951 matches found
SUSE SLES15 / openSUSE 15 Security Update : buildah (SUSE-SU-2024:1143-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1143-1 advisory. - CVE-2024-1753: Fixed an issue to prevent a full container escape at build time. bsc1221677 - Update to version 1.34.1 for...
SUSE SLES15 Security Update : buildah (SUSE-SU-2024:1142-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1142-1 advisory. - CVE-2024-1753: Fixed an issue to prevent a full container escape at build time. bsc1221677 Tenable has extracted the preceding description...
SUSE-SU-2024:1146-1 Security update for podman
This update for podman fixes the following issues: - CVE-2024-1753: Fixed an issue to prevent a full container escape at build time. bsc1221677...
SUSE-SU-2024:1145-1 Security update for buildah
This update for buildah fixes the following issues: - CVE-2024-1753: Fixed an issue to prevent a full container escape at build time. bsc1221677 - Update to version 1.34.1 for compatibility with Docker 25.0 which is not in SLES yet, but will eventually be bsc1219563. See the corresponding release...
SUSE-SU-2024:1144-1 Security update for buildah
This update for buildah fixes the following issues: - CVE-2024-1753: Fixed an issue to prevent a full container escape at build time. bsc1221677 - Update to version 1.34.1 for compatibility with Docker 25.0 which is not in SLES yet, but will eventually be bsc1219563. See the corresponding release...
SUSE-SU-2024:1143-1 Security update for buildah
This update for buildah fixes the following issues: - CVE-2024-1753: Fixed an issue to prevent a full container escape at build time. bsc1221677 - Update to version 1.34.1 for compatibility with Docker 25.0 which is not in SLES yet, but will eventually be bsc1219563. See the corresponding release...
SUSE-SU-2024:1142-1 Security update for buildah
This update for buildah fixes the following issues: - CVE-2024-1753: Fixed an issue to prevent a full container escape at build time. bsc1221677...
Huawei EulerOS: Security Advisory for docker-runc (EulerOS-SA-2024-1504)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for docker-runc (EulerOS-SA-2024-1483)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : docker-runc (EulerOS-SA-2024-1504)
According to the versions of the docker-runc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an...
EulerOS 2.0 SP9 : docker-runc (EulerOS-SA-2024-1483)
According to the versions of the docker-runc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an...
openSUSE: Security Advisory for podman (SUSE-SU-2024:1059-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AI-as-a-Service Providers Vulnerable to PrivEsc and Cross-Tenant Attacks
New research has found that artificial intelligence AI-as-a-service providers such as Hugging Face are susceptible to two critical risks that could allow threat actors to escalate privileges, gain cross-tenant access to other customers' models, and even take over the continuous integration and...
Exploit for File Descriptor Leak in Linuxfoundation Runc
CVE-2024-21626 POC Requirements runc 1.1.0 /proc/self/c...
Fedora 38 : podman (2024-8409b5fa8e)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-8409b5fa8e advisory. Security fix for CVE-2024-1753 Automatic update for podman-4.9.4-1.fc38. Changelog for podman Mon Mar 25 2024 Packit - 5:4.9.4-1 - packit 4.9.4...
SUSE SLES15 Security Update : podman (SUSE-SU-2024:1059-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1059-1 advisory. - CVE-2024-1753: Fixed full container escape at build time in buildah bsc1221677. Tenable has extracted the preceding description block...
Podman affected by CVE-2024-1753 container escape at build time
Impact What kind of vulnerability is it? Who is impacted? Users running containers with root privileges allowing a container to run with read/write access to the host system files when selinux is not enabled. With selinux enabled, some read access is allowed. Patches From @nalind . This is a patc...
GHSA-874V-PJ72-92F3 Podman affected by CVE-2024-1753 container escape at build time
Impact What kind of vulnerability is it? Who is impacted? Users running containers with root privileges allowing a container to run with read/write access to the host system files when selinux is not enabled. With selinux enabled, some read access is allowed. Patches From @nalind . This is a patc...