OPENSUSE-SU-2024:11646-1 containerd-1.4.12-1.1 on GA media

These are all security issues fixed in the containerd-1.4.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12130-1 containerd-1.6.6-1.1 on GA media

These are all security issues fixed in the containerd-1.6.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12550-1 containerd-1.6.9-1.1 on GA media

These are all security issues fixed in the containerd-1.6.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12822-1 containerd-1.6.19-1.1 on GA media

These are all security issues fixed in the containerd-1.6.19-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10693-1 containerd-1.4.8-2.2 on GA media

These are all security issues fixed in the containerd-1.4.8-2.2 package on the GA media of openSUSE Tumbleweed...

CVE-2023-45288 affecting package moby-containerd-cc for versions less than 1.7.7-4

CVE-2023-45288 affecting package moby-containerd-cc for versions less than 1.7.7-4. A patched version of the package is available...

CVE-2023-45288 affecting package moby-containerd for versions less than 1.6.26-5

CVE-2023-45288 affecting package moby-containerd for versions less than 1.6.26-5. A patched version of the package is available...

GO-2024-2846 Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd...

SUSE CVE-2020-15257

containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim's API socket verified that the connecting...

SUSE CVE-2021-32760

containerd is a container runtime. A bug was found in containerd versions prior to 1.4.8 and 1.5.4 where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host's filesystem. Changes to file permissions can deny access t...

SUSE CVE-2022-23648

containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12 where containers launched through containerd's CRI implementation on Linux with a specially-crafted image configuration could gain access to...

RHEL 8 : helm (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - golang: net/url: JoinPath does not strip relative path components in all circumstances CVE-2022-32190 -...

Fedora: Security Advisory (FEDORA-2024-9cc0e0c63e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GO-2024-2870 Credential leakage in github.com/aquasecurity/trivy

A malicious registry can cause Trivy to leak credentials for legitimate registries such as AWS Elastic Container Registry ECR, Google Cloud Artifact/Container Registry, or Azure Container Registry ACR if the registry is scanned from directly using Trivy. These tokens can then be used to push/pull...

GHSA-XCQ4-M2R3-CMRJ Trivy possibly leaks registry credential when scanning images from malicious registries

Impact If a malicious actor is able to trigger Trivy to scan container images from a crafted malicious registry, it could result in the leakage of credentials for legitimate registries such as AWS Elastic Container Registry ECR, Google Cloud Artifact/Container Registry, or Azure Container Registr...

Trivy possibly leaks registry credential when scanning images from malicious registries

Impact If a malicious actor is able to trigger Trivy to scan container images from a crafted malicious registry, it could result in the leakage of credentials for legitimate registries such as AWS Elastic Container Registry ECR, Google Cloud Artifact/Container Registry, or Azure Container Registr...

containerd started with non-empty inheritable Linux process capabilities

Impact A bug was found in containerd where containers were incorrectly started with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to elevate those capabilities to the permitted set during execve2...

GHSA-C9CP-9C75-9V8C containerd started with non-empty inheritable Linux process capabilities

Impact A bug was found in containerd where containers were incorrectly started with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to elevate those capabilities to the permitted set during execve2...

RHEL 7 : containerd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - containerd: Supplementary groups are not set up properly CVE-2023-25173 Note that Nessus has not tested for this...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: k9s, helm-fips, dynamic-localpv-provisioner, kubernetes-csi-external-provisioner, aws-flb-cloudwatch-fips, aws-flb-firehose-fips, multus-cni-fips, overmind, prometheus-mysqld-exporter, paranoia, tigera-operator, timoni, cri-tools, harbor-registry-fips,...