Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:20888-1

Опубликовано: 02 июн. 2026
Источник: suse-cvrf

Описание

Security update for apptainer

This update for apptainer fixes the following issues:

Changes in apptainer:

  • CVE-2026-39821: Update golang.org/x/net to 0.55.0. (bsc#1266656)

  • Add improved handling of suid-starter:

    • Add system group apptainer
    • Make sure, only users belonging to this group are able to run the application.
    • Document this in a README and point user to it if execution fails. Building of the 'suid-root' starter is still optional.

Список пакетов

openSUSE Leap 16.0
apptainer-1.4.5-bp160.3.1
apptainer-leap-1.4.5-bp160.3.1

Ссылки

Описание

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".

Затронутые продукты
openSUSE Leap 16.0:apptainer-1.4.5-bp160.3.1
openSUSE Leap 16.0:apptainer-leap-1.4.5-bp160.3.1
Ссылки