#1140649 apptainer: CVE-2026-48785

Package:
src:apptainer
Source:
src:apptainer
Submitter:
Salvatore Bonaccorso
Date:
2026-06-24 05:57:01 UTC
Severity:
normal
Tags:
#1140649#5
Date:
2026-06-24 05:56:21 UTC
From:
To:
Hi,

The following vulnerability was published for apptainer.

CVE-2026-48785[0]:
| Incorrect path matching for 'limit container paths' directive

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-48785
https://www.cve.org/CVERecord?id=CVE-2026-48785
[1] https://github.com/apptainer/apptainer/security/advisories/GHSA-cr2j-534f-mf3g
[2] https://github.com/apptainer/apptainer/commit/0ff35257420e0c6cb97dac11d305749c893e5214
[3] https://github.com/apptainer/apptainer/commit/4ce069ed6e56e1acd8cbfbfc0d57ccce3311bf92

Regards,
Salvatore