PT-2025-13791

Name of the Vulnerable Software and Affected Versions AWS Serverless Application Model Command Line Interface SAM CLI versions prior to 1.134.0 Description The issue arises when a build is completed with AWS Serverless Application Model Command Line Interface SAM CLI that includes symlinks. The...

CVE-2025-30463: Exposure of Sensitive Information to an Unauthorized Actor

The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data...

CVE-2025-3048: UNIX Symbolic Link (Symlink) Following

After completing a build with AWS Serverless Application Model Command Line Interface SAM CLI which include symlinks, the content of those symlinks are copied to the cache of the local workspace as regular files or directories. As a result, a user who does not have access to those symlinks outsid...

SUSE CVE-2025-27612

libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in the spec of tenant container. The logic here adds the given capabilities to all capabilities of main container if prese...

SUSE CVE-2025-29922

kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and container workloads. Prior to 0.26.3, the identified vulnerability allows creating or deleting an object via the APIExport VirtualWorkspace in any arbitrary target workspace for pre-existing resources. By...

RHEL 8 / 9 : OpenShift Container Platform 4.17.22 (RHSA-2025:3061)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3061 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...

RHEL 8 : container-tools:rhel8 (RHSA-2025:3210)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3210 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes:...

RHEL 8 : container-tools:rhel8 (RHSA-2025:3175)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3175 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes:...

RHEL 9 : podman (RHSA-2025:3184)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3184 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods...

RHEL 8 : container-tools:rhel8 (RHSA-2025:3266)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3266 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes:...

RHEL 8 : container-tools:rhel8 (RHSA-2025:3268)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3268 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes:...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Open Container Initiative runc (CVE-2024-45310)

Summary A vulnerability in Open Container Initiative runc that is used by InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2024-45310 DESCRIPTION: Open Container Initiative runc could allow a remote attacker to bypass security restrictions, caused by a race condition...

[SECURITY] Fedora 41 Update: containerd-1.7.27-1.fc41

Containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

CVE-2024-55964

An issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL instance in the Appsmith image leads to remote command execution inside the Appsmith Docker container. The attacker must be able to access Appsmith, login to it, create a datasource, create a query against that...

RHSA-2025:3268 Red Hat Security Advisory: container-tools:rhel8 security update

Bulletin has no description...

RHSA-2025:3266 Red Hat Security Advisory: container-tools:rhel8 security update

Bulletin has no description...

RHSA-2025:3061 Red Hat Security Advisory: OpenShift Container Platform 4.17.22 packages and security update

Bulletin has no description...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.17.22 packages and security update

Red Hat OpenShift Container Platform release 4.17.22 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.48 security update

Red Hat OpenShift Container Platform release 4.15.48 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.22 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.22 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...