podman security update

5.2.2-1.0.2 - Bump epoch to ensure upgrade path Orabug: 37240207 5.2.2-1.0.1 - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount Orabug: 36234694 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 2:5.2.2-1 - update to...

RHSA-2024:8984 Red Hat Security Advisory: OpenShift Container Platform 4.17.4 packages and security update

Bulletin has no description...

RHSA-2024:8700 Red Hat Security Advisory: OpenShift Container Platform 4.14.40 packages and security update

Bulletin has no description...

RHSA-2024:8694 Red Hat Security Advisory: OpenShift Container Platform 4.12.68 security update

Bulletin has no description...

RHSA-2024:8690 Red Hat Security Advisory: OpenShift Container Platform 4.13.53 packages and security update

Bulletin has no description...

buildah: Buildah allows arbitrary directory mount

A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a RUN instruction in a Container file to mount an arbitrary directory from the host read/write into the container as long as those files can...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.38 bug fix and security update

Red Hat OpenShift Container Platform release 4.15.38 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

Making Sense of Kubernetes Initial Access Vectors Part 2 - Data Plane

Learn about Kubernetes data plane access, including applications running on the cluster, container images, and execution-as-a-service workload types...

RHSA-2024:8846 Red Hat Security Advisory: container-tools:rhel8 security update

Bulletin has no description...

CVE-2022-45157 Exposure of vSphere's CPI and CSI credentials in Rancher

A vulnerability has been identified in the way that Rancher stores vSphere's CPI Cloud Provider Interface and CSI Container Storage Interface credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext...

buildah: Buildah allows arbitrary directory mount

A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a RUN instruction in a Container file to mount an arbitrary directory from the host read/write into the container as long as those files can...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.4 packages and security update

Red Hat OpenShift Container Platform release 4.17.4 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

[SECURITY] Fedora 41 Update: golang-github-nvidia-container-toolkit-1.16.2-1.fc41

The NVIDIA Container Toolkit allows users to build and run NVIDIA GPU accelerated containers. The toolkit includes a container runtime library and utilities to automatically configure containers to leverage NVIDIA GPUs...

[SECURITY] Fedora 40 Update: golang-github-nvidia-container-toolkit-1.16.2-1.fc40

The NVIDIA Container Toolkit allows users to build and run NVIDIA GPU accelerated containers. The toolkit includes a container runtime library and utilities to automatically configure containers to leverage NVIDIA GPUs...

RHEL 8 / 9 : OpenShift Container Platform 4.17.4 (RHSA-2024:8984)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8984 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

Fedora 40 : golang-github-nvidia-container-toolkit (2024-8c218846ee)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-8c218846ee advisory. Update to 1.16.2 Fixes CVE-2024-0132 or GHSA-mjjw-553x-87pq, and CVE-2024-0133 or GHSA-f748-7hpg-88ch Tenable has extracted the preceding descriptio...

Fedora: Security Advisory (FEDORA-2024-8c218846ee)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

shaderc:glslc_fuzzer: Container-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, glslang::pool_allocato

Project: https://github.com/google/shaderc.git Detailed Report: https://oss-fuzz.com/testcase?key=4916925462806528 Project: shaderc Fuzzing Engine: afl Fuzz Target: glslcfuzzer Job Type: aflasanshaderc Platform Id: linux Crash Type: Container-overflow READ 1 Crash Address: 0x525000bd1ac0 Crash...

buildah: Buildah allows arbitrary directory mount

A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a RUN instruction in a Container file to mount an arbitrary directory from the host read/write into the container as long as those files can...

Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host...