10489 matches found
DLA-3473-1 docker-registry - security update
Bulletin has no description...
CVE-2023-34844
Play With Docker 0.0.2 has an insecure CAPSYSADMIN privileged mode causing the docker container to escape...
CVE-2023-34844
CVE-2023-34844 affects Play With Docker, where versions prior to 0.0.2 expose an insecure CAP_SYS_ADMIN privileged mode allowing a container escape. The root cause is improper privilege handling that enables elevation from within a container to host context. Documented impact is privileged escape...
CVE-2023-34844
Play With Docker 0.0.2 has an insecure CAPSYSADMIN privileged mode causing the docker container to escape...
Play With Docker 安全漏洞
Play With Docker is an easy, interactive and fun training ground for learning Docker. A security vulnerability exists in Play With Docker versions prior to 0.0.2 that stems from having an insecure CAPSYSADMIN privilege pattern that causes Docker containers to escape...
Debian dla-3473 : docker-registry - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3473 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3473-1 [email protected] https://www.debian.org/lts/security/...
Mageia: Security Advisory (MGASA-2023-0207)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Terraform Enterprise, Docker Engine, and Go’s CVE-2023-24540
Summary Up until June 2023, Docker Engine 20.10 was the highest release officially supported by Terraform Enterprise TFE. However, that version is no longer supported by Docker and was built using a version of Go that has since had a number of CVEs disclosed. While these CVEs are unlikely to be...
ownCloud: Cross-Site Request Forgery
A cross-site request forgery vulnerability was found in an application. Requests were not validating cross-site request forgery tokens, allowing an unauthorized user to perform administration functions by inserting valid session cookies into arbitrary requests. This could have enabled an attacker...
Updated docker-docker-registry packages fix security vulnerability
Denail of service through excessive use of memory. CVE-2023-2253...
MGASA-2023-0207 Updated docker-docker-registry packages fix security vulnerability
Denail of service through excessive use of memory. CVE-2023-2253...
Using Spring for GraphQL with Spring Data Neo4j
Introduction This is a guest blog post by Gerrit Meier from Neo4j who maintains the Spring Data Neo4j module. A few weeks ago version 1.2.0 of Spring for GraphQL was released with a bunch of new features. This also includes even better integration with Spring Data modules. Motivated by those...
Important Photon OS Security Update - PHSA-2023-5.0-0038
Updates of 'docker-compose' packages of Photon OS have been released...
This Week in Spring - June 27th, 2023
Hi Spring fans! Welcome to another installment of This Week in Spring! This week I am in Seoul talking to developers about the latest-and-greatest in Spring Boot 3! There's so much great stuff coming, and so much great stuff already. There are a few things I'm super excited about. First, yesterda...
Important Photon OS Security Update - PHSA-2023-3.0-0604
Updates of 'docker-compose', 'binutils' packages of Photon OS have been released...
Improved Testcontainers Support in Spring Boot 3.1
There's been support for Testcontainers in Spring Boot for some time now, and Spring Boot 3.1 improves it further. But first, let's take a look at what Testcontainers is and how it's usually used. Testcontainers is an open source framework for providing throwaway, lightweight instances of...
Docker Compose Support in Spring Boot 3.1
Docker Compose support in Spring Boot 3.1 builds on top of the ConnectionDetails abstraction, which we've featured in a separate blog post. If you haven't already read it, please do so before reading this post. Docker Compose "is a tool for defining and running multi-container Docker applications...
Exploit for Code Injection in Vmware Spring_Framework
Spring4Shell Spring4Shell CVE-2022-22965 Proof Of Concept wi...