Mesosphere Marathon Web UI Public WAN (Internet) / Public LAN Accessible

The script checks if the Mesosphere Marathon Web UI is accessible from a public WAN Internet / public LAN. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Important kernel security update: CVE-2018-3639 (x86 AMD) and other issues; new kernel 2.6.32-042stab132.1 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0

This update provides a new kernel 2.6.32-042stab132.1 for Virtuozzo Containers for Linux 4.7 and Server Bare Metal 5.0 that is a rebase to the Red Hat Enterprise Linux 6.10 kernel 2.6.32-754.2.1.el6. The new kernel introduces security fixes. Vulnerability id: CVE-2018-3639 x86 AMD An industry-wid...

[SECURITY] Fedora 28 Update: singularity-2.5.2-1.fc28

Singularity provides functionality to make portable containers that can be used across host environments...

[SECURITY] Fedora 27 Update: singularity-2.5.2-1.fc27

Singularity provides functionality to make portable containers that can be used across host environments...

[SECURITY] Fedora 27 Update: podman-0.6.4-1.gitd5beb2f.fc27

Manage Pods, Containers and Container Images libpod provides a library for applications looking to use the Container Pod concept popularized by Kubernetes...

Privilege Escalation

github.com/projectatomic/libpod is vulnerable to privilege escalation attack. The vulnerability exists because it does not limit the capabilities of containers executed by non-root users in the default setting, resulting in the container running with higher privileges than required...

PT-2018-10144 · Red Hat · Podman

Name of the Vulnerable Software and Affected Versions: podman versions prior to 0.6.1 Description: The issue arises from podman not dropping capabilities when a container is executed as a non-root user, resulting in unnecessary privileges being granted to the container. Recommendations: For...

[SECURITY] Fedora 28 Update: podman-0.6.4-1.gitd5beb2f.fc28

Manage Pods, Containers and Container Images libpod provides a library for applications looking to use the Container Pod concept popularized by Kubernetes...

RHEL 7 : podman (RHSA-2018:2037)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:2037 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods...

podman: Containers run as non-root users do not drop capabilities

It has been discovered that podman does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container...

Moderate: Red Hat Security Advisory: podman security update

An update for podman is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

[SECURITY] Fedora 28 Update: cri-o-1.10.3-1.gite558bd5.fc28

Kubernetes Container Runtime Interface for OCI-based containers...

[SECURITY] Fedora 27 Update: cri-o-1.10.3-1.gite558bd5.fc27

Kubernetes Container Runtime Interface for OCI-based containers...

Important kernel security update: CVE-2018-10675 and other issues; new kernel 2.6.32-042stab131.1 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0

This update provides a new kernel 2.6.32-042stab131.1 for Virtuozzo Containers for Linux 4.7 and Server Bare Metal 5.0 that is a rebase to the Red Hat Enterprise Linux 6.10 kernel 2.6.32-754.el6. The new kernel introduces security and stability fixes. Vulnerability id: CVE-2018-10675 The...

22K Open, Vulnerable Containers Found Exposed on the Net

More than 22,000 container orchestration and API management systems are unprotected or publicly available on the internet – highlighting the reality of the risks of operating workloads in the cloud. According to research from Lacework, the containers Kubernetes, Mesos, Docker Swarms and more suff...

Apple macOS Bug Reveals Cache of Sensitive Data from Encrypted Drives

Security researchers are warning of almost a decade old issue with one of the Apple's macOS feature which was designed for users' convenience but is potentially exposing the contents of files stored on password-protected encrypted drives. Earlier this month, security researcher Wojciech Regula fr...

Apple macOS Bug Reveals Cache of Sensitive Data from Encrypted Drives

Security researchers are warning of almost a decade old issue with one of the Apple's macOS feature which was designed for users' convenience but is potentially exposing the contents of files stored on password-protected encrypted drives. Earlier this month, security researcher Wojciech Regula fr...

[SECURITY] Fedora 28 Update: singularity-2.5.1-1.fc28

Singularity provides functionality to make portable containers that can be used across host environments...

[SECURITY] Fedora 27 Update: singularity-2.5.1-1.fc27

Singularity provides functionality to make portable containers that can be used across host environments...

Qualys Security Conference Virtual 2018. New Agents, Patch Management and Free Services

Today I attended a very interesting online event - Qualys Security Conference Virtual 2018. It consisted of 11 webinars, began at 18:00 and will end at 03:45 Moscow time. Not the most convenient timing for Russia, but it was worth it. Last time I was at offline QSC event in 2016, so for me it was...