EUVD-2025-19013Published

Podman: podman missing tls verification

cve-program · CVE-2025-6032

Published

podman

https://github.com/containers/podman/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "versions": [
                        {
                            "status": "affected",
                            "version": "4.8.0",
                            "lessThan": "5.5.2",
                            "versionType": "semver"
                        }
                    ],
                    "packageName": "podman",
                    "collectionURL": "https://github.com/containers/podman/",
                    "defaultStatus": "unaffected"
                }

podman

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 10",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "podman",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "6:5.4.0-12.el10_0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:enterprise_linux:10.0"
                    ]
                }

container-tools:rhel8

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "container-tools:rhel8",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "8100020250625105344.afee755d",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:enterprise_linux:8::appstream"
                    ]
                }

podman

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "podman",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "5:5.4.0-12.el9_6",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:enterprise_linux:9::appstream"
                    ]
                }

podman

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "podman",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "4:4.9.4-18.el9_4.2",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_eus:9.4::appstream"
                    ]
                }

podman

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.16",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "podman",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "4:4.9.4-14.rhaos4.16.el8",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.16::el8",
                        "cpe:/a:redhat:openshift:4.16::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://catalog.redhat.com/software/containers/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.16",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "416.94.202507222002-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.16::el9"
                    ]
                }

podman

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.17",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "podman",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "5:5.2.2-8.rhaos4.17.el8",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.17::el8",
                        "cpe:/a:redhat:openshift:4.17::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://catalog.redhat.com/software/containers/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.17",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "417.94.202507132309-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.17::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://catalog.redhat.com/software/containers/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.18",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "418.94.202507221927-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.18::el9"
                    ]
                }

podman

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.18",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "podman",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "5:5.2.2-9.rhaos4.18.el9",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.18::el8",
                        "cpe:/a:redhat:openshift:4.18::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://catalog.redhat.com/software/containers/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.19",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "4.19.9.6.202507152218-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.19::el9"
                    ]
                }

podman

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.19",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "podman",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "5:5.4.0-6.rhaos4.19.el9",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.19::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.20",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "4.20.9.6.202509251656-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.20::el9"
                    ]
                }

openshift/ose-rhel-coreos-8

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-8",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift:4"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

euvd · EUVD-2025-19013

Published

EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.

Original publisher date fields

datePublished: Jun 24, 2025, 1:50:47 PM

dateUpdated: Oct 12, 2026, 7:53:07 PM

31 related source bulletins · separate from aliases

RHSA-2025:11677: Red Hat Security Advisory: OpenShift Container Platform 4.18.21 bug fix and security update

CVE-2024-45339 · CVE-2025-6032 · CVE-2025-48060

RHSA-2025:10295: Red Hat Security Advisory: OpenShift Container Platform 4.17.35 packages and security update

CVE-2025-6032 · CVE-2025-22871

RHSA-2025:11363: Red Hat Security Advisory: OpenShift Container Platform 4.19.5 bug fix and security update

CVE-2025-6032 · CVE-2025-48060

SUSE-SU-2026:22451-1: Security update for podman

CVE-2025-22869 · CVE-2025-47913 · CVE-2025-47914 · CVE-2025-52881 · CVE-2025-6032 · CVE-2025-9566 · CVE-2026-34986 · CVE-2026-39827 · CVE-2026-39828 · CVE-2026-39829 · CVE-2026-39830 · CVE-2026-39831 · CVE-2026-39832 · CVE-2026-39833 · CVE-2026-39834 · CVE-2026-39835 · CVE-2026-42508 · CVE-2026-46595 · CVE-2026-46597 · CVE-2026-46598

RHSA-2025:15397: Red Hat Security Advisory: OpenShift Container Platform 4.20.0 bug fix and security update

CVE-2025-5914 · CVE-2025-5994 · CVE-2025-6032 · CVE-2025-6965 · CVE-2025-49794 · CVE-2025-49796

msrc_CVE-2025-6032: Podman: podman missing tls verification

CVE-2025-6032

SUSE-SU-2026:22516-1: Security update for podman

CVE-2024-6104 · CVE-2025-22869 · CVE-2025-27144 · CVE-2025-47913 · CVE-2025-47914 · CVE-2025-52881 · CVE-2025-6032 · CVE-2025-9566 · CVE-2026-34986 · CVE-2026-39827 · CVE-2026-39828 · CVE-2026-39829 · CVE-2026-39830 · CVE-2026-39831 · CVE-2026-39832 · CVE-2026-39833 · CVE-2026-39834 · CVE-2026-39835 · CVE-2026-42508 · CVE-2026-46595 · CVE-2026-46597 · CVE-2026-46598

SUSE-SU-2026:20641-1: Security update for podman

CVE-2025-22869 · CVE-2025-31133 · CVE-2025-47913 · CVE-2025-47914 · CVE-2025-52565 · CVE-2025-52881 · CVE-2025-6032 · CVE-2025-9566

RHSA-2025:9766: Red Hat Security Advisory: OpenShift Container Platform 4.16.43 packages and security update

CVE-2025-6032

SUSE-SU-2025:20805-1: Security update for podman

CVE-2025-6032

SUSE-SU-2025:02806-1: Security update for podman

CVE-2025-6032

RHSA-2025:10550: Red Hat Security Advisory: podman security update

CVE-2025-6032

SUSE-SU-2025:02807-1: Security update for podman

CVE-2025-6032

WID-SEC-W-2025-1389: Podman: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

CVE-2025-6032

WID-SEC-W-2025-2043: IBM QRadar SIEM: Mehrere Schwachstellen

CVE-2021-47670 · CVE-2023-49083 · CVE-2024-56644 · CVE-2025-21727 · CVE-2025-21759 · CVE-2025-22058 · CVE-2025-22097 · CVE-2025-37914 · CVE-2025-38085 · CVE-2025-38159 · CVE-2025-38200 · CVE-2025-38250 · CVE-2025-38380 · CVE-2025-5914 · CVE-2025-5994 · CVE-2025-6020 · CVE-2025-6032 · CVE-2025-8194 · CVE-2025-0164

openSUSE-SU-2026:20305-1: Security update for podman

CVE-2025-22869 · CVE-2025-31133 · CVE-2025-47913 · CVE-2025-47914 · CVE-2025-52565 · CVE-2025-52881 · CVE-2025-6032 · CVE-2025-9566

openSUSE-SU-2025:15405-1: govulncheck-vulndb-0.0.20250730T213748-1.1 on GA media

CVE-2024-44905 · CVE-2024-44906 · CVE-2024-56731 · CVE-2025-0928 · CVE-2025-1088 · CVE-2025-30086 · CVE-2025-32019 · CVE-2025-3227 · CVE-2025-3228 · CVE-2025-3415 · CVE-2025-4563 · CVE-2025-4656 · CVE-2025-46702 · CVE-2025-4674 · CVE-2025-47281 · CVE-2025-47871 · CVE-2025-47943 · CVE-2025-4922 · CVE-2025-4981 · CVE-2025-49825 · CVE-2025-5030 · CVE-2025-51471 · CVE-2025-52477 · CVE-2025-52889 · CVE-2025-52890 · CVE-2025-52893 · CVE-2025-52894 · CVE-2025-52900 · CVE-2025-52901 · CVE-2025-52902 · CVE-2025-52903 · CVE-2025-52904 · CVE-2025-52995 · CVE-2025-52996 · CVE-2025-52997 · CVE-2025-53512 · CVE-2025-53513 · CVE-2025-53547 · CVE-2025-53632 · CVE-2025-53633 · CVE-2025-53634 · CVE-2025-53826 · CVE-2025-53893 · CVE-2025-53945 · CVE-2025-54059 · CVE-2025-54379 · CVE-2025-5689 · CVE-2025-5981 · CVE-2025-6023 · CVE-2025-6032 · CVE-2025-6224 · CVE-2025-6226 · CVE-2025-6227 · CVE-2025-6233 · CVE-2025-6264 · CVE-2025-6624

RHSA-2025:10668: Red Hat Security Advisory: podman security update

CVE-2025-6032

RHSA-2025:9751: Red Hat Security Advisory: OpenShift Container Platform 4.19.2 packages and security update

CVE-2025-6032

SUSE-SU-2025:20869-1: Security update for podman

CVE-2024-6104 · CVE-2025-22869 · CVE-2025-27144 · CVE-2025-6032 · CVE-2025-9566

SUSE-SU-2025:20692-1: Security update for podman

CVE-2025-6032

RHSA-2025:11359: Red Hat Security Advisory: OpenShift Container Platform 4.17.36 bug fix and security update

CVE-2025-6032

SUSE-SU-2026:20626-1: Security update for podman

CVE-2025-22869 · CVE-2025-31133 · CVE-2025-47913 · CVE-2025-47914 · CVE-2025-52565 · CVE-2025-52881 · CVE-2025-6032 · CVE-2025-9566

openSUSE-SU-2026:21244-1: Security update for podman

RHSA-2025:11681: Red Hat Security Advisory: OpenShift Container Platform 4.16.45 bug fix and security update

CVE-2024-45339 · CVE-2024-51744 · CVE-2025-6032 · CVE-2025-30204 · CVE-2025-48060

openSUSE-SU-2025:15262-1: podman-5.5.2-1.1 on GA media

CVE-2025-6032

RHSA-2025:10551: Red Hat Security Advisory: container-tools:rhel8 security update

CVE-2025-6032

SUSE-SU-2026:24378-1: Security update for podman

CVE-2025-22869 · CVE-2025-47913 · CVE-2025-47914 · CVE-2025-52881 · CVE-2025-6032 · CVE-2025-9566 · CVE-2026-34986 · CVE-2026-39829 · CVE-2026-39830 · CVE-2026-42508 · CVE-2026-55686 · CVE-2026-57231

RHSA-2025:10549: Red Hat Security Advisory: podman security update

CVE-2025-6032

RHSA-2025:9726: Red Hat Security Advisory: OpenShift Container Platform 4.18.19 packages and security update

CVE-2025-6032

SUSE-SU-2025:02808-1: Security update for podman

CVE-2025-6032

No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.

Original source record · Cite this exact observation · Complete original publisher JSON

nvd · CVE-2025-6032

Published

NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.

Source analysis status: Deferred

Weakness classifications: CWE-295

Original publisher date fields

published: 2025-06-24T14:15:30.703

lastModified: 2026-10-12T20:17:07.103

Original source record · Cite this exact observation · Complete original publisher JSON

osv · GHSA-65gg-3w2w-hr4h

Published

github.com/containers/podman/v4

SEMVER · introduced 4.8.0 → last_affected 4.9.5

github.com/containers/podman/v5

SEMVER · introduced 0 → fixed 5.5.2

Original source record · Cite this exact observation · Complete original publisher JSON

osv · GO-2025-3777

Published

github.com/containers/podman

SEMVER · introduced 0

github.com/containers/podman/v2

SEMVER · introduced 0

github.com/containers/podman/v3

SEMVER · introduced 0

github.com/containers/podman/v4

SEMVER · introduced 4.8.0

github.com/containers/podman/v5

SEMVER · introduced 0 → fixed 5.5.2

Original source record · Cite this exact observation · Complete original publisher JSON