Количество 120
Количество 120
CVE-2026-32282
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation.
CVE-2026-32282
TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix
CVE-2026-32282
On Linux, if the target of Root.Chmod is replaced with a symlink while ...
RLSA-2026:23228
Important: image-builder security update
RLSA-2026:22937
Important: image-builder security update
ELSA-2026-22937
ELSA-2026-22937: image-builder security update (IMPORTANT)
RLSA-2026:22714
Important: osbuild-composer security update
RLSA-2026:22450
Important: osbuild-composer security update
RLSA-2026:25999
Moderate: yggdrasil-worker-package-manager security update
GHSA-xj38-jxc5-rppx
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation.
ELSA-2026-25999
ELSA-2026-25999: yggdrasil-worker-package-manager security update (MODERATE)
BDU:2026-07252
Уязвимость языка программирования Go, связанная с неверным определением ссылки перед доступом к файлу, позволяющая нарушителю повысить свои привилегии
CVE-2026-33810
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
CVE-2026-33810
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
CVE-2026-33810
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
CVE-2026-33810
Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509
CVE-2026-33810
When verifying a certificate chain containing excluded DNS constraints ...
ROS-20260710-73-0031
Уязвимость mimir
ROS-20260430-73-0011
Уязвимость golang
CVE-2026-32283
If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2026-32282 On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation. | CVSS3: 6.4 | 0% Низкий | 4 месяца назад | |
CVE-2026-32282 TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix | 0% Низкий | 2 месяца назад | ||
CVE-2026-32282 On Linux, if the target of Root.Chmod is replaced with a symlink while ... | CVSS3: 6.4 | 0% Низкий | 4 месяца назад | |
RLSA-2026:23228 Important: image-builder security update | 2 месяца назад | |||
RLSA-2026:22937 Important: image-builder security update | 2 месяца назад | |||
ELSA-2026-22937 ELSA-2026-22937: image-builder security update (IMPORTANT) | 27 дней назад | |||
RLSA-2026:22714 Important: osbuild-composer security update | 2 месяца назад | |||
RLSA-2026:22450 Important: osbuild-composer security update | 2 месяца назад | |||
RLSA-2026:25999 Moderate: yggdrasil-worker-package-manager security update | 0% Низкий | около 2 месяцев назад | ||
GHSA-xj38-jxc5-rppx On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation. | CVSS3: 6.4 | 0% Низкий | 4 месяца назад | |
ELSA-2026-25999 ELSA-2026-25999: yggdrasil-worker-package-manager security update (MODERATE) | 27 дней назад | |||
BDU:2026-07252 Уязвимость языка программирования Go, связанная с неверным определением ссылки перед доступом к файлу, позволяющая нарушителю повысить свои привилегии | CVSS3: 6.4 | 0% Низкий | 4 месяца назад | |
CVE-2026-33810 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool. | CVSS3: 8.2 | 0% Низкий | 4 месяца назад | |
CVE-2026-33810 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool. | CVSS3: 8.8 | 0% Низкий | 4 месяца назад | |
CVE-2026-33810 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool. | CVSS3: 8.2 | 0% Низкий | 4 месяца назад | |
CVE-2026-33810 Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 | CVSS3: 5.9 | 0% Низкий | 4 месяца назад | |
CVE-2026-33810 When verifying a certificate chain containing excluded DNS constraints ... | CVSS3: 8.2 | 0% Низкий | 4 месяца назад | |
ROS-20260710-73-0031 Уязвимость mimir | CVSS3: 6.4 | 0% Низкий | около 1 месяца назад | |
ROS-20260430-73-0011 Уязвимость golang | CVSS3: 6.4 | 0% Низкий | 3 месяца назад | |
CVE-2026-32283 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3. | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
Уязвимостей на страницу