openSUSE 16 Security Update : fuse-overlayfs (openSUSE-SU-2026:21753-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21753-1 advisory. This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: privilege escalation due to SUID/SGID bit preservation after truncate...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: skaffold, flux-source-controller, flux-helm-controller, newrelic-infrastructure-agent, eksctl, cilium-cli, buildkitd, helm-push, k8sgpt, zot, up, kaniko, kubevela, gitness, kubescape, melange, helm, grype, k3d, kots, ctop, fuse-overlayfs-snapshotter, trivy...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: rke2-runtime, terraform, backup-restore-operator, etcd, etcd-fips, runc, nvidia-gpu-operator-validator, k8s-device-plugin, cilium-envoy, gitness, kube-conformance, localstack, cilium-envoy-fips, gitlab-rails-ce, wuzz, fuse-overlayfs-snapshotter, rke2-runtime-fips,...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: rke2-runtime, terraform, backup-restore-operator, etcd, etcd-fips, runc, nvidia-gpu-operator-validator, k8s-device-plugin, cilium-envoy, gitness, kube-conformance, localstack, cilium-envoy-fips, gitlab-rails-ce, wuzz, fuse-overlayfs-snapshotter, rke2-runtime-fips,...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: consul-fips, cloudbeat-fips, datadog-agent, rke2-runtime, frankenphp-8.3, containerd, grafana-fips, mattermost-fips, elastic-agent-fips, kine, beats, zot, mattermost, elastic-agent, vault, cloudbeat, datadog-agent-fips, vault-fips, loki, frankenphp-8.5,...

GO-2026-5942 vulnerabilities

Vulnerabilities for packages: clickhouse-backup, gitlab-kas-fips, external-secrets-operator-fips, elastic-agent-fips, spicedb-operator-fips, ko-fips, opentelemetry-collector-contrib-fips, prometheus-redis-exporter, flux-kustomize-controller-fips, trino, metrics-server,...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: datadog-agent, containerd, loki, zot, k3s, fuse-overlayfs-snapshotter, kine...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: gitness, up, kubevela, fuse-overlayfs-snapshotter, kubescape, buildkitd, helm-push, kots, kaniko, skaffold, k8sgpt, grype, trivy, zot, newrelic-infrastructure-agent, k3d, helm, ctop, melange, flux-source-controller, flux-helm-controller, eksctl, cilium-cli...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: runc, gitness, aws-load-balancer-controller, k3s, k8s-device-plugin, fuse-overlayfs-snapshotter, wuzz...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: runc, gitness, aws-load-balancer-controller, k3s, k8s-device-plugin, fuse-overlayfs-snapshotter, wuzz...

OPENSUSE-SU-2026:11461-1 fuse-overlayfs-1.17-1.1 on GA media

These are all security issues fixed in the fuse-overlayfs-1.17-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 44 Update: fuse-overlayfs-1.17-1.fc44

FUSE overlay+shiftfs implementation for rootless containers...

SUSE CVE-2026-52791

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...

Fedora 44 : fuse-overlayfs (2026-4e0490640f)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4e0490640f advisory. Update to fuse-overlayfs 1.17 to fix CVE-2026-52791: privilege escalation via SUID/SGID bit preservation on file truncation. When a file with SUID/SGID bits ...

CVE-2026-52791

A flaw was found in fuse-overlayfs, a component used for rootless containers. This vulnerability allows a low-privileged process to retain SUID Set User ID and SGID Set Group ID permissions on files after they are truncated or opened with the OTRUNC flag. This can enable a local attacker to...

CVE-2026-52791

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...

AZL-94145 CVE-2026-52791 affecting package fuse-overlayfs 1.14-1

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...

UBUNTU-CVE-2026-52791

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...

CVE-2026-52791

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...

CVE-2026-52791 fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC)

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...