[SECURITY] Fedora 36 Update: butane-0.15.0-1.fc36

Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition...

The vulnerability in the implementation of the “info-get” configuration module for the “guestinfo.ignition.config.data” library in the Ignition library allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the info-get guestinfo.ignition.config.data configuration implementation in the Ignition library is related to insufficient protection for service data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

Fedora: Security Advisory for ignition (FEDORA-2022-5df5dc8ec5)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for ignition (FEDORA-2022-7846cac830)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for ignition (FEDORA-2022-393948cc9e)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: ignition-2.14.0-1.fc35

Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files regular files, systemd units, etc., and configuring users. On first boot, Ignition reads its configuration from a source of truth remote URL, network...

[SECURITY] Fedora 36 Update: ignition-2.14.0-1.fc36

Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files regular files, systemd units, etc., and configuring users. On first boot, Ignition reads its configuration from a source of truth remote URL, network...

Ignition config accessible to unprivileged software on VMware

Impact Unprivileged software in VMware VMs, including software running in unprivileged containers, can retrieve an Ignition config stored in a hypervisor guestinfo variable or OVF environment. If the Ignition config contains secrets, this can result in the compromise of sensitive information...

GHSA-HJ57-J5CW-2MWP Ignition config accessible to unprivileged software on VMware

Impact Unprivileged software in VMware VMs, including software running in unprivileged containers, can retrieve an Ignition config stored in a hypervisor guestinfo variable or OVF environment. If the Ignition config contains secrets, this can result in the compromise of sensitive information...

Privilege Escalation

github.com/coreos/ignition is vulnerable to Privilege Escalation. The vulnerability exists due to the main function of main.go does not properly set the ignition-apply and ignition-rmcfg parameters according to the filepath.base arguments, allowing an attacker to access unprivileged containers in...

Duplicate advisory: Configuration exposure in github.com/coreos/ignition

Duplicate Advisory This advisory is a duplicate of GHSA-hj57-j5cw-2mwp. This link is preserved to maintain external references. Original Description A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This iss...

GHSA-MJQC-5C9X-XFCC Duplicate advisory: Configuration exposure in github.com/coreos/ignition

Duplicate Advisory This advisory is a duplicate of GHSA-hj57-j5cw-2mwp. This link is preserved to maintain external references. Original Description A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This iss...

CVE-2022-1706

A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets. The highest threat from this vulnerability is to data...

CVE-2022-1706

A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets. The highest threat from this vulnerability is to data...

DEBIAN-CVE-2022-1706

A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets. The highest threat from this vulnerability is to data...

Design/Logic Flaw

A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets. The highest threat from this vulnerability is to data...

UBUNTU-CVE-2022-1706

A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets. The highest threat from this vulnerability is to data...

CVE-2022-1706

A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets. The highest threat from this vulnerability is to data...

new packages: ignition

An update is available for ignition. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0...

CVE-2022-1706

A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets. The highest threat from this vulnerability is to data...