Summary
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.
Security Fix(es):
* podman: podman missing TLS verification (CVE-2025-6032)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | podman | 5:5.4.0-12.el9_6 |
| AlmaLinux · 9 | podman-docker | 5:5.4.0-12.el9_6 |
| AlmaLinux · 9 | podman-plugins | 5:5.4.0-12.el9_6 |
| AlmaLinux · 9 | podman-remote | 5:5.4.0-12.el9_6 |
| AlmaLinux · 9 | podman-tests | 5:5.4.0-12.el9_6 |
Vulnerabilities 1
-
High 8.3
Podman: podman missing tls verification
A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.