ALT-PU-2025-9676-2

Package update podman in branch sisyphus

Version5.5.2-alt1

Published2026-02-04

Max severityHIGH

Severity:

Closed issues (3)

HIGH8.3

Уязвимость программного средства управления и запуска OCI-контейнеров Podman, связанная с ошибками процедуры подтверждения подлинности сертификата, позволяющая нарушителю выполнить атаку типа «человек посередине»

Published: 2025-07-28Modified: 2026-04-20

CVSS 3.xHIGH 8.3

CVSS:3.x/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

CVSS 2.0HIGH 7.6

CVSS:2.0/AV:N/AC:H/Au:N/C:C/I:C/A:C

References

CVE-2025-6032

HIGH8.3

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.

Published: 2025-06-24Modified: 2026-04-15

CVSS 3.xHIGH 8.3

CVSS:3.x/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

References

GHSA-65gg-3w2w-hr4h

HIGH8.3

Podman Improper Certificate Validation; machine missing TLS verification

Published: 2025-06-26Modified: 2025-11-29

CVSS 3.xHIGH 8.3

CVSS:3.x/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

References