161 matches found
USN-4031-1 linux, linux-hwe vulnerability
It was discovered that the Linux kernel did not properly separate certain memory mappings when creating new userspace processes on 64-bit Power ppc64el systems. A local attacker could use this to access memory contents or cause memory corruption of other processes on the system...
CVE-2019-10145
rkt through version 1.30.0 does not isolate processes in containers that are run with rkt enter. Processes run with rkt enter do not have seccomp filtering during stage 2 the actual environment in which the applications run. Compromised containers could exploit this flaw to access host resources...
CVE-2019-10144
rkt through version 1.30.0 does not isolate processes in containers that are run with rkt enter. Processes run with rkt enter are given all capabilities during stage 2 the actual environment in which the applications run. Compromised containers could exploit this flaw to access host resources...
CVE-2019-10145
rkt through version 1.30.0 does not isolate processes in containers that are run with rkt enter. Processes run with rkt enter do not have seccomp filtering during stage 2 the actual environment in which the applications run. Compromised containers could exploit this flaw to access host resources...
CVE-2019-10144
rkt through version 1.30.0 does not isolate processes in containers that are run with rkt enter. Processes run with rkt enter are given all capabilities during stage 2 the actual environment in which the applications run. Compromised containers could exploit this flaw to access host resources...
Design/Logic Flaw
rkt through version 1.30.0 does not isolate processes in containers that are run with rkt enter. Processes run with rkt enter do not have seccomp filtering during stage 2 the actual environment in which the applications run. Compromised containers could exploit this flaw to access host resources...
Design/Logic Flaw
rkt through version 1.30.0 does not isolate processes in containers that are run with rkt enter. Processes run with rkt enter are not limited by cgroups during stage 2 the actual environment in which the applications run. Compromised containers could exploit this flaw to access host resources...
CVE-2019-10145
CVE-2019-10145 affects rkt up to version 1.30.0. The issue: containers started with rkt enter do not isolate processes and lack seccomp filtering during stage 2, allowing a compromised container to access host resources. Documents consistently describe the vulnerability without providing explicit...
CVE-2019-10145
rkt through version 1.30.0 does not isolate processes in containers that are run with rkt enter. Processes run with rkt enter do not have seccomp filtering during stage 2 the actual environment in which the applications run. Compromised containers could exploit this flaw to access host resources...
CVE-2019-10144
CVE-2019-10144 affects rkt up to version 1.30.0. In containers started with rkt enter, processes are granted all capabilities during stage 2, which could allow compromised containers to access host resources. The connected documents confirm the root cause is lack of isolation in this scenario and...
USN-3645-2: Firefox regression
USN-3645-1 fixed vulnerabilities in Firefox. The update caused an issue where users experienced long UI pauses in some circumsances. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were...
[SECURITY] Fedora 23 Update: lxc-2.0.6-2.fc23
Linux Resource Containers provide process and resource isolation without the overhead of full virtualization...
[SECURITY] Fedora 24 Update: lxc-2.0.6-2.fc24
Linux Resource Containers provide process and resource isolation without the overhead of full virtualization...
[SECURITY] Fedora 25 Update: lxc-2.0.6-2.fc25
Linux Resource Containers provide process and resource isolation without the overhead of full virtualization...
The performance benefits of rel=noopener
If you have links to another origin, you should use rel="noopener", especially if they open in a new tab/window. Example site Without this, the new page can access your window object via window.opener. Thankfully the origin security model of the web prevents it reading your page, but no-thankfull...
[SECURITY] Fedora 21 Update: lxc-1.0.7-4.fc21
Linux Resource Containers provide process and resource isolation without the overhead of full virtualization...
[SECURITY] Fedora 23 Update: lxc-1.1.4-2.fc23
Linux Resource Containers provide process and resource isolation without the overhead of full virtualization...
[SECURITY] Fedora 21 Update: lxc-1.0.7-2.fc21
Linux Resource Containers provide process and resource isolation without the overhead of full virtualization...