RLSA-2025:10550 Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: podman: podman missing TLS verification CVE-2025-6032 For more details about the security...

EUVD-2022-46886

Malicious code in bioql PyPI...

EUVD-2024-37282

Malicious code in bioql PyPI...

EUVD-2023-1092

Malicious code in bioql PyPI...

EUVD-2023-59161

Malicious code in bioql PyPI...

EUVD-2024-32522

Malicious code in bioql PyPI...

EUVD-2022-46885

Malicious code in bioql PyPI...

EUVD-2023-27876

Malicious code in bioql PyPI...

EUVD-2023-59191

Malicious code in bioql PyPI...

EUVD-2025-8026

Malicious code in bioql PyPI...

EUVD-2025-16049

Malicious code in bioql PyPI...

EUVD-2022-0652

Malicious code in bioql PyPI...

EUVD-2023-2468

Malicious code in bioql PyPI...

[SECURITY] Fedora 41 Update: prometheus-podman-exporter-1.18.1-1.fc41

Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...

[SECURITY] Fedora 42 Update: prometheus-podman-exporter-1.18.1-1.fc42

Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...

[SECURITY] Fedora 43 Update: prometheus-podman-exporter-1.18.1-1.fc43

Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...

CVE-2025-59358

The Chaos Controller Manager in Chaos Mesh exposes a GraphQL debugging server without authentication to the entire Kubernetes cluster, which provides an API to kill arbitrary processes in any Kubernetes pod, leading to cluster-wide denial of service...

[SECURITY] Fedora 42 Update: podman-5.6.1-1.fc42

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

AWS VDP: Existence of completed pods allows for bypass of Kubernetes NetworkPolicy

Description The Amazon VPC CNI controller, when configured to manage NetworkPolicy rules, will incorrectly apply firewall rules for Completed pods as if the pods are still running, causing these rules to be applied to other unrelated pods that happen to receive the same IP address as a Completed...

This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable.

...