Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.rc > #393302 > unrolled thread

Bug#1108473: podman: CVE-2025-6032

Back to article view | Back to linux.debian.bugs.rc

Contents

  Bug#1108473: podman: CVE-2025-6032 Moritz Mühlenhoff <jmm@inutil.org> - 2025-06-29 14:10 +0200
    Bug#1108473: marked as done (podman: CVE-2025-6032) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2025-07-08 10:00 +0200

#393302 — Bug#1108473: podman: CVE-2025-6032

Package: podman
X-Debbugs-CC: team@security.debian.org
Severity: grave
Tags: security

Hi,

The following vulnerability was published for podman.

CVE-2025-6032[0]:
| A flaw was found in Podman. The podman machine init command fails to
| verify the TLS certificate when downloading the VM images from an
| OCI registry. This issue results in a Man In The Middle attack.

https://github.com/advisories/GHSA-65gg-3w2w-hr4h
https://github.com/containers/podman/commit/726b506acc8a00d99f1a3a1357ecf619a1f798c3


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2025-6032
    https://www.cve.org/CVERecord?id=CVE-2025-6032

Please adjust the affected versions in the BTS as needed.

[toc] | [next] | [standalone]

#393499 — Bug#1108473: marked as done (podman: CVE-2025-6032)

[Multipart message — attachments visible in raw view] — view raw

Your message dated Tue, 08 Jul 2025 07:52:06 +0000
with message-id <E1uZ37W-006ACJ-7p@fasolo.debian.org>
and subject line Bug#1108473: fixed in podman 5.4.2+ds1-2
has caused the Debian Bug report #1108473,
regarding podman: CVE-2025-6032
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1108473: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1108473
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.rc

csiph-web