MGASA-2026-0462
- Source
- https://advisories.mageia.org/MGASA-2026-0462.html
- Import Source
- https://advisories.mageia.org/MGASA-2026-0462.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2026-0462
- Upstream
CVE (2)
- CVE-2026-52791
- CVE-2026-77478
- Published
- 2026-09-29T19:12:34Z
- Modified
- 2026-09-29T19:15:04Z
- Summary
- Updated fuse-overlayfs package fixes security vulnerabilities
- Details
-
fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC). (CVE-2026-52791) Operations on hardlinked lower-layer files resolving to the wrong layer. (CVE-2026-77478)
- References
-
- https://advisories.mageia.org/MGASA-2026-0462.html
- https://bugs.mageia.org/show_bug.cgi?id=36164
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OHDCW47LEOQXLVH2XJNC3A7VFVELJQ6U/
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/YO4BSFYJPI6ZGUIXZ3AHYYYFEYEM4MFO/
- https://github.com/containers/fuse-overlayfs/releases/tag/v1.17
- https://github.com/containers/fuse-overlayfs/releases/tag/v1.18
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:10 / fuse-overlayfs
Package
- Name
- fuse-overlayfs
- Purl
- pkg:rpm/mageia/fuse-overlayfs?arch=source&distro=mageia-10