CVE-2019-11255

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.2.22 runc security update

Red Hat OpenShift Container Platform release 4.2.22 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which...

runc: volume mount race condition with shared mounts leads to information leak/integrity manipulation

A flaw was found in runc. An attacker who controls the container image for two containers that share a volume can race volume mounts during container initialization, by adding a symlink to the rootfs that points to a directory on the volume. The highest threat from this vulnerability is to data...

March 10, 2020—KB4540694 (Security-only update)

None None...

March 10, 2020—KB4541505 (Security-only update)

None None...

March 10, 2020—KB4541510 (Monthly Rollup)

None None...

Red Hat LVM2 Memory Corruption Vulnerability

LVM2 is an open source logical volume manager. A security vulnerability in vglookup in the daemons/lvmetad/lvmetad-core.c file in Red Hat LVM2 version 2.02 stems from the program failing to properly manage memory. An attacker could exploit this vulnerability to disclose lvmetad memory...

Debian DLA-2114-1 : linux-4.9 security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2018-13093, CVE-2018-13094 Wen Xu from SSLab at Gatech reported several NULL pointer dereference flaws that may be triggered when mounting and...

[SECURITY] [DLA 2114-1] linux-4.9 security update

Package : linux-4.9 Version : 4.9.210-1deb8u1 CVE ID : CVE-2018-13093 CVE-2018-13094 CVE-2018-20976 CVE-2018-21008 CVE-2019-0136 CVE-2019-2215 CVE-2019-10220 CVE-2019-14615 CVE-2019-14814 CVE-2019-14815 CVE-2019-14816 CVE-2019-14895 CVE-2019-14896 CVE-2019-14897 CVE-2019-14901 CVE-2019-15098...

Updated opencontainers-runc packages fix security vulnerability

Updated opencontainers-runc package fixes security vulnerability: An attacker who controls the container image for two containers that share a volume can race volume mounts during container initialization, by adding a symlink to the rootfs that points to a directory on the volume CVE-2019-19921...

MGASA-2020-0103 Updated opencontainers-runc packages fix security vulnerability

Updated opencontainers-runc package fixes security vulnerability: An attacker who controls the container image for two containers that share a volume can race volume mounts during container initialization, by adding a symlink to the rootfs that points to a directory on the volume CVE-2019-19921...

February 25, 2020—KB4537807 (Preview of Monthly Rollup)

None None...

February 25, 2020—KB4537819 (Preview of Monthly Rollup)

None None...

CVE-2013-7324

Webkit-GTK 2.x any version with HTML5 audio/video support based on GStreamer allows remote attackers to trigger unexpectedly high sound volume via malicious javascript. NOTE: this WebKit-GTK behavior complies with existing W3C standards and existing practices for GNOME desktop integration...

Design/Logic Flaw

Webkit-GTK 2.x any version with HTML5 audio/video support based on GStreamer allows remote attackers to trigger unexpectedly high sound volume via malicious javascript. NOTE: this WebKit-GTK behavior complies with existing W3C standards and existing practices for GNOME desktop integration...

UBUNTU-CVE-2013-7324

Webkit-GTK 2.x any version with HTML5 audio/video support based on GStreamer allows remote attackers to trigger unexpectedly high sound volume via malicious javascript. NOTE: this WebKit-GTK behavior complies with existing W3C standards and existing practices for GNOME desktop integration...

CVE-2013-7324

WebKit-GTK 2.x (any version with HTML5 audio/video support based on GStreamer) is reported to allow remote attackers to trigger unexpectedly high sound volume through malicious JavaScript. The description notes this behavior complies with existing W3C standards and GNOME desktop integration pract...

CVE-2013-7324

Webkit-GTK 2.x any version with HTML5 audio/video support based on GStreamer allows remote attackers to trigger unexpectedly high sound volume via malicious javascript. NOTE: this WebKit-GTK behavior complies with existing W3C standards and existing practices for GNOME desktop integration...

openSUSE Security Update : docker-runc (openSUSE-2020-219)

This update for docker-runc fixes the following issues : - CVE-2019-19921: Fixed a volume mount race condition with shared mounts bsc1160452. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

PT-2020-20414 · Linux · Lvm2

Name of the Vulnerable Software and Affected Versions: LVM2 version 2.02 Description: The issue is related to memory mismanagement in the vg lookup function in daemons/lvmetad/lvmetad-core.c, leading to a memory leak in lvmetad. This can be demonstrated by running the pvs command. Recommendations...