text4shell-policy

Text4Shell デモ このデモでは、Sigstore を使用して、署名された SBOM を Kubernetes またはコマンドライン上で text4shell ポリシーに対して検証する方法を示します。 オプション 1: cosign 2.0 の cue を使用してリモート OCI イメージが影響を受けているか確認する root@kitploit: cosign verify-attestation --policy policy/text4shell.cue --type https://cyclonedx.org/bom...

CVE-2026-53492

containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during container restoration. When restoring a container from a...

github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface CRI implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during...