Fedora: Security Advisory for oci-seccomp-bpf-hook (FEDORA-2022-5038c3236c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: oci-seccomp-bpf-hook-1.2.6-2.fc36

OCI Hook to generate seccomp json files based on EBF syscalls used by contain er oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes...

Fedora: Security Advisory for golang-k8s-pod-security-admission (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-k8s-pod-security-admission-1.22.0-4.fc36

Kubernetes Pod Security Standards implementation...

[SECURITY] Fedora 36 Update: podman-4.1.1-3.fc36

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

Malicious Package

Overview pod-publishing-test is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

Malicious code in pod-publishing-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0009f40b84012f59aa5423c3fc367190efbd389b30b848fc85bd2ddcd5a63611 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora: Security Advisory for golang-k8s-pod-security-admission (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: golang-k8s-pod-security-admission-1.22.0-3.fc35

Kubernetes Pod Security Standards implementation...

Cilium host policy bypass in endpoint-routes mode with dual-stack

Impact This vulnerability allows bypassing host policies for IPv6 traffic coming from a Cilium-managed pod and destined to the host-network namespace e.g., to a host-network pod. Host policy enforcement on IPv4 or for traffic coming from outside the node is not affected. Cilium is only affected b...

Fedora: Security Advisory for golang-k8s-pod-security-admission (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-k8s-pod-security-admission-1.22.0-3.fc36

Kubernetes Pod Security Standards implementation...

kernel security and bug fix update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

CVE-2022-2238

A vulnerability was found in the search-api container when a query in the search filter gets parsed by the backend. This flaw allows an attacker to craft specific strings containing special characters that lead to crashing the pod and affects system availability while restarting...

Design/Logic Flaw

Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. A vulnerability in the logging of Weave GitOps could allow an authenticated remote attacker to view sensitive cluster configurations, aka KubeConfg, of...

CVE-2022-31098 Weave GitOps leaked cluster credentials into logs on connection errors

Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. A vulnerability in the logging of Weave GitOps could allow an authenticated remote attacker to view sensitive cluster configurations, aka KubeConfg, of...

MAL-2022-5392 Malicious code in pod-smartphone-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4871abc535226467611588874cd2d8858a140b4a2c5f82134459753587cd51e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pod-smartphone-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4871abc535226467611588874cd2d8858a140b4a2c5f82134459753587cd51e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pod-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80e090d39edd41df4974cec8d792fc8b2d94bc0b6e25d65438ca010ce8f4694d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5390 Malicious code in pod-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80e090d39edd41df4974cec8d792fc8b2d94bc0b6e25d65438ca010ce8f4694d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...