GHSA-VWCJ-R8V9-P53F vulnerabilities

Vulnerabilities for packages: kyverno, gitea, falco-no-driver, flux, cilium-cli, step-ca, cert-manager, k6, loki, hugo-extended, rclone, kine, kots, wuzz, hubble, spire-server, runc, kubernetes, kaf, prometheus-operator, containerd, external-dns, telegraf, k8s-device-plugin, minio,...

Oracle Linux 8 : container-tools:ol8 (ELSA-2026-89760)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89760 advisory. - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Rebuild for CVE-2026-78667 - rebuild with updated ...

OPENSUSE-SU-2026:12225-1 fuse-overlayfs-1.18-1.1 on GA media

These are all security issues fixed in the fuse-overlayfs-1.18-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-122460

These are all security issues fixed in the fuse-overlayfs-1.18-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-122449

These are all security issues fixed in the fuse-overlayfs-1.18-1.1 package on the GA media of openSUSE Tumbleweed...

Rocky Linux 8.6 [CIQ] Security Update: fuse-overlayfs / fuse-overlayfs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0048)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260048 advisory. This advisory aggregates security fixes for the fuse-overlayfs SRPM in CIQ LTS 8.6. It addresses 33 CVEs: CVE-2018-25091, CVE-2024-34155, CVE-2021-33198,...

Rocky Linux 8.8 [CIQ] Security Update: fuse-overlayfs / fuse-overlayfs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0801)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260801 advisory. This advisory aggregates security fixes for the fuse-overlayfs SRPM in CIQ LTS 8.8. It addresses 39 CVEs: CVE-2020-10756, CVE-2021-3592, CVE-2021-3593,...

Rocky Linux 8.6 [CIQ] Security Update: fuse-overlayfs / fuse-overlayfs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0847)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260847 advisory. This advisory aggregates security fixes for the fuse-overlayfs SRPM in CIQ LTS 8.6. It addresses 37 CVEs: CVE-2021-36221, CVE-2021-41190, CVE-2022-1705,...

Rocky Linux 8.6 [CIQ] Security Update: fuse-overlayfs / fuse-overlayfs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0905)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260905 advisory. This advisory aggregates security fixes for the fuse-overlayfs SRPM in CIQ LTS 8.6. It addresses 20 CVEs: CVE-2022-2989, CVE-2022-2990, CVE-2022-41723,...

Rocky Linux 8.6 [CIQ] Security Update: fuse-overlayfs Multiple Vulnerabilities (ciqsa-2026_1305)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261305 advisory. This advisory aggregates security fixes for the fuse-overlayfs SRPM in CIQ LTS 8.6. It addresses 5 CVEs: CVE-2025-52881, CVE-2025-6032, CVE-2025-9566,...

Rocky Linux 8.6 [CIQ] Security Update: fuse-overlayfs / fuse-overlayfs-debuginfo / etc (ciqsa-2026_1085)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261085 advisory. This advisory aggregates security fixes for the fuse-overlayfs SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding...

MGASA-2026-0462 Updated fuse-overlayfs package fixes security vulnerabilities

fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/openOTRUNC. CVE-2026-52791 Operations on hardlinked lower-layer files resolving to the wrong layer. CVE-2026-77478...

Updated fuse-overlayfs package fixes security vulnerabilities

fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/openOTRUNC. CVE-2026-52791 Operations on hardlinked lower-layer files resolving to the wrong layer. CVE-2026-77478...

GHSA-PG57-6JWG-Q645 vulnerabilities

Vulnerabilities for packages: skaffold, grype, falco-no-driver, wolfictl, manifest-tool, dagger, trivy-operator, kubescape-operator, chartmuseum, neuvector-scanner, cluster-api-helm-controller, xeol, helm-mapkubeapis, kube-arangodb, syft, trivy, headlamp, zarf, kubevela, docker-compose, steampipe...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: skaffold, grype, falco-no-driver, wolfictl, manifest-tool, dagger, trivy-operator, kubescape-operator, chartmuseum, neuvector-scanner, cluster-api-helm-controller, xeol, helm-mapkubeapis, kube-arangodb, syft, trivy, headlamp, zarf, kubevela, docker-compose, steampipe...

SUSE SLES15 Security Update : fuse-overlayfs (SUSE-SU-2026:4026-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4026-1 advisory. This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: Privilege Escalation Vulnerability via SUID/SGID Bit Preservatio...

SUSE CVE-2026-89560

In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCKACCESSFSMAKEREG for whiteout creation Whiteout objects are used in the upper layer of an OverlayFS to indicate that the file with this name does not exist in the unified view, even if it is present in on...

DEBIAN-CVE-2026-89560

In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCKACCESSFSMAKEREG for whiteout creation Whiteout objects are used in the upper layer of an OverlayFS to indicate that the file with this name does not exist in the unified view, even if it is present in on...

CVE-2026-89560: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCKACCESSFSMAKEREG for whiteout creation Whiteout objects are used in the upper layer of an OverlayFS to indicate that the file with this name does not exist in the unified view, even if it is present in on...

openSUSE 16 Security Update : fuse-overlayfs (openSUSE-SU-2026:21753-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21753-1 advisory. This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: privilege escalation due to SUID/SGID bit preservation after truncate...