8821 matches found
Public Bug Bounty Takes Aim at Kubernetes Container Project
A public bug-bounty program for the Kubernetes container technology framework has just launched, backed by Google, HackerOne and the Cloud Native Computing Foundation CNCF. The Kubernetes container-orchestration system was originally built by Google for automating application deployment, scaling...
January 14, 2020—KB4534297 (Monthly Rollup)
None None...
January 14, 2020—KB4534309 (Security-only update)
None None...
January 14, 2020—KB4534273 (OS Build 17763.973)
None None...
January 14, 2020—KB4534283 (Monthly Rollup)
None None...
[SECURITY] Fedora 31 Update: kubernetes-1.15.7-1.fc31
Container cluster management...
[SECURITY] Fedora 31 Update: slurm-19.05.5-1.fc31
Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...
Fedora Update for kubernetes FEDORA-2020-943f4b03d2
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 30 Update: slurm-19.05.5-1.fc30
Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...
Security Bulletin: A security vulnerability has been identified in Kubernetes shipped with PowerAI Vision
Summary Multiple vulnerabilities CVE-2019-11249, CVE-2019-11247 found in Kubernetes package. Vulnerability Details CVEID: CVE-2019-11249 DESCRIPTION: The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the...
NewStart CGSL CORE 5.05 / MAIN 5.05 : fence-agents Vulnerability (NS-SA-2019-0226)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has fence-agents packages installed that are affected by a vulnerability: - A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause...
Security Bulletin: IBM Watson Studio - Local allows mounting glusterFS without security check
Summary Watson Studio Local was allowing glusterFS mounting without any authorization. As long as the user had access to the same network, they could mount gluster volumes in any cluster. Internal implementation has been changed to check for permission before glusterFS mounting is allowed...
Kubernetes: Man in the middle using LoadBalancer or ExternalIPs services
I rated this vulnerability as high because trying to rate it with CVSS v3.0 Calculator gives me 9.9 which seems way too high as you do require to be able to create services in the K8S cluster. Summary: This report details 2 ways to man in the middle traffic by: a creating a LoadBalancer service a...
The vulnerability of the Kubernetes cluster management software lies in insufficient validation of input data, allowing attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Kubernetes cluster management software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Platform Cluster Manager Standard Edition, IBM Platform Cluster Manager Advanced Edition, Platform HPC, and Spectrum Cluster Foundation.
Summary There are multiple vulnerabilities in IBMRuntime Environment JavaVersion 7 used by IBM Platform Cluster Manager Standard Edition, IBM Platform Cluster Manager Advanced Edition, Platform HPC, and Spectrum Cluster Foundation. IBM Platform Cluster Manager Standard Edition, IBM Platform Clust...
EulerOS 2.0 SP3 : fence-agents (EulerOS-SA-2019-2577)
According to the version of the fence-agents packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would...
The vulnerability of the e2fsprogs utility for working with ext2, ext3, and ext4 file systems lies in the ability to write beyond the cluster boundaries, allowing an attacker to execute arbitrary code.
The vulnerability of the e2fsprogs utility for working with ext2, ext3, and ext4 file systems is related to writing beyond the cluster boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
December 10, 2019—KB4530698 (Security-only update)
None None...