text4shell-policy

Демонстрация Text4Shell Эта демонстрация показывает, как использовать Sigstore для проверки подписанных SBOM на соответствие политикам text4shell в Kubernetes или в командной строке Вариант 1: Проверить, затронут ли ваш удаленный OCI-образ, с помощью cue и cosign 2.0 cosign verify-attestation...

CVE-2026-53492

containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during container restoration. When restoring a container from a...

github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface CRI implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during...