GO-2023-2412 vulnerabilities

Vulnerabilities for packages: kubevela, eksctl, up, helm-push, kaniko, kubescape, flux-source-controller, newrelic-infrastructure-agent, fuse-overlayfs-snapshotter, grype, k3d, cilium-cli, zot, melange, gitness, ctop, buildkitd, trivy, skaffold, k8sgpt, flux-helm-controller, kots, helm...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, terraform, rke2-runtime-fips, k8s-device-plugin, fuse-overlayfs-snapshotter, backup-restore-operator, gendesk, etcd, etcd-fips, runc, wuzz, gitness, aws-load-balancer-controller, cilium-envoy, rke2-runtime, cilium-envoy-fips, k3s,...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: consul, beats, vault, kine, cloudbeat-fips, elastic-agent-fips, rke2-runtime-fips, datadog-agent, frankenphp-8.5, containerd, mattermost, vault-fips, datadog-agent-fips, fuse-overlayfs-snapshotter, commercial-grafana, cloudbeat, elastic-agent, loki, zot, beats-fips,...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, terraform, rke2-runtime-fips, k8s-device-plugin, fuse-overlayfs-snapshotter, backup-restore-operator, gendesk, etcd, etcd-fips, runc, wuzz, gitness, aws-load-balancer-controller, cilium-envoy, rke2-runtime, cilium-envoy-fips, k3s,...

GO-2026-5942 vulnerabilities

Vulnerabilities for packages: syncthing-fips, rancher-agent, virt-api, net-kourier-fips, sops-fips, sftpgo, crossplane-provider-aws-appsync-fips, backup-restore-operator, opentelemetry-operator-fips, databricks-cli, istio, coder-fips, fleet-server, omnictl-multiarch-fips, gitlab-runner-fips,...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: datadog-agent, kine, loki, zot, fuse-overlayfs-snapshotter, k3s, containerd...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: cilium-cli, k3d, grype, newrelic-infrastructure-agent, kubescape, flux-helm-controller, skaffold, up, zot, k8sgpt, fuse-overlayfs-snapshotter, flux-source-controller, helm, eksctl, gitness, ctop, trivy, kubevela, helm-push, buildkitd, kots, kaniko, melange...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: wuzz, k8s-device-plugin, gitness, runc, fuse-overlayfs-snapshotter, k3s, aws-load-balancer-controller...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: wuzz, k8s-device-plugin, gitness, runc, fuse-overlayfs-snapshotter, k3s, aws-load-balancer-controller...

OPENSUSE-SU-2026:11461-1 fuse-overlayfs-1.17-1.1 on GA media

These are all security issues fixed in the fuse-overlayfs-1.17-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 44 Update: fuse-overlayfs-1.17-1.fc44

FUSE overlay+shiftfs implementation for rootless containers...

SUSE CVE-2026-52791

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...

Fedora 44 : fuse-overlayfs (2026-4e0490640f)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4e0490640f advisory. Update to fuse-overlayfs 1.17 to fix CVE-2026-52791: privilege escalation via SUID/SGID bit preservation on file truncation. When a file with SUID/SGID bits ...

CVE-2026-52791

A flaw was found in fuse-overlayfs, a component used for rootless containers. This vulnerability allows a low-privileged process to retain SUID Set User ID and SGID Set Group ID permissions on files after they are truncated or opened with the OTRUNC flag. This can enable a local attacker to...

CVE-2026-52791

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...

UBUNTU-CVE-2026-52791

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...

CVE-2026-52791

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...

CVE-2026-52791 fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC)

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...

CVE-2026-52791 fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC)

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...

CVE-2026-52791 fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC)

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...