OPENSUSE-SU-2024:12430-1 docker-compose-2.12.2-1.1 on GA media

These are all security issues fixed in the docker-compose-2.12.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11579-1 docker-20.10.9_ce-1.2 on GA media

These are all security issues fixed in the docker-20.10.9ce-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13689-1 docker-24.0.7_ce-3.1 on GA media

These are all security issues fixed in the docker-24.0.7ce-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11647-1 docker-20.10.11_ce-1.1 on GA media

These are all security issues fixed in the docker-20.10.11ce-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10532-1 docker-1.12.3-4.1 on GA media

These are all security issues fixed in the docker-1.12.3-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12809-1 docker-compose-2.17.0-1.1 on GA media

These are all security issues fixed in the docker-compose-2.17.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12034-1 docker-20.10.14_ce-2.1 on GA media

These are all security issues fixed in the docker-20.10.14ce-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13469-1 docker-24.0.7_ce-2.1 on GA media

These are all security issues fixed in the docker-24.0.7ce-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10722-1 docker-20.10.6_ce-2.1 on GA media

These are all security issues fixed in the docker-20.10.6ce-2.1 package on the GA media of openSUSE Tumbleweed...

GO-2024-2913 Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker...

GO-2024-2914 Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Moby Docker Engine is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker...

airflow-docker (>=1.0.0, <=1.1.0) potentially affected by CVE-2024-25142 via apache-airflow (1.10.5)

apache-airflow PYPI version 1.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-docker =1.0.0, =1.1.0 Source cves: CVE-2024-25142 Source advisory: OSV:GHSA-9XPJ-62MM-24H2...

Cryptojacking Campaign Targets Misconfigured Kubernetes Clusters

Cybersecurity researchers have warned of an ongoing cryptojacking campaign targeting misconfigured Kubernetes clusters to mine Dero cryptocurrency. Cloud security firm Wiz, which shed light on the activity, said it's an updated variant of a financially motivated operation that was first documente...

Exploit for Incorrect Authorization in Cacti

CVE-2022-46169 - Unauthenticated Remote Code Execution in Cacti...

openSUSE Security Advisory (SUSE-SU-2024:1938-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 / openSUSE 15 Security Update : python-docker (SUSE-SU-2024:1938-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1938-1 advisory. - CVE-2024-35195: Fix failure with updated python-requests. bsc1224788 Tenable has extracted the preceding description block directly from...

Moderate: buildah security and bug fix update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...

Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing

Impact In the OCI Distribution Specification version 1.0.0 and prior and in the OCI Image Specification version 1.0.1 and prior, manifest and index documents are ambiguous without an accompanying Content-Type HTTP header. Versions of Moby Docker Engine prior to 20.10.11 treat the Content-Type...

GHSA-XMMX-7JPF-FX42 Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing

Impact In the OCI Distribution Specification version 1.0.0 and prior and in the OCI Image Specification version 1.0.1 and prior, manifest and index documents are ambiguous without an accompanying Content-Type HTTP header. Versions of Moby Docker Engine prior to 20.10.11 treat the Content-Type...

Docker CLI leaks private registry credentials to registry-1.docker.io

Impact A bug was found in the Docker CLI where running docker login my-private-registry.example.com with a misconfigured configuration file typically /.docker/config.json listing a credsStore or credHelpers that could not be executed would result in any provided credentials being sent to...