Cloud & Orchestration
Microsandbox Security Update Addresses 1 Vulnerability
Microsandbox before 0.5.10 can expose host-side secrets in process arguments to local users or co-resident processes. Upgrade affected runtimes, replace running sandboxes and assess credential rotation; patching does not revoke previously exposed secrets.
NVIDIA Infrastructure Controller 2.0 Fixes Fourteen Flaws
NVIDIA Infrastructure Controller for Linux needs the supported controller update addressing fourteen vulnerabilities. Inventory the deployed release, update through NVIDIA's infra-controller repository, and confirm the replacement software is actually running.
OpenStack Octavia Fixes HAProxy Configuration Injection
An authenticated load-balancer owner can inject HAProxy configuration through Octavia's Amphora provider and reach root on the amphora. Check provider and branch, then verify the supported package contains both fixes; other provider drivers are outside this scope.
Apache Airflow 3.3.2 Fixes Authorization and Token Handling
Airflow fixes separate asset-event disclosure, cookie/bearer identity confusion and logout token-revocation failures. Match each issue's version and permissions, update the deployment, and validate event visibility and authentication behavior with authorized test accounts.