation in the next 30 days, higher than 44% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
GitHub 3.1 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected packages

ecosystem package affected fixed in
go github.com/containers/podman/v4
>=4.8.0, <=4.9.5
>=4.8.0
 no fix listed
go github.com/containers/podman/v5
<5.5.2
5.5.2
go github.com/containers/podman
all versions
 no fix listed
go github.com/containers/podman/v2
all versions
 no fix listed
go github.com/containers/podman/v3
all versions
 no fix listed

Affected products

  • Red Hat Red Hat Enterprise Linux 10
  • Red Hat Red Hat Enterprise Linux 8
  • Red Hat Red Hat Enterprise Linux 9
  • Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support
  • Red Hat Red Hat OpenShift Container Platform 4.16
  • Red Hat Red Hat OpenShift Container Platform 4.17
  • Red Hat Red Hat OpenShift Container Platform 4.18
  • Red Hat Red Hat OpenShift Container Platform 4.19
  • Red Hat Red Hat OpenShift Container Platform 4.20
  • Red Hat Red Hat OpenShift Container Platform 4

Classification

Weakness
  • CWE-295 Improper Certificate Validation

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.