70 matches found
whalescan
Whalescan Escáner de vulnerabilidades para contenedores de Windows. Primeros pasos git clone https://github.com/saira-h/whalescan pip install -r requirements.txt python main.py Descripción general Whalescan realiza varias comprobaciones de referencia, así como la verificación de CVEs. Esta...
whalescan
Whalescan Released as open source by NCC Group Plc - https://www.nccgroup.com/ Developed by Saira Hassan @saibersaira https://github.com/nccgroup/whalescan Released under Apache license 2.0, see LICENSE for more information Introduction Whalescan is a vulnerability scanner for Windows containers,...
Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.21.2 product release
The components for Red Hat OpenShift for Windows Containers 10.21.2 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...
Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.22.1 product release
The components for Red Hat OpenShift for Windows Containers 10.22.1 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...
github.com/moby/buildkit: BuildKit: Information Disclosure via Improper Handling of NTFS Directory Junctions
A flaw was found in BuildKit. An untrusted user, when authoring a build on a Windows Container on Windows WCOW configured BuildKit daemon, can exploit a vulnerability in the cache mount source selector. This flaw allows the user to read arbitrary files from the host system, leading to information...
github.com/moby/buildkit: BuildKit: Information Disclosure via Improper Handling of NTFS Directory Junctions
A flaw was found in BuildKit. An untrusted user, when authoring a build on a Windows Container on Windows WCOW configured BuildKit daemon, can exploit a vulnerability in the cache mount source selector. This flaw allows the user to read arbitrary files from the host system, leading to information...
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack in the WCOW cache mount source selector, which resolves NTFS junctions in the cache mount source path outside the intended cache root. A user who can author a build run by the daemon can read arbitrary host files reachabl...
EUVD-2022-41297
Malicious code in bioql PyPI...
Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.19.0 product release
The components for Red Hat OpenShift for Windows Containers 10.19.0 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...
Moderate: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.16.2 product release
The components for Red Hat OpenShift for Windows Containers 10.16.2 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...
Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.17.1 product release
The components for Red Hat OpenShift for Windows Containers 10.17.1 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...
Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.18.1 product release
The components for Red Hat OpenShift for Windows Containers 10.18.1 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a security restrictions bypass in Kubernetes kubelet [CVE-2024-5321]
Summary IBM Watson Speech Services Cartridge is vulnerable to a security restrictions bypass in Kubernetes kubelet, caused by incorrect permissions on Windows containers logs CVE-2024-5321. Kubernetes is included as part of the speech utilities used in our product. This vulnerabilitiy has been...
(RHSA-2024:7436) Moderate: Red Hat OpenShift for Windows Containers 10.17.0 product release
Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...
Moderate: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 7.2.2 product release [security update]
The components for Red Hat OpenShift for Windows Containers 7.2.2 are now available.This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle. Red Hat Product Security has rated this update a...
Moderate: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 8.1.3 product release & security update
The components for Red Hat OpenShift for Windows Containers 8.1.3 are now available. This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle. Red Hat Product Security has rated this update ...
Moderate: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.16.1 product release
The components for Red Hat OpenShift for Windows Containers 10.16.1 are now available. This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle. Red Hat Product Security has rated this updat...
Moderate: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.15.3 product release
The components for Red Hat OpenShift for Windows Containers 10.15.3 are now available. This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle. Red Hat Product Security has rated this updat...
Fedora 40 : kubernetes (2024-30f39c25ae)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-30f39c25ae advisory. Update to v1.29.7 for FC40. Resolves CVE-2024-5321: Incorrect permissions on Windows containers logs. Additional bug and regression fixes from upstream...
