[Git][security-tracker-team/security-tracker][master] Add CVE-2026-52791/fuse-overlayfs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d81ce14b by Salvatore Bonaccorso at 2026-07-29T23:48:14+02:00
Add CVE-2026-52791/fuse-overlayfs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -288,7 +288,9 @@ CVE-2026-54079 (veraPDF validation provides PDF/A and PDF/UA validation, feature
 CVE-2026-54078 (veraPDF validation model is an implementation of the veraPDF validatio ...)
 	NOT-FOR-US: veraPDF
 CVE-2026-52791 (fuse-overlayfs is an implementation of overlayfs in FUSE for rootless  ...)
-	TODO: check
+	- fuse-overlayfs <unfixed>
+	NOTE: https://github.com/containers/fuse-overlayfs/security/advisories/GHSA-2cc4-p72c-v85h
+	NOTE: Fixed by: https://github.com/containers/fuse-overlayfs/commit/97e0d968a782fc259ebde112db1e9b9ff1ad724f (v1.17)
 CVE-2026-51992 (SQL Injection vulnerability in ClickHouse Server Versions <= 26.3.9.8  ...)
 	NOT-FOR-US: ClickHouse Server
 CVE-2026-50642 (diff\u2011so\u2011fancy does not properly sanitize non\u2011SGR termin ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d81ce14ba9f762d6e0e07e90a7322776e8b2ba34

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d81ce14ba9f762d6e0e07e90a7322776e8b2ba34
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260729/5263b4a8/attachment.htm>