cri-o: Default inheritable capabilities for linux container should be empty

A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby Docker Engine where containers started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs...

Security Bulletin: IBM Netezza as a Service is vulnerable to CVE-2022-0811

Summary IBM Netezza as a Service is vulnerable to arbitrary code execution as root on the cluster node due to CVE-2022-0811 although severity is low. Vulnerability is addressed by upgrading OCP version to 4.8.42. Vulnerability Details CVEID: CVE-2022-0811 DESCRIPTION: CRI-O could allow a remote...

GSD-2022-1003400 scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock

scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003396 scsi: lpfc: Fix call trace observed during I/O with CMF enabled

scsi: lpfc: Fix call trace observed during I/O with CMF enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1002856 btrfs: fix deadlock between concurrent dio writes when low on free data space

btrfs: fix deadlock between concurrent dio writes when low on free data space This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002840 scsi: lpfc: Fix call trace observed during I/O with CMF enabled

scsi: lpfc: Fix call trace observed during I/O with CMF enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002839 scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock

scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

o-bible.com Cross Site Scripting vulnerability OBB-2684795

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tel-o-fun.co.il Cross Site Scripting vulnerability OBB-2674646

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

AZL-39668 CVE-2022-29526 affecting package cri-o for versions less than 1.21.7-2

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible...

o-review.com Cross Site Scripting vulnerability OBB-2662347

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in o-ads-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e617444fa6eff36ff9ae61eef4ce48b59a35c4e7f8f9c6a26159b22bde1cb6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4992 Malicious code in o-ads-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e617444fa6eff36ff9ae61eef4ce48b59a35c4e7f8f9c6a26159b22bde1cb6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in o-cookie-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c2afb37a96b3b8571839e5b1086cd86c90d681149e61d58ca541b6bc2cf79d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4995 Malicious code in o-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 656f96d263183b67639a364665bcbc6f5ec7a73bca04af5336963724bdf8d53a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in o-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa01c0a676d541309335055fc92d44600bb8e0434908efe65fd45f100a77cb7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4994 Malicious code in o-cookie-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c2afb37a96b3b8571839e5b1086cd86c90d681149e61d58ca541b6bc2cf79d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4996 Malicious code in o-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa01c0a676d541309335055fc92d44600bb8e0434908efe65fd45f100a77cb7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4991 Malicious code in o-ads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fddcdd51b3f457d1b6c813c74ebafd8917c5ba226abce1761036485a0d97ffc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in o-ads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fddcdd51b3f457d1b6c813c74ebafd8917c5ba226abce1761036485a0d97ffc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...