Nixpkgs Security Tracker

Untriaged

Permalink CVE-2025-6032

created 4 months, 3 weeks ago

Podman: podman missing tls verification

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.

Affected products

rhcos

podman

<5.5.2
*

container-tools:rhel8

container-tools:rhel8/podman

Matching in nixpkgs

pkgs.podman

Program for managing pods, containers and container images

nixos-unstable -
- nixpkgs-unstable 5.6.1

pkgs.podman-tui

Podman Terminal UI

nixos-unstable -
- nixpkgs-unstable 1.8.0

pkgs.podman-bootc

Streamlining podman+bootc interactions

nixos-unstable -
- nixpkgs-unstable 0.1.2

pkgs.podman-compose

Implementation of docker-compose with podman backend

nixos-unstable -
- nixpkgs-unstable 1.5.0

pkgs.podman-desktop

Graphical tool for developing on containers and Kubernetes

nixos-unstable -
- nixpkgs-unstable 1.21.0

pkgs.nomad-driver-podman

Podman task driver for Nomad

nixos-unstable -
- nixpkgs-unstable 0.6.3

pkgs.python312Packages.podman

Python bindings for Podman's RESTful API

nixos-unstable -
- nixpkgs-unstable 5.6.0

pkgs.python313Packages.podman