Design/Logic Flaw

rkt through version 1.30.0 does not isolate processes in containers that are run with rkt enter. Processes run with rkt enter are not limited by cgroups during stage 2 the actual environment in which the applications run. Compromised containers could exploit this flaw to access host resources...

Design/Logic Flaw

rkt through version 1.30.0 does not isolate processes in containers that are run with rkt enter. Processes run with rkt enter do not have seccomp filtering during stage 2 the actual environment in which the applications run. Compromised containers could exploit this flaw to access host resources...

CVE-2019-10145

CVE-2019-10145 affects rkt up to version 1.30.0. The issue: containers started with rkt enter do not isolate processes and lack seccomp filtering during stage 2, allowing a compromised container to access host resources. Documents consistently describe the vulnerability without providing explicit...

CVE-2019-10145

rkt through version 1.30.0 does not isolate processes in containers that are run with rkt enter. Processes run with rkt enter do not have seccomp filtering during stage 2 the actual environment in which the applications run. Compromised containers could exploit this flaw to access host resources...

CVE-2019-10144

CVE-2019-10144 affects rkt up to version 1.30.0. In containers started with rkt enter, processes are granted all capabilities during stage 2, which could allow compromised containers to access host resources. The connected documents confirm the root cause is lack of isolation in this scenario and...

USN-3645-2: Firefox regression

USN-3645-1 fixed vulnerabilities in Firefox. The update caused an issue where users experienced long UI pauses in some circumsances. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were...

[SECURITY] Fedora 23 Update: lxc-2.0.6-2.fc23

Linux Resource Containers provide process and resource isolation without the overhead of full virtualization...

[SECURITY] Fedora 24 Update: lxc-2.0.6-2.fc24

Linux Resource Containers provide process and resource isolation without the overhead of full virtualization...

[SECURITY] Fedora 25 Update: lxc-2.0.6-2.fc25

Linux Resource Containers provide process and resource isolation without the overhead of full virtualization...

The performance benefits of rel=noopener

If you have links to another origin, you should use rel="noopener", especially if they open in a new tab/window. Example site Without this, the new page can access your window object via window.opener. Thankfully the origin security model of the web prevents it reading your page, but no-thankfull...

[SECURITY] Fedora 21 Update: lxc-1.0.7-4.fc21

Linux Resource Containers provide process and resource isolation without the overhead of full virtualization...

[SECURITY] Fedora 23 Update: lxc-1.1.4-2.fc23

Linux Resource Containers provide process and resource isolation without the overhead of full virtualization...

[SECURITY] Fedora 21 Update: lxc-1.0.7-2.fc21

Linux Resource Containers provide process and resource isolation without the overhead of full virtualization...

[SECURITY] Fedora 22 Update: lxc-1.1.2-2.fc22

Linux Resource Containers provide process and resource isolation without the overhead of full virtualization...

[SECURITY] Fedora 23 Update: lxc-1.1.2-2.fc23

Linux Resource Containers provide process and resource isolation without the overhead of full virtualization...

security flaw

The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the stat...