Huawei EulerOS: Security Advisory for docker-runc (EulerOS-SA-2024-2979)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for docker-runc (EulerOS-SA-2024-2934)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for docker-runc (EulerOS-SA-2024-2949)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: Updated 8.0 container image is now available in the Red Hat Ecosystem Catalog.

Updated rhceph-8.0 container image is now available in the Red Hat Ecosystem Catalog. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support...

CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1

CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1. An upgraded version of the package is available that resolves this issue...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.8 security update

Red Hat OpenShift Container Platform release 4.17.8 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

GStreamer 缓冲区错误漏洞

GStreamer is an open source set of frameworks for processing streaming media from GStreamer. A buffer error vulnerability exists in GStreamer versions prior to 1.24.10, which stems from an out-of-bounds read vulnerability found in the qtdemuxparsecontainer function in qtdemux.c. The vulnerability...

Exploit for Incorrect Authorization in Buddypress

사용법 1. docker를 build하여 취약한 wordpress, buddypress 환경을 구성한다...

Improper Authorization

github.com/cri-o/cri-o is vulnerable to Improper Authorization. The vulnerability is due to insufficient validation during container restoration, allowing a malicious user to restore a pod without proper access to host mounts by exploiting the checkpoint restore process...

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host.

...

Updated kubernetes packages fix security vulnerabilities

A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures...

CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1

CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-21571

CVE-2024-21571 involves a remote code execution (RCE) in all versions of Code Agent. The vulnerability allows arbitrary code execution inside the Code Agent container. Exploitation requires network access to the Code Agent within the deployment environment. External exploitation is considered unl...

UBUNTU-CVE-2024-6156

Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store...

CVE-2024-21571: Improper Control of Generation of Code

Snyk has identified a remote code execution RCE vulnerability in all versions of Code Agent. The vulnerability enables an attacker to execute arbitrary code within the Code Agent container. Exploiting this vulnerability would require an attacker to have network access to the Code Agent within the...

Snyk Code Agent 安全漏洞

Snyk Code Agent is an agent from Snyk open source. A security vulnerability exists in Snyk Code Agent. An attacker exploiting this vulnerability could execute arbitrary code inside the Code Agent container...

PT-2024-18964

Name of the Vulnerable Software and Affected Versions Code Agent versions all Description A remote code execution vulnerability has been identified, enabling an attacker to execute arbitrary code within the Code Agent container. Exploiting this issue requires an attacker to have network access to...

RHSA-2024:10535 Red Hat Security Advisory: OpenShift Container Platform 4.12.70 security update

Bulletin has no description...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.70 security update

Red Hat OpenShift Container Platform release 4.12.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

runc: file descriptor leak

A file descriptor leak issue was found in the runc package. While a user performs OCLOEXEC all file descriptors before executing the container code, the file descriptor is open when performing setcwd2, which means that the reference can be kept alive in the container by configuring the working...