496 matches found
CVE-2025-62596: UNIX Symbolic Link (Symlink) Following
Youki is a container runtime written in Rust. In versions 0.5.6 and below, youki’s apparmor handling performs insufficiently strict write-target validation, and when combined with path substitution during pathname resolution, can allow writes to unintended procfs locations. While resolving a path...
CVE-2025-62596 youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects
Youki is a container runtime written in Rust. In versions 0.5.6 and below, youki’s apparmor handling performs insufficiently strict write-target validation, and when combined with path substitution during pathname resolution, can allow writes to unintended procfs locations. While resolving a path...
EUVD-2025-37938
Youki is a container runtime written in Rust. In versions 0.5.6 and below, youki’s apparmor handling performs insufficiently strict write-target validation, and when combined with path substitution during pathname resolution, can allow writes to unintended procfs locations. While resolving a path...
PT-2025-45166
Name of the Vulnerable Software and Affected Versions Youki versions 0.5.6 and below Description Youki is a container runtime written in Rust. Insufficient initial validation of the /dev/null source allows for container escape when bind mounting the container's /dev/null as a file mask. This occu...
[SECURITY] Fedora 43 Update: runc-1.3.2-1.fc43
The runc command can be used to start containers which are packaged in accordance with the Open Container Initiative's specifications, and to manage containers running under runc...
[SECURITY] Fedora 43 Update: cri-o1.34-1.34.1-1.fc43
Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...
[SECURITY] Fedora 42 Update: runc-1.3.2-1.fc42
The runc command can be used to start containers which are packaged in accordance with the Open Container Initiative's specifications, and to manage containers running under runc...
[SECURITY] Fedora 41 Update: cri-o1.33-1.33.5-1.fc41
Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...
[SECURITY] Fedora 41 Update: cri-o1.31-1.31.13-1.fc41
Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...
[SECURITY] Fedora 42 Update: cri-o1.32-1.32.9-1.fc42
Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...
[SECURITY] Fedora 42 Update: cri-o1.34-1.34.1-1.fc42
Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...
Fedora 42 : cri-o1.31 (2025-51d26ffda5)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-51d26ffda5 advisory. - Update to release v1.31.13 - Resolves: rhbz2333357, rhbz2398406, rhbz2398661, rhbz2399063, rhbz2399337 - Upstream fix Tenable has extracted the...
Fedora 42 : cri-o1.32 (2025-37970906a8)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-37970906a8 advisory. - Update to release 1.32.9 - Resolves: rhbz2333357, rhbz2398407, rhbz2398662, rhbz2399064, rhbz2399338 - Upstream fix Tenable has extracted the...
EUVD-2021-10321
Malware in sbrugna...
EUVD-2018-11857
Malware in sbrugna...
EUVD-2019-13411
Malware in sbrugna...
EUVD-2019-13410
Malware in sbrugna...
EUVD-2025-28020
Malicious code in bioql PyPI...