Important: Red Hat Security Advisory: Updated 8.0 container image is now available in the Red Hat Ecosystem Catalog.

Updated rhceph-8.0 container image is now available in the Red Hat Ecosystem Catalog. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support...

CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1

CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1. An upgraded version of the package is available that resolves this issue...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.8 security update

Red Hat OpenShift Container Platform release 4.17.8 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

GStreamer 缓冲区错误漏洞

GStreamer is an open source set of frameworks for processing streaming media from GStreamer. A buffer error vulnerability exists in GStreamer versions prior to 1.24.10, which stems from an out-of-bounds read vulnerability found in the qtdemuxparsecontainer function in qtdemux.c. The vulnerability...

Exploit for Incorrect Authorization in Buddypress

사용법 1. docker를 build하여 취약한 wordpress, buddypress 환경을 구성한다...

Improper Authorization

github.com/cri-o/cri-o is vulnerable to Improper Authorization. The vulnerability is due to insufficient validation during container restoration, allowing a malicious user to restore a pod without proper access to host mounts by exploiting the checkpoint restore process...

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host.

...

Updated kubernetes packages fix security vulnerabilities

A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures...

CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1

CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-21571

CVE-2024-21571 involves a remote code execution (RCE) in all versions of Code Agent. The vulnerability allows arbitrary code execution inside the Code Agent container. Exploitation requires network access to the Code Agent within the deployment environment. External exploitation is considered unl...

UBUNTU-CVE-2024-6156

Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store...

Snyk Code Agent 安全漏洞

Snyk Code Agent is an agent from Snyk open source. A security vulnerability exists in Snyk Code Agent. An attacker exploiting this vulnerability could execute arbitrary code inside the Code Agent container...

RHSA-2024:10535 Red Hat Security Advisory: OpenShift Container Platform 4.12.70 security update

Bulletin has no description...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.70 security update

Red Hat OpenShift Container Platform release 4.12.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

runc: file descriptor leak

A file descriptor leak issue was found in the runc package. While a user performs OCLOEXEC all file descriptors before executing the container code, the file descriptor is open when performing setcwd2, which means that the reference can be kept alive in the container by configuring the working...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.42 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.42 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

SUSE CVE-2024-32473

Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. In 26.0.0, IPv6 is not disabled on network interfaces, including those belonging to networks where --ipv6=false. An container with an ipvl...

LXD 安全漏洞

LXD is a Canonical open source container for managing applications on Linux-based systems. A security vulnerability exists in LXD versions prior to 5.21.2 that stems from the ability to bypass PKI mode if a client's certificate exists in a trust store...

The vulnerability of the streamformatter software package, used for creating containerized systems like Moby, allows a hacker to trigger a service failure.

The vulnerability of the streamformatter software package for creating containerized systems in Moby is related to competitive access to resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Moby container isolation system creation software, related to competitive access to resources, allows a intruder to trigger a service failure.

The vulnerability of the Moby container isolation system creation software is related to competitive access to resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...