Important: Red Hat Security Advisory: Red Hat build of Kueue 1.4.3 release

Red Hat build of Kueue 1.4.3 release The Red Hat build of Kueue is an optional operator, based on Kueue upstream, to enable the installation of Kueue on Openshift. Kueue is a queueing framework for managing Kubernetes workloads. This release is based on Kueue v0.18.11...

AIOstack

AI 에이전트는 항상 권한이 있는 것처럼 보입니다. AIOStack은 그렇지 않을 때를 알려줍니다. AI 에이전트는 사용자를 대신하여 작업합니다. 실제 자격 증명을 사용하고, 실제 API 호출을 수행하며, 도구를 호출하고, API에 접근하고, 프로덕션 시스템을 건드립니다. 대부분의 보안 도구는 이 활동을 합법적인 것으로 간주합니다. 기술적으로는 그렇기 때문입니다. 실제 문제는 권한 없는 접근만이 아닙니다. 더 큰 문제는 런타임에 권한 있는 접근이 부적절해질 때 입니다. AIOStack은 Aurva의 AI 워크로드를 위한 무료...

sysflow

SysFlow: 클라우드 네이티브 시스템 텔레메트리 파이프라인 이 저장소는 모든 SysFlow 프로젝트에 대한 문서와 이슈 트래커를 호스팅합니다. 빠른 참조 문서 : SysFlow 문서 도움말 : SysFlow 커뮤니티 Slack 이슈 제출 : GitHub 이슈 트래커 설명 출처 : 저장소 README 히스토리 Docker 이미지 : Docker Hub | GHCR SysFlow란? SysFlow 텔레메트리 파이프라인은 클라우드 워크로드를 모니터링하고 성능 및 보안 분석을 생성하기 위한 프레임워크입니다. 이 프로젝트의 목표는...

log4shell-cloud-scanner

.. image:: images/Mitigalogo.png 소개 저희는 DevOps 및 보안 팀이 AWS 계정 내에서 Log4j 취약점log4shell에 취약할 수 있는 클라우드 워크로드를 식별할 수 있는 스크립트를 제공합니다. 현재 "CVE-2021-44228" 및 "CVE-2021-45046" RCE 취약점을 지원합니다. 이 스크립트를 통해 보안 팀은 익스플로잇을 실행하여 외부에 노출된 AWS 자산을 식별하고, 이를 매핑하여 신속하게 패치할 수 있습니다. 일반 정보 CVE-2021-44228에 대한 정보:...

PacketStreamer

PacketStreamer Deepfence PacketStreamer는 고성능 원격 패킷 캡처 및 수집 도구입니다. Deepfence의 ThreatStryker 보안 관찰 가능성 플랫폼에서 법의학 분석을 위해 클라우드 워크로드의 네트워크 트래픽을 온디맨드로 수집하는 데 사용됩니다. 주요 설계 목표: 가볍게 유지, 캡처 및 스트리밍, 추가 처리 없음 이식성, 가상 머신, Kubernetes 및 AWS Fargate 에서 작동. Linux 및 Windows PacketStreamer 센서 는 대상 서버에서 시작됩니다. 센서는...

iron-proxy

iron-proxy The problem CI jobs, AI coding agents, and sandboxed containers can make arbitrary outbound requests. A compromised dependency, a prompt injection, or a malicious build step can exfiltrate secrets, phone home, or open a reverse shell. Most teams have zero visibility into what's leaving...

CVE-2026-97422

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix SMI event cross-process information leak kfdsmievenabled skips the suser privilege check when pid=0. PROCESSSTART, PROCESSEND, and VMFAULT events are emitted with pid=0 while carrying another process's PID and...

AZL-103589 CVE-2026-97422 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix SMI event cross-process information leak kfdsmievenabled skips the suser privilege check when pid=0. PROCESSSTART, PROCESSEND, and VMFAULT events are emitted with pid=0 while carrying another process's PID and...

DEBIAN-CVE-2026-97422

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix SMI event cross-process information leak kfdsmievenabled skips the suser privilege check when pid=0. PROCESSSTART, PROCESSEND, and VMFAULT events are emitted with pid=0 while carrying another process's PID and...

UBUNTU-CVE-2026-97422

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix SMI event cross-process information leak kfdsmievenabled skips the suser privilege check when pid=0. PROCESSSTART, PROCESSEND, and VMFAULT events are emitted with pid=0 while carrying another process's PID and...

EUVD-2026-86035

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix SMI event cross-process information leak kfdsmievenabled skips the suser privilege check when pid=0. PROCESSSTART, PROCESSEND, and VMFAULT events are emitted with pid=0 while carrying another process's PID and...

PT-2026-98056

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix SMI event cross-process information leak kfd smi ev enabled skips the suser privilege check when pid=0. PROCESS START, PROCESS END, and VMFAULT events are emitted with pid=0 while carrying another process's PID an...

Linux Distros Unpatched Vulnerability : CVE-2026-97422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: fix SMI event cross-process information leak kfdsmievenabled skips the suser privilege check when pid=0. PROCESSSTART, PROCESSEND, and VMFAULT event...

CVE-2026-97422: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix SMI event cross-process information leak kfdsmievenabled skips the suser privilege check when pid=0. PROCESSSTART, PROCESSEND, and VMFAULT events are emitted with pid=0 while carrying another process's PID and...

SUSE CVE-2026-73842

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.3, 1.1.3, and 1.2.0-rc.2, internal/cluster-gateway/server.go exposed /api/proxy/, /api/exec/, and /api/wirelogs/ on an internal listener without requiring a client certificate or token, allowing any...

Linux Distros Unpatched Vulnerability : CVE-2026-92503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix ABBA deadlock in ext4xattrinodecachefind Syzbot/stress-ng reported an ABBA deadlock in ext4 when exercising concurrent xattr workloads using the eaino...

Astra Linux – Vulnerability in OVN

A flaw was discovered in the Open Virtual Network OVN. In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from within unprivileged workloads, including virtual machines or containers, which can trigger a denial of...

firecracker v1.17.0

Our mission is to enable secure, multi-tenant, minimal-overhead execution of container and function workloads. Read more about the Firecracker Charter here. What is Firecracker? Firecracker is an open source virtualization technology that is purpose-built for creating and managing secure,...

Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.21.2 product release

The components for Red Hat OpenShift for Windows Containers 10.21.2 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9558: MDR: Post-upgrade 4.21 to 4.22 DRPolicy validation failure in Metro DR DFBUGS-9404: Backport to...