OPENSUSE-SU-2026:11197-1 apptainer-1.5.1-3.1 on GA media

These are all security issues fixed in the apptainer-1.5.1-3.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 43 Update: apptainer-1.5.2-1.fc43

Apptainer provides functionality to make portable containers that can be used across host environments...

[SECURITY] Fedora 44 Update: apptainer-1.5.2-1.fc44

Apptainer provides functionality to make portable containers that can be used across host environments...

Fedora 43 : apptainer (2026-f8ab642466)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f8ab642466 advisory. Update to upstream 1.5.2. Also fixes CVE-2026-27145 because golang was new enough. Tenable has extracted the preceding description block directly from the...

Fedora 44 : apptainer (2026-ca1825e29e)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ca1825e29e advisory. Update to upstream 1.5.2. Also fixes CVE-2026-27145 because golang was new enough. Tenable has extracted the preceding description block directly from the...

GHSA-CR2J-534F-MF3G Apptainer has incorrect path matching for 'limit container paths' directive

Impact The limit container paths directive in apptainer.conf is intended to allow a system administrator limit the paths from which containers can be run, under setuid mode. Due to incorrect matching of a path string, sibling directories with similar names may incorrectly be allowed. For example,...

SUSE SLES15 Security Update : apptainer (SUSE-SU-2026:2609-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2609-1 advisory. This update for apptainer fixes the following issues - CVE-2026-24137: github.com/sigstore/sigstore/pkg/tuf: legacy TUF client allows for...

Linux Distros Unpatched Vulnerability : CVE-2026-48785

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to an incorrect string prefix evaluation within the path-matching logic for the limit container paths directive in Apptainer, which...

[SECURITY] Fedora 43 Update: apptainer-1.5.1-1.fc43

Apptainer provides functionality to make portable containers that can be used across host environments...

openSUSE 16 Security Update : apptainer (openSUSE-SU-2026:20942-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20942-1 advisory. Changes in apptainer: - Update apptainer to version v1.5.1 Security fix bsc1267982: Fix for CVE-2026-48785 / GHSA-cr2j-534f-mf3g. Incorrect path matchin...

[SECURITY] Fedora 44 Update: apptainer-1.5.1-1.fc44

Apptainer provides functionality to make portable containers that can be used across host environments...

Fedora 44 : apptainer (2026-ff5370cd61)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ff5370cd61 advisory. Update to upstream 1.5.1. Fixes CVE-2026-48785 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 43 : apptainer (2026-77b4ea4fb8)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-77b4ea4fb8 advisory. Update to upstream 1.5.1. Fixes CVE-2026-48785 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

OPENSUSE-SU-2026:10993-1 apptainer-1.5.1-1.1 on GA media

These are all security issues fixed in the apptainer-1.5.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20942-1 Security update for apptainer

This update for apptainer fixes the following issues: Changes in apptainer: - Update apptainer to version v1.5.1 Security fix bsc1267982: Fix for CVE-2026-48785 / GHSA-cr2j-534f-mf3g. Incorrect path matching for limit container paths directive. This is only applicable to SUID installations that...

PT-2026-48933

Name of the Vulnerable Software and Affected Versions apptainer versions prior to 1.5.1 Description Incorrect path matching occurs within the limit container paths directive. This issue specifically affects SUID installations where paths listed in limit container paths are string prefixes of othe...

Security update for apptainer (important)

openSUSE security update: security update for apptainer ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20888-1 Rating: important References: bsc1266656 Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE : 7.4...

OPENSUSE-SU-2026:20888-1 Security update for apptainer

This update for apptainer fixes the following issues: Changes in apptainer: - CVE-2026-39821: Update golang.org/x/net to 0.55.0. bsc1266656 - Add improved handling of suid-starter: Add system group apptainer Make sure, only users belonging to this group are able to run the application. Document...

openSUSE 16 Security Update : apptainer (openSUSE-SU-2026:20834-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20834-1 advisory. Changes in apptainer: - Fix CVE-2026-39827, CVE-2026-39834, CVE-2026-39828, CVE-2026-39829, CVE-2026-39831, CVE-2026-42508, CVE-2026-39833,...

apptainer-1.4.5-6.1 on GA media (moderate)

apptainer-1.4.5-6.1 on GA media Announcement ID: openSUSE-SU-2026:10887-1 Rating: moderate Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-39821 SUSE : 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...