GO-2025-3777
Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman
At a glance
- Published
- Updated
- CVE
- CVE-2025-6032
- Aliases
- GHSA-65gg-3w2w-hr4h
Description
Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/containers/podman | introduced 0 |
| Go · github.com/containers/podman/v2 | introduced 0 |
| Go · github.com/containers/podman/v3 | introduced 0 |
| Go · github.com/containers/podman/v4 | introduced 4.8.0 |
| Go · github.com/containers/podman/v5 | introduced 0, fixed 5.5.2 |
References
- https://github.com/containers/podman/security/advisories/GHSA-65gg-3w2w-hr4h ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2025-6032 ADVISORY
- https://github.com/containers/podman/commit/726b506acc8a00d99f1a3a1357ecf619a1f798c3 FIX
- https://access.redhat.com/errata/RHSA-2025:10295 WEB
- https://access.redhat.com/errata/RHSA-2025:10549 WEB
- https://access.redhat.com/errata/RHSA-2025:10550 WEB
- https://access.redhat.com/errata/RHSA-2025:10551 WEB
- https://access.redhat.com/errata/RHSA-2025:10668 WEB
- https://access.redhat.com/errata/RHSA-2025:9726 WEB
- https://access.redhat.com/errata/RHSA-2025:9751 WEB
- https://access.redhat.com/errata/RHSA-2025:9766 WEB
- https://access.redhat.com/security/cve/CVE-2025-6032 WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=2372501 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |