PT-2024-35971 · Imager +1 · Imager +1

Name of the Vulnerable Software and Affected Versions: Imager package versions prior to 1.025 Description: The issue is a heap-based buffer overflow that can lead to denial of service or possibly other unspecified impacts when the trim method is called on a crafted input image. Recommendations: F...

Astra Linux – Vulnerability in libheif

A segmentation fault caused by a floating-point exception exists in libheif 1.15.1 when using crafted heif images through the heif::Fraction::round function in box.cc, which results in a denial of service...

Important: Red Hat Security Advisory: Red Hat build of Keycloak 24.0.9 Images Update

New images with security impact Important are available for Red Hat build of Keycloak 24.0.9 and Red Hat build of Keycloak 24.0.9 Operator, running on OpenShift Container Platform. Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift...

openstack-tripleo-common: RHOSP Director Disables TLS Verification for Registry Mirrors

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform RHOSP director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a...

openstack-tripleo-common: RHOSP Director Disables TLS Verification for Registry Mirrors

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform RHOSP director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a...

Low: Red Hat Security Advisory: Updated service-interconnect rhel9 container images for 1.4 LTS

Updated service-interconnect container images are now available for Service Interconnect 1.4 LTS for RHEL 9. Users of service-interconnect 1.4 LTS rhel9 container images are advised to upgrade to these updated images, which contain backported patches to correct security issues and fix bugs. Users...

Inside the Booming ‘AI Pimping’ Industry

AI-generated influencers based on stolen images of real-life adult content creators are flooding social media...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.41 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

Exploit for Allocation of Resources Without Limits or Throttling in Vmware Spring_Framework

Spring CVE-2022-22970 Proof of Concept This repo contains...

RLSA-2024:9051 Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN...

CVE-2024-11075

A vulnerability in the Incoming Goods Suite allows a user with unprivileged access to the underlying system e.g. local or via SSH a privilege escalation to the administrative level due to the usage of component vendor Docker images running with root permissions. Exploiting this misconfiguration...

CVE-2024-11075

The CVE-2024-11075 entry concerns SICK’s Incoming Goods Suite. The description attributes privilege escalation to the use of component vendor Docker images running with root permissions, enabling an unprivileged user with local access to gain administrative control over the system. Affected produ...

CVE-2024-11075 SICK Incoming Goods Suite privilege escalation vulnerability

A vulnerability in the Incoming Goods Suite allows a user with unprivileged access to the underlying system e.g. local or via SSH a privilege escalation to the administrative level due to the usage of component vendor Docker images running with root permissions. Exploiting this misconfiguration...

CVE-2024-11075 SICK Incoming Goods Suite privilege escalation vulnerability

A vulnerability in the Incoming Goods Suite allows a user with unprivileged access to the underlying system e.g. local or via SSH a privilege escalation to the administrative level due to the usage of component vendor Docker images running with root permissions. Exploiting this misconfiguration...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.5 security update

Red Hat OpenShift Container Platform release 4.17.5 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

Moderate: Red Hat Security Advisory: buildah security update

An update for buildah is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.3.4 security and bug fix update

OpenShift API for Data Protection OADP 1.3.4 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

PT-2024-8846 · Sick Ag · Sick Ag Products

Name of the Vulnerable Software and Affected Versions: Incoming Goods Suite affected versions not specified SICK AG products affected versions not specified Description: A vulnerability in the Incoming Goods Suite and SICK AG products allows a user with unprivileged access to the underlying syste...

Maintenance update for SUSE Manager 4.3 Release Notes

Description: This update fixes the following issues: release-notes-susemanager-proxy: Update to SUSE Manager 4.3.14 Bugs mentioned: bsc1217003, bsc1221505, bsc1225619, bsc1225960, bsc1226917 bsc1227606, bsc1228036, bsc1228345, bsc1228851, bsc1229079 bsc1229260, bsc1229339 Security update for SUSE...

Qualys released QScanner – a console vulnerability scanner for container images

QualysreleasedQScanner - a console vulnerability scanner for container images. Feed it an image and get a list of vulnerabilities a la Trivy. It supports: " Local Runtimes: Scan images from Docker, Containerd, or Podman. Local Archives: Analyze Docker images or OCI layouts from local files. Remot...