Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.22.1 product release

The components for Red Hat OpenShift for Windows Containers 10.22.1 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack in the WCOW cache mount source selector, which resolves NTFS junctions in the cache mount source path outside the intended cache root. A user who can author a build run by the daemon can read arbitrary host files reachabl...

EUVD-2022-41297

Malicious code in bioql PyPI...

Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.19.0 product release

The components for Red Hat OpenShift for Windows Containers 10.19.0 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

Moderate: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.16.2 product release

The components for Red Hat OpenShift for Windows Containers 10.16.2 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.17.1 product release

The components for Red Hat OpenShift for Windows Containers 10.17.1 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.18.1 product release

The components for Red Hat OpenShift for Windows Containers 10.18.1 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a security restrictions bypass in Kubernetes kubelet [CVE-2024-5321]

Summary IBM Watson Speech Services Cartridge is vulnerable to a security restrictions bypass in Kubernetes kubelet, caused by incorrect permissions on Windows containers logs CVE-2024-5321. Kubernetes is included as part of the speech utilities used in our product. This vulnerabilitiy has been...

(RHSA-2024:7436) Moderate: Red Hat OpenShift for Windows Containers 10.17.0 product release

Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

Moderate: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 7.2.2 product release [security update]

The components for Red Hat OpenShift for Windows Containers 7.2.2 are now available.This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle. Red Hat Product Security has rated this update a...

Moderate: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 8.1.3 product release & security update

The components for Red Hat OpenShift for Windows Containers 8.1.3 are now available. This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle. Red Hat Product Security has rated this update ...

(RHSA-2024:5749) Moderate: Red Hat OpenShift for Windows Containers 10.16.1 product release

Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

(RHSA-2024:5745) Moderate: Red Hat OpenShift for Windows Containers 10.15.3 product release

Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

Fedora 40 : kubernetes (2024-30f39c25ae)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-30f39c25ae advisory. Update to v1.29.7 for FC40. Resolves CVE-2024-5321: Incorrect permissions on Windows containers logs. Additional bug and regression fixes from upstream...

GO-2024-2994 Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes...

CVE-2024-5321 Incorrect permissions on Windows containers logs

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs...

CVE-2024-5652

In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode...

Moderate: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 8.1.2 security update

The components for Red Hat OpenShift for Windows Containers 8.1.2 are now available. This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle. Red Hat Product Security has rated this update ...

Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 9.0.1 security update

The components for Red Hat OpenShift for Windows Containers 9.0.1 are now available. This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle. Red Hat Product Security has rated this update ...

Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.15.0 security update

The components for Red Hat OpenShift for Windows Containers 10.15.0 are now available. This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle. Red Hat Product Security has rated this updat...