Количество 163
Количество 163
ELSA-2026-23228
ELSA-2026-23228: image-builder security update (IMPORTANT)
ELSA-2026-22937
ELSA-2026-22937: image-builder security update (IMPORTANT)
RLSA-2026:22714
Important: osbuild-composer security update
RLSA-2026:22450
Important: osbuild-composer security update
ELSA-2026-22714
ELSA-2026-22714: osbuild-composer security update (IMPORTANT)
ELSA-2026-22450
ELSA-2026-22450: osbuild-composer security update (IMPORTANT)
ROS-20260430-80-0011
Уязвимость golang
RLSA-2026:25999
Moderate: yggdrasil-worker-package-manager security update
GHSA-xj38-jxc5-rppx
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation.
ELSA-2026-25999
ELSA-2026-25999: yggdrasil-worker-package-manager security update (MODERATE)
BDU:2026-07252
Уязвимость языка программирования Go, связанная с неверным определением ссылки перед доступом к файлу, позволяющая нарушителю повысить свои привилегии
ROS-20260729-80-0025
Уязвимость coredns
ROS-20260729-73-0017
Уязвимость coredns
ROS-20260710-80-0031
Уязвимость mimir
ROS-20260710-73-0031
Уязвимость mimir
ROS-20260430-73-0011
Уязвимость golang
CVE-2026-33810
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
CVE-2026-33810
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
CVE-2026-33810
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
CVE-2026-33810
Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ELSA-2026-23228 ELSA-2026-23228: image-builder security update (IMPORTANT) | 27 дней назад | ||
| ELSA-2026-22937 ELSA-2026-22937: image-builder security update (IMPORTANT) | 3 месяца назад | ||
 | RLSA-2026:22714 Important: osbuild-composer security update | 4 месяца назад | ||
| RLSA-2026:22450 Important: osbuild-composer security update | 4 месяца назад | ||
| ELSA-2026-22714 ELSA-2026-22714: osbuild-composer security update (IMPORTANT) | около 2 месяцев назад | ||
| ELSA-2026-22450 ELSA-2026-22450: osbuild-composer security update (IMPORTANT) | около 2 месяцев назад | ||
 | ROS-20260430-80-0011 Уязвимость golang | CVSS3: 6.4 | 5 месяцев назад | |
| RLSA-2026:25999 Moderate: yggdrasil-worker-package-manager security update | 3 месяца назад | ||
| GHSA-xj38-jxc5-rppx On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation. | CVSS3: 6.4 | 6 месяцев назад | |
| ELSA-2026-25999 ELSA-2026-25999: yggdrasil-worker-package-manager security update (MODERATE) | 3 месяца назад | ||
 | BDU:2026-07252 Уязвимость языка программирования Go, связанная с неверным определением ссылки перед доступом к файлу, позволяющая нарушителю повысить свои привилегии | CVSS3: 6.4 | 6 месяцев назад | |
| ROS-20260729-80-0025 Уязвимость coredns | CVSS3: 6.4 | 2 месяца назад | |
| ROS-20260729-73-0017 Уязвимость coredns | CVSS3: 6.4 | 2 месяца назад | |
| ROS-20260710-80-0031 Уязвимость mimir | CVSS3: 6.4 | 3 месяца назад | |
| ROS-20260710-73-0031 Уязвимость mimir | CVSS3: 6.4 | 3 месяца назад | |
| ROS-20260430-73-0011 Уязвимость golang | CVSS3: 6.4 | 5 месяцев назад | |
 | CVE-2026-33810 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool. | CVSS3: 8.2 | 6 месяцев назад | |
 | CVE-2026-33810 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool. | CVSS3: 8.8 | 6 месяцев назад | |
 | CVE-2026-33810 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool. | CVSS3: 8.2 | 6 месяцев назад | |
 | CVE-2026-33810 Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 | CVSS3: 5.9 | 6 месяцев назад |
Уязвимостей на страницу