58 matches found
Youki: If /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem.
Summary If /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem. Details For security reasons, container creation should be prohibited if /proc or /sys in the rootfs is a symbolic link. I verified this behavior with youki...
GHSA-J26P-6WX7-F3PW Youki: If /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem.
Summary If /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem. Details For security reasons, container creation should be prohibited if /proc or /sys in the rootfs is a symbolic link. I verified this behavior with youki...
CVE-2023-53076
No description is available for this CVE...
[SECURITY] Fedora 41 Update: buildah-1.38.1-1.fc41
The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...
[SECURITY] Fedora 40 Update: buildah-1.37.5-1.fc40
The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...
[SECURITY] Fedora 40 Update: podman-5.0.3-1.fc40
podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...
SUSE-SU-2024:1469-1 Security update for docker
This update for docker fixes the following issues: - CVE-2024-23651: Fixed arbitrary files write due to race condition on mounts bsc1219267 - CVE-2024-23652: Fixed insufficient validation of parent directory on mount bsc1219268 - CVE-2024-23653: Fixed insufficient validation on entitlement on...
[SECURITY] Fedora 36 Update: buildah-1.26.2-1.fc36
The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...
[SECURITY] Fedora 35 Update: buildah-1.23.3-2.fc35
The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...
[SECURITY] Fedora 33 Update: buildah-1.21.4-5.fc33
The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...
[SECURITY] Fedora 34 Update: buildah-1.20.1-4.fc34
The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...
[SECURITY] Fedora 33 Update: buildah-1.20.1-4.fc33
The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...
podman: environment variables leak between containers when started via Varlink or Docker-compatible REST API
An information disclosure flaw was found in containers/podman. When using the deprecated Varlink API or the Docker-compatible REST API, if multiple containers are created in a short duration, the environment variables from the first container leak into subsequent containers. This flaw allows an...
Install Apache Zeppelin and connect it to AWS Athena for data exploration, visualization and collaboration
Introduction Apache Zeppelin is a Web-based, open source, notebook system that enables data-driven, interactive data analytics and collaborative documents with SQL. At Imperva Research Group we use it on a daily basis to query data from the Threat Research Data Lake using AWS Athena query engine...
CVE-2020-7576
A vulnerability has been identified in Camstar Enterprise Platform All versions, Opcenter Execution Core All versions V8.2, Opcenter Execution Core V8.2. An authenticated user with the ability to create containers, packages or register defects could perform stored Cross-Site Scripting XSS attacks...
PT-2020-19633 · Siemens · Opcenter Execution Core +1
Name of the Vulnerable Software and Affected Versions: Camstar Enterprise Platform versions all Opcenter Execution Core versions prior to V8.2 Opcenter Execution Core version V8.2 Description: A stored Cross-Site Scripting XSS attack can be performed by an authenticated user with the ability to...
Red Hat OpenShift Enterprise Elevation of Privilege Vulnerability
Red Hat OpenShift is a platform-as-a-service cloud computing platform that builds, tests, deploys and runs applications. A security vulnerability in the container creation process in Red Hat OpenShift Enterprise allows an attacker to elevate privileges by submitting the image used for creation to...