[SECURITY] Fedora 41 Update: tomcat-9.0.98-1.fc41

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participator...

[SECURITY] Fedora 40 Update: tomcat-9.0.98-1.fc40

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participator...

SUSE CVE-2024-12582

A flaw was found in the skupper console, a read-only interface that renders cluster network, traffic details, and metrics for a network application that a user sets up across a hybrid multi-cloud environment. When the default authentication method is used, a random password is generated for the...

[SECURITY] Fedora 40 Update: prometheus-podman-exporter-1.14.0-1.fc40

Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...

AlmaLinux 9 : containernetworking-plugins (ALSA-2024:11216)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:11216 advisory. encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-34156 Tenable...

CVE-2024-56330

Stardust is a platform for streaming isolated desktop containers. With this exploit, inter container communication ICC is not disabled. This would allow users within a container to access another containers agent, therefore compromising access.The problem has been patched in any Stardust build pa...

CVE-2024-56330 Session VNC may be accessed by other sessions on the same host in stardust

Stardust is a platform for streaming isolated desktop containers. With this exploit, inter container communication ICC is not disabled. This would allow users within a container to access another containers agent, therefore compromising access.The problem has been patched in any Stardust build pa...

CVE-2024-56330 Session VNC may be accessed by other sessions on the same host in stardust

Stardust is a platform for streaming isolated desktop containers. With this exploit, inter container communication ICC is not disabled. This would allow users within a container to access another containers agent, therefore compromising access.The problem has been patched in any Stardust build pa...

CVE-2024-56330 Session VNC may be accessed by other sessions on the same host in stardust

Stardust is a platform for streaming isolated desktop containers. With this exploit, inter container communication ICC is not disabled. This would allow users within a container to access another containers agent, therefore compromising access.The problem has been patched in any Stardust build pa...

CVE-2024-56330

CVE-2024-56330 affects Stardust, a platform for streaming isolated desktop containers. The issue allows inter container communication (ICC) to remain enabled, enabling a user in one container to access another container’s agent and potentially compromise access. The vulnerability is tied to ICC n...

Stardust 访问控制错误漏洞

Stardust is a spaceness open source platform for streaming isolated desktop containers. An access control error vulnerability exists in Stardust. An attacker exploiting this vulnerability could access another container's proxy...

PT-2024-36793 · Stardust · Stardust

Name of the Vulnerable Software and Affected Versions: Stardust versions prior to 12/20/24 Description: The issue affects Stardust, a platform for streaming isolated desktop containers. It allows inter container communication ICC to remain enabled, potentially granting users within one container...

Malicious code in container-toolkit-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 495f1eeee43fdcdf2a5b5468befc8209a0d5d55f315464d80a9ae3d926a34da7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RLSA-2024:10289 Moderate: container-tools:rhel8 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents CVE-2021-33198 podman: podman machine spawns gvproxy...

container-tools:rhel8 security update

An update is available for podman, buildah, module.toolbox, module.podman, cockpit-podman, containers-common, module.criu, module.conmon, module.aardvark-dns, module.containers-common, module.python-podman, oci-seccomp-bpf-hook, module.fuse-overlayfs, module.oci-seccomp-bpf-hook, module.udica,...

Low: Red Hat Security Advisory: OpenShift Container Platform 4.14.43 security update

Red Hat OpenShift Container Platform release 4.14.43 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

RockyLinux 8 : container-tools:rhel8 (RLSA-2024:10289)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:10289 advisory. golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents CVE-2021-33198 podman: podman machine...

The vulnerability of the Moby container isolation system creation software, related to the swapping of the zero pointer, allows a intruder to trigger a service failure.

The vulnerability of the Moby container isolation system creation software is related to the manipulation of the zero pointer. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

containernetworking-plugins security update

1:1.5.1-3 - rebuild to fix CVE-2024-34156...

CVE-2024-45338 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy, gostatsd, haproxy-ingress, rclone, crossplane-provider-aws-iam, tailscale, kargo, descheduler, go-licenses, flux-image-automation-controller, octo-sts, dagger, splunk-otel-collector, spicedb, cass-operator, k8sgpt-operator,...