Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098907)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098907 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fusereffolio fusereffolio unlocks the request but doe...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098743)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098743 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: limit FUSENOTIFYRETRIEVE to uptodate folios FUSENOTIFYRETRIEVE must be limited to uptodate...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098899)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098899 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fusetrymovefolio unlocks the request on...

SUSE-SU-2026:23252-1 Security update for fuse-overlayfs

This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: Privilege Escalation Vulnerability via SUID/SGID Bit Preservation bsc1273100...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102038)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102038 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: limit FUSENOTIFYRETRIEVE to uptodate folios FUSENOTIFYRETRIEVE must be limited to uptodate...

ALPINE-CVE-2026-47187

SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local...

CVE-2026-47187

SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local...

AZL-97011 CVE-2026-47187 affecting package fuse-sshfs 3.7.3-1

SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local...

CVE-2026-47187 SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write

SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local...

CVE-2026-47187

SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local...

CVE-2026-47187: Improper Link Resolution Before File Access

SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101972)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101972 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fusereffolio fusereffolio unlocks the request but doe...

SUSE CVE-2026-68149

In the Linux kernel, the following vulnerability has been resolved: fs: preserve ACLDONTCACHE state in forgetcachedacl The ACLDONTCACHE state is meant to be a constant state for the inode for filesystems that want to opt out of posix acl caching. Commit facd61053cff1 "fuse: fixes after adapting t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100514 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fusereffolio fusereffolio unlocks the request but doe...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099935)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099935 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: reject fusenotify pagecache ops on directories The operations FUSENOTIFYSTORE and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100773)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100773 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: reject fusenotify pagecache ops on directories The operations FUSENOTIFYSTORE and...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: buildkitd, flux-helm-controller, newrelic-infrastructure-agent, grype, gitness, kots, kubescape, fuse-overlayfs-snapshotter, kubevela, ctop, k3d, skaffold, melange, k8sgpt, cilium-cli, up, flux-source-controller, helm-push, eksctl, zot, kaniko, helm, trivy...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: rke2-runtime, gendesk, gitness, cilium-envoy, aws-load-balancer-controller, runc, k8s-device-plugin, wuzz, fuse-overlayfs-snapshotter, gitlab-rails-ce, k3s, etcd, cilium-envoy-fips, localstack, backup-restore-operator, kube-conformance, etcd-fips, terraform,...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: rke2-runtime, datadog-agent-fips, mattermost, vault, frankenphp-8.2, grafana, commercial-expanso-edge, fuse-overlayfs-snapshotter, kine, k3s, elastic-agent-fips, datadog-agent, frankenphp-8.4, consul, elastic-agent, beats-fips, grafana-fips, mattermost-fips,...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: rke2-runtime, gendesk, gitness, cilium-envoy, aws-load-balancer-controller, runc, k8s-device-plugin, wuzz, fuse-overlayfs-snapshotter, gitlab-rails-ce, k3s, etcd, cilium-envoy-fips, localstack, backup-restore-operator, kube-conformance, etcd-fips, terraform,...