Threats Tagged 'cve-2024-45310'

This security update for cadvisor addresses multiple issues through a series of incremental version updates culminating in version 0.60.3. The updates include improvements in OOM watching, enhanced cgroup v2 memory metrics exposure, fixes for container handler tests, and resolution of a nil pointer dereference in Docker integration. Several dependencies were also updated to address security vulnerabilities, including a bump of x/net to 0.55. The update fixes known bugs and improves stability and metrics reporting for container environments.

This security update for Apptainer addresses multiple vulnerabilities, including CVE-2024-45310 and several CVE-2026 series issues. The update includes fixes for at least 13 CVEs and updates dependencies such as golang.org/x/crypto and golang.org/x/net to newer versions. The update also integrates vulnchecker optionally into the build process and synchronizes with the Factory version to ensure comprehensive vulnerability mitigation.

This security update for kubevirt addresses multiple vulnerabilities fixed in version 1.7.0. The issues include logic flaws causing denial of service, improper handling of symlinks leading to arbitrary file read/write, bypass of RBAC controls via TLS certificate validation errors, and potential impersonation of privileged components. These vulnerabilities collectively pose a high risk to confidentiality, integrity, and availability of the affected system. The update also includes other bug fixes and improvements.