openSUSE 16 Security Update : apptainer (openSUSE-SU-2026:21499-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21499-1 advisory. Changes in apptainer: - Update to version 1.5.3: If the ptrace system call does not work while building an image as an unprivileged user, skip...

SUSE SLES15 Security Update : apptainer (SUSE-SU-2026:3417-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3417-1 advisory. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege...

Security update for apptainer

This update for apptainer fixes the following issues: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266656. CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid...

SUSE-SU-2026:3417-1 Security update for apptainer

This update for apptainer fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266656. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invali...

Security update for apptainer (important)

openSUSE security update: security update for apptainer ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21473-1 Rating: important References: bsc1266656 bsc1272115 Cross-References: CVE-2026-39821 CVE-2026-56852 CVSS scores: CVE-2026-39821 SUSE : 7....

OPENSUSE-SU-2026:21499-1 Security update for apptainer

This update for apptainer fixes the following issues: Changes in apptainer: - Update to version 1.5.3: If the ptrace system call does not work while building an image as an unprivileged user, skip using PRoot to preserve file ownership and print an INFO message. Bind getopt from the host when usi...

PT-2026-65068

These are all security issues fixed in the apptainer-1.5.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11374-1 apptainer-1.5.3-1.1 on GA media

These are all security issues fixed in the apptainer-1.5.3-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : apptainer (openSUSE-SU-2026:21276-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21276-1 advisory. Changes in apptainer: - Enable building of SUID starter for SLES 15 jscPED-16347. Security fix for CVE-2026-2303 bsc1270529: Heap Out-of-Bounds Read in...

OPENSUSE-SU-2026:21276-1 Security update for apptainer

This update for apptainer fixes the following issues: Changes in apptainer: - Enable building of SUID starter for SLES 15 jscPED-16347. Security fix for CVE-2026-2303 bsc1270529: Heap Out-of-Bounds Read in GSSAPI Error Handling in go.mongodb.org/mongo-driver. The dependency on mongo-driver has be...

apptainer-1.5.1-3.1 on GA media (moderate)

apptainer-1.5.1-3.1 on GA media Announcement ID: openSUSE-SU-2026:11197-1 Rating: moderate Cross-References: CVE-2026-2303 CVSS scores: CVE-2026-2303 SUSE : 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

GO-2026-5805 Apptainer has incorrect path matching for 'limit container paths' directive in github.com/apptainer/apptainer

Apptainer has incorrect path matching for 'limit container paths' directive in github.com/apptainer/apptainer...

OPENSUSE-SU-2026:11197-1 apptainer-1.5.1-3.1 on GA media

These are all security issues fixed in the apptainer-1.5.1-3.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 43 Update: apptainer-1.5.2-1.fc43

Apptainer provides functionality to make portable containers that can be used across host environments...

[SECURITY] Fedora 44 Update: apptainer-1.5.2-1.fc44

Apptainer provides functionality to make portable containers that can be used across host environments...

Fedora 43 : apptainer (2026-f8ab642466)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f8ab642466 advisory. Update to upstream 1.5.2. Also fixes CVE-2026-27145 because golang was new enough. Tenable has extracted the preceding description block directly from the...

Fedora 44 : apptainer (2026-ca1825e29e)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ca1825e29e advisory. Update to upstream 1.5.2. Also fixes CVE-2026-27145 because golang was new enough. Tenable has extracted the preceding description block directly from the...

GHSA-CR2J-534F-MF3G Apptainer has incorrect path matching for 'limit container paths' directive

Impact The limit container paths directive in apptainer.conf is intended to allow a system administrator limit the paths from which containers can be run, under setuid mode. Due to incorrect matching of a path string, sibling directories with similar names may incorrectly be allowed. For example,...

SUSE SLES15 Security Update : apptainer (SUSE-SU-2026:2609-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2609-1 advisory. This update for apptainer fixes the following issues - CVE-2026-24137: github.com/sigstore/sigstore/pkg/tuf: legacy TUF client allows for...

Linux Distros Unpatched Vulnerability : CVE-2026-48785

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to an incorrect string prefix evaluation within the path-matching logic for the limit container paths directive in Apptainer, which...