Security Bulletin: Vulnerability Advisor for IBM Cloud Container Registry might fail to detect some package vulnerabilities in Red Hat images

Summary Vulnerability Advisor for IBM Cloud Container Registry might have failed to detect some package vulnerabilities in Red Hat image reports produced before 2019-05-17. Vulnerability Details Vulnerability Advisor for IBM Cloud Container Registry did not detect all known package vulnerabilitie...

CVE-2019-3841

Kubevirt/virt-cdi-importer, versions 1.4.0 to 1.5.3 inclusive, were reported to disable TLS certificate validation when importing data into PVCs from container registries. This could enable man-in-the-middle attacks between a container registry and the virt-cdi-component, leading to possible...

CVE-2019-3841: Improper Certificate Validation

Kubevirt/virt-cdi-importer, versions 1.4.0 to 1.5.3 inclusive, were reported to disable TLS certificate validation when importing data into PVCs from container registries. This could enable man-in-the-middle attacks between a container registry and the virt-cdi-component, leading to possible...

PT-2019-1727

Name of the Vulnerable Software and Affected Versions Kubevirt/virt-cdi-importer versions 1.4.0 through 1.5.3 Description The issue is related to incorrect authentication of a certificate in the data import service of Kubevirt, which could allow a remote attacker to perform a man-in-the-middle...

openSUSE Security Update : singularity (openSUSE-2018-1223)

Singularity was updated to version 2.6.0, bringing features, bugfixes and security fixes. Security issues fixed : - CVE-2018-12021: Fixed access control on systems supporting overlay file system boo1100333. Highlights of 2.6.0 : - Allow admin to specify a non-standard location for mksquashfs bina...

Clair - Vulnerability Static Analysis for Containers

Clair is an open source project for the static analysis of vulnerabilities in appc and docker containers. Vulnerability data is continuously imported from a known set of sources and correlated with the indexed contents of container images in order to produce lists of vulnerabilities that threaten...