whalescan

Whalescan Vulnerability scanner for windows containers. Getting Started git clone https://github.com/saira-h/whalescan pip install -r requirements.txt python main.py Overview Whalescan performs several benchmark checks, as well as checking for CVEs. This tool can be used as part of a windows...

whalescan

Whalescan Released as open source by NCC Group Plc - https://www.nccgroup.com/ Developed by Saira Hassan @saibersaira https://github.com/nccgroup/whalescan Released under Apache license 2.0, see LICENSE for more information Introduction Whalescan is a vulnerability scanner for Windows containers,...

Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.20.2 product release

The components for Red Hat OpenShift for Windows Containers 10.20.2 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.19.3 product release

The components for Red Hat OpenShift for Windows Containers 10.19.3 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.21.2 product release

The components for Red Hat OpenShift for Windows Containers 10.21.2 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.22.1 product release

The components for Red Hat OpenShift for Windows Containers 10.22.1 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

github.com/moby/buildkit: BuildKit: Information Disclosure via Improper Handling of NTFS Directory Junctions

A flaw was found in BuildKit. An untrusted user, when authoring a build on a Windows Container on Windows WCOW configured BuildKit daemon, can exploit a vulnerability in the cache mount source selector. This flaw allows the user to read arbitrary files from the host system, leading to information...

github.com/moby/buildkit: BuildKit: Information Disclosure via Improper Handling of NTFS Directory Junctions

A flaw was found in BuildKit. An untrusted user, when authoring a build on a Windows Container on Windows WCOW configured BuildKit daemon, can exploit a vulnerability in the cache mount source selector. This flaw allows the user to read arbitrary files from the host system, leading to information...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack in the WCOW cache mount source selector, which resolves NTFS junctions in the cache mount source path outside the intended cache root. A user who can author a build run by the daemon can read arbitrary host files reachabl...

EUVD-2022-41297

Malicious code in bioql PyPI...

Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.19.0 product release

The components for Red Hat OpenShift for Windows Containers 10.19.0 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

Moderate: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.16.2 product release

The components for Red Hat OpenShift for Windows Containers 10.16.2 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.17.1 product release

The components for Red Hat OpenShift for Windows Containers 10.17.1 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.18.1 product release

The components for Red Hat OpenShift for Windows Containers 10.18.1 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a security restrictions bypass in Kubernetes kubelet [CVE-2024-5321]

Summary IBM Watson Speech Services Cartridge is vulnerable to a security restrictions bypass in Kubernetes kubelet, caused by incorrect permissions on Windows containers logs CVE-2024-5321. Kubernetes is included as part of the speech utilities used in our product. This vulnerabilitiy has been...

(RHSA-2024:7436) Moderate: Red Hat OpenShift for Windows Containers 10.17.0 product release

Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

Moderate: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 7.2.2 product release [security update]

The components for Red Hat OpenShift for Windows Containers 7.2.2 are now available.This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle. Red Hat Product Security has rated this update a...

Moderate: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 8.1.3 product release & security update

The components for Red Hat OpenShift for Windows Containers 8.1.3 are now available. This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle. Red Hat Product Security has rated this update ...

Moderate: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.16.1 product release

The components for Red Hat OpenShift for Windows Containers 10.16.1 are now available. This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle. Red Hat Product Security has rated this updat...

Moderate: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.15.3 product release

The components for Red Hat OpenShift for Windows Containers 10.15.3 are now available. This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle. Red Hat Product Security has rated this updat...