Fedora 42 : runc (2025-c4d00e29b7)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c4d00e29b7 advisory. Update to release v1.3.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

EUVD-2018-11828

Malware in sbrugna...

EUVD-2021-1034

Malware in sbrugna...

EUVD-2021-2563

Malware in sbrugna...

EUVD-2021-2523

Malware in sbrugna...

EUVD-2020-6452

Malware in sbrugna...

EUVD-2021-1060

Malware in sbrugna...

EUVD-2020-6450

Malware in sbrugna...

EUVD-2021-2591

Malware in sbrugna...

Fedora 44 : runc (2025-0022827a20)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-0022827a20 advisory. Automatic update for runc-1.3.2-1.fc44. Changelog Tue Oct 7 2025 Bradley G Smith - 2:1.3.2-1 - Update to release v1.3.2 - Resolves: rhbz2399284,...

EUVD-2023-1058

Malicious code in bioql PyPI...

EUVD-2022-3675

Malicious code in bioql PyPI...

EUVD-2022-0981

Malicious code in bioql PyPI...

EUVD-2024-2819

Malicious code in bioql PyPI...

EUVD-2023-1007

Malicious code in bioql PyPI...

EUVD-2023-1117

Malicious code in bioql PyPI...

Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities

Summary IBM Guardium Data Security Center has addressed these vulnerabilties with an update. Vulnerability Details CVEID:CVE-2021-43784 DESCRIPTION: runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is used internally as a...

Security Bulletin: Arbitrary File and Directory Creation via Volume Sharing Race Condition in runc , affects watsonx.data

Summary runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a volume between two...

Linux Distros Unpatched Vulnerability : CVE-2022-29162

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to version 1.1.2 where runc ex...

GHSA-J26P-6WX7-F3PW Youki: If /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem.

Summary If /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem. Details For security reasons, container creation should be prohibited if /proc or /sys in the rootfs is a symbolic link. I verified this behavior with youki...