200 matches found
CVE-2026-48785 Apptainer: Incorrect path matching for 'limit container paths' directive
Apptainer is an open source container platform. Prior to version 1.5.1, Image.AuthorizedPath applies plain string-prefix matching to the limit container paths directive in apptainer.conf, so an allowed path such as /data/safe also authorizes a sibling path such as /data/safe-but-unsafe. A local...
CVE-2026-48785
Apptainer is an open source container platform. Prior to version 1.5.1, Image.AuthorizedPath applies plain string-prefix matching to the limit container paths directive in apptainer.conf, so an allowed path such as /data/safe also authorizes a sibling path such as /data/safe-but-unsafe. A local...
CVE-2026-48785
In Apptainer (open-source container platform) prior to v1.5.1 , the limit container paths directive in apptainer.conf uses plain string-prefix matching in Image.AuthorizedPath. This means an allowed path such as /data/safe also authorizes a sibling like /data/safe-but-unsafe, allowing a local use...
Security update for apptainer
This update for apptainer fixes the following issue: CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276731. Patch Instructions: To install this SUSE update use the SUSE recommended installation method...
apptainer-1.5.3-3.1 on GA media (moderate)
apptainer-1.5.3-3.1 on GA media Announcement ID: openSUSE-SU-2026:11664-1 Rating: moderate Cross-References: CVE-2026-41178 CVSS scores: CVE-2026-41178 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...
OPENSUSE-SU-2026:11664-1 apptainer-1.5.3-3.1 on GA media
These are all security issues fixed in the apptainer-1.5.3-3.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-85165
These are all security issues fixed in the apptainer-1.5.3-3.1 package on the GA media of openSUSE Tumbleweed...
Security update for apptainer
This update for apptainer fixes the following issue: CVE-2026-17106: github.com/moby/go-archive: tar extraction routines do not confine filesystem operations to the destination directory and allow for arbitrary file writes bsc1275248. Patch Instructions: To install this SUSE update use the SUSE...
SUSE-SU-2026:3863-1 Security update for apptainer
This update for apptainer fixes the following issue: - CVE-2026-17106: github.com/moby/go-archive: tar extraction routines do not confine filesystem operations to the destination directory and allow for arbitrary file writes bsc1275248...
openSUSE 16 Security Update : apptainer (openSUSE-SU-2026:21611-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21611-1 advisory. Changes in apptainer: - Update github.com/moby/go-archive to v0.3.0 to fix CVE-2026-17106: The tar extraction routines in moby/go-archive do not confine...
Security update for apptainer (important)
openSUSE security update: security update for apptainer ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21611-1 Rating: important References: bsc1275248 Cross-References: CVE-2026-17106 CVSS scores: CVE-2026-17106 SUSE : 7.1...
OPENSUSE-SU-2026:21611-1 Security update for apptainer
This update for apptainer fixes the following issues: Changes in apptainer: - Update github.com/moby/go-archive to v0.3.0 to fix CVE-2026-17106: The tar extraction routines in moby/go-archive do not confine filesystem operations to the destination directory. A crafted archive can create or...
OPENSUSE-SU-2026:11544-1 apptainer-1.5.3-2.1 on GA media
These are all security issues fixed in the apptainer-1.5.3-2.1 package on the GA media of openSUSE Tumbleweed...
openSUSE 16 Security Update : apptainer (openSUSE-SU-2026:21499-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21499-1 advisory. Changes in apptainer: - Update to version 1.5.3: If the ptrace system call does not work while building an image as an unprivileged user, skip...
SUSE SLES15 Security Update : apptainer (SUSE-SU-2026:3417-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3417-1 advisory. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege...
Security update for apptainer
This update for apptainer fixes the following issues: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266656. CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid...
SUSE-SU-2026:3417-1 Security update for apptainer
This update for apptainer fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266656. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invali...
Security update for apptainer (important)
openSUSE security update: security update for apptainer ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21473-1 Rating: important References: bsc1266656 bsc1272115 Cross-References: CVE-2026-39821 CVE-2026-56852 CVSS scores: CVE-2026-39821 SUSE : 7....
OPENSUSE-SU-2026:21499-1 Security update for apptainer
This update for apptainer fixes the following issues: Changes in apptainer: - Update to version 1.5.3: If the ptrace system call does not work while building an image as an unprivileged user, skip using PRoot to preserve file ownership and print an INFO message. Bind getopt from the host when usi...