Summary
Ein Angreifer kann mehrere Schwachstellen in IBM MQ ausnutzen, um Dateien zu manipulieren und Sicherheitsmaßnahmen zu umgehen.
Product
IBM MQ ist eine Message Oriented Middleware von IBM.
Vulnerabilities 2
-
Medium 5.4
Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library
A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the sy…
-
Low 3.6
runc can be confused to create empty files/directories on the host
runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by shar…
Revision history
-
#4
Neue Updates von openSUSE aufgenommen
-
#3
Neue Updates von SUSE aufgenommen
-
#2
Neue Updates von IBM aufgenommen
-
#1
Initiale Fassung
References
-
IBM Security Bulletin 7228945 vom 2025-03-24
https://www.ibm.com/support/pages/node/7228945
-
IBM Security Bulletin 7185049 vom 2025-03-28
https://www.ibm.com/support/pages/node/7185049
-
SUSE Security Update SUSE-SU-2025:20335-1 vom 2025-05-29
https://lists.suse.com/pipermail/sle-security-updates/2025-May/020971.html
-
openSUSE Security Update OPENSUSE-SU-2026:10842-1 vom 2026-05-24
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RA6PKGM4RN2T2DFSXXNZRPYQVODGU2NO/