Beveiligingsadvies

CVE-2026-79699

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-15 16:25:16
Laatst bijgewerkt 2026-09-15 16:25:16
Toegewezen door redhat
CVSS-score 4.4
Status PUBLISHED

Beschrijving

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header (e.g. victim/.wh.) can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or ApplyUncompressedLayer.