{"id":"EUVD-2026-95094","enisaUuid":"ce121552-d414-3290-be21-7ee408f3e828","description":"The `github.com/moby/sys/user` package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing `/etc/passwd`- or `/etc/group`-style files, allowing an attacker who can supply a specially crafted file to cause excessive memory consumption and potentially terminate the affected process due to an out-of-memory condition. This issue is patched in version 0.4.1. As a workaround, avoid parsing attacker-controlled user or group database files, or validate and limit untrusted input before parsing it.","datePublished":"Oct 8, 2026, 4:22:25 PM","dateUpdated":"Oct 8, 2026, 5:27:37 PM","baseScore":5.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/moby/sys/security/advisories/GHSA-mjcv-p78q-w5fw\nhttps://github.com/moby/sys/pull/221\nhttps://github.com/moby/sys/commit/85a71bbe1faa36c552a960e6a5f3d0cfb632fbbe\n","aliases":"CVE-2026-61801\nGHSA-mjcv-p78q-w5fw\n","assigner":"GitHub_M","epss":0.12,"enisaIdProduct":[{"id":"8631ca52-fccd-3afe-b0b4-de573c9c5851","product":{"name":"sys","vendor":{"name":"moby"}},"product_version":"\u003c 0.4.1"}],"enisaIdVendor":[{"id":"1ec84cbe-b951-3234-9542-2475624325a8","vendor":{"name":"moby"}}],"enisaIdVulnerability":[{"id":"65ce909e-ff17-3c44-86c4-343228c0bb03","vulnerability":{"id":"CVE-2026-61801","description":"The `github.com/moby/sys/user` package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing `/etc/passwd`- or `/etc/group`-style files, allowing an attacker who can supply a specially crafted file to cause excessive memory consumption and potentially terminate the affected process due to an out-of-memory condition. This issue is patched in version 0.4.1. As a workaround, avoid parsing attacker-controlled user or group database files, or validate and limit untrusted input before parsing it.","datePublished":"Oct 8, 2026, 4:22:25 PM","dateUpdated":"Oct 8, 2026, 5:27:37 PM","status":"PUBLISHED","baseScore":5.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/moby/sys/security/advisories/GHSA-mjcv-p78q-w5fw\nhttps://github.com/moby/sys/pull/221\nhttps://github.com/moby/sys/commit/85a71bbe1faa36c552a960e6a5f3d0cfb632fbbe\n","enisa_id":"EUVD-2026-95094\n","assigner":"GitHub_M","epss":0.12,"dataProcessed":"Oct 28, 2026, 7:14:28 AM","vulnerabilityProduct":[{"id":"79da0845-1789-35e3-9832-5dcecd360942","product":{"name":"sys","vendor":{"name":"moby"}},"product_version":"\u003c 0.4.1"}],"vulnerabilityVendor":[{"id":"e5b01ae8-0062-3f32-8bb7-84fe919750a0","vendor":{"name":"moby"}}]}},{"id":"da5d443d-69ed-3bd1-8fcd-064717ba5c5b","vulnerability":{"id":"GHSA-mjcv-p78q-w5fw","description":"github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files","datePublished":"Oct 8, 2026, 4:08:33 PM","dateUpdated":"Oct 8, 2026, 4:08:34 PM","baseScore":0.0,"references":"https://github.com/moby/sys/security/advisories/GHSA-mjcv-p78q-w5fw\nhttps://github.com/moby/sys/pull/221\nhttps://github.com/moby/sys/commit/85a71bbe1faa36c552a960e6a5f3d0cfb632fbbe\nhttps://github.com/moby/sys\n","enisa_id":"EUVD-2026-95094\n","aliases":"GHSA-mjcv-p78q-w5fw\nCVE-2026-61801\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:02:26 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"2a0e835a-8462-3ed4-9981-f38dc76c7df2","advisory":{"id":"RHSA-2026:76448","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Oct 5, 2026, 10:26:33 PM","dateUpdated":"Oct 27, 2026, 4:33:54 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:76448\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76448.json\n","aliases":"CVE-2024-24786\nCVE-2026-13719\nCVE-2026-13720\nCVE-2026-56851\nCVE-2026-61801\nCVE-2026-81841\nCVE-2026-97394\nCVE-2026-101899\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"702be080-9610-3837-97f3-788805b20e64","product":{"name":"grafana13.1-0:13.1.7-0.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"b51fd88c-244e-3b5a-a852-0f7ad787e57b","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"efa9c4ee-c8ea-3311-83b3-108bd785e5ff","product":{"name":"grafana13.1-0:13.1.7-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"fc44ab96-7029-3d3b-9b8d-b2c35eb26969","product":{"name":"grafana13.1-0:13.1.7-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"49ad39e9-0567-3c42-82a1-3376523494f8","advisory":{"id":"RHSA-2026:76677","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Oct 6, 2026, 8:26:00 AM","dateUpdated":"Oct 27, 2026, 4:24:52 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:76677\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76677.json\n","aliases":"CVE-2024-24786\nCVE-2026-56851\nCVE-2026-61801\nCVE-2026-95502\nCVE-2026-97394\nCVE-2026-100347\nCVE-2026-100348\nCVE-2026-100349\nCVE-2026-100350\nCVE-2026-100351\nCVE-2026-101899\nCVE-2026-109855\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"335287a7-ced4-3080-b1ad-2e6235bafb6e","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"51b55ba2-f5d3-34ff-b412-1563b7f7b0b4","product":{"name":"grafana12.4-0:12.4.12-0.4.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"63f37ffb-218f-312e-b209-a77eda41aef4","product":{"name":"grafana12.4-0:12.4.12-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"f76f70aa-ccdd-3070-90c3-fd71da797c14","product":{"name":"grafana12.4-0:12.4.12-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"50c94820-6b8d-3aa2-9525-7b1892b112d3","advisory":{"id":"openSUSE-SU-2026:12260-1","description":"buildpacks-cli-0.40.10-1.1 on GA media","summary":"buildpacks-cli-0.40.10-1.1 on GA media","datePublished":"Oct 24, 2026, 12:00:00 AM","dateUpdated":"Oct 26, 2026, 10:35:09 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12260-1.json\nhttps://www.suse.com/security/cve/CVE-2026-111943/\nhttps://www.suse.com/security/cve/CVE-2026-17106/\nhttps://www.suse.com/security/cve/CVE-2026-61801/\nhttps://www.suse.com/security/cve/CVE-2026-78659/\nhttps://www.suse.com/security/cve/CVE-2026-78662/\n","aliases":"CVE-2026-111943\nCVE-2026-17106\nCVE-2026-61801\nCVE-2026-78659\nCVE-2026-78662\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"09354156-5fab-3ac7-8b8a-68086fe4476b","product":{"name":"buildpacks-cli-fish-completion-0:0.40.10-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"1489ef20-7f5d-3189-8412-5bb54ca4f890","product":{"name":"buildpacks-cli-0:0.40.10-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"24a9deef-9e83-3bde-a52d-18263d0da5ab","product":{"name":"buildpacks-cli-fish-completion-0:0.40.10-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"319b1185-007c-3cf7-b80d-4b87e3805410","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"484090d3-2890-37c5-8540-f8df09103ad7","product":{"name":"buildpacks-cli-zsh-completion-0:0.40.10-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"623036d1-a027-375c-a860-485aa2b2bd56","product":{"name":"buildpacks-cli-0:0.40.10-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"6258e4af-8a27-3646-bafe-d273511842a3","product":{"name":"buildpacks-cli-fish-completion-0:0.40.10-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"7a64ff7a-5855-3bdd-9bec-da60169ef1ea","product":{"name":"buildpacks-cli-0:0.40.10-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"7fd090d7-d6f0-37f8-9562-6001af35b9db","product":{"name":"buildpacks-cli-0:0.40.10-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"898581bf-8234-3c17-8e4a-69554d227123","product":{"name":"buildpacks-cli-zsh-completion-0:0.40.10-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"8ea2199a-4bc9-3c9a-959d-6d47313c7406","product":{"name":"buildpacks-cli-zsh-completion-0:0.40.10-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"914d8e37-07bf-3157-a7ce-41d3e416d9e0","product":{"name":"buildpacks-cli-bash-completion-0:0.40.10-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"953f5ae7-3f41-3c9a-849d-3cc5dafde5f6","product":{"name":"buildpacks-cli-bash-completion-0:0.40.10-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"9f5257fd-f246-3d30-9744-4c37e0e2cbd2","product":{"name":"buildpacks-cli-zsh-completion-0:0.40.10-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"a0f9e864-19ab-3a28-8fb6-38d64024a09e","product":{"name":"buildpacks-cli-bash-completion-0:0.40.10-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"a546ea06-8d2b-3fcd-bf7a-c333510c642c","product":{"name":"buildpacks-cli-bash-completion-0:0.40.10-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"c3a45cc7-eff2-3b29-94d2-06aae4d86a40","product":{"name":"buildpacks-cli-fish-completion-0:0.40.10-1.1.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"a5b9a83a-d78e-3f46-945f-8f2e43779fc4","advisory":{"id":"openSUSE-SU-2026:12235-1","description":"containerized-data-importer1.65-api-1.65.0-4.1 on GA media","summary":"containerized-data-importer1.65-api-1.65.0-4.1 on GA media","datePublished":"Oct 23, 2026, 12:00:00 AM","dateUpdated":"Oct 24, 2026, 8:49:21 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12235-1.json\nhttps://www.suse.com/security/cve/CVE-2026-61801/\nhttps://www.suse.com/security/cve/CVE-2026-78659/\nhttps://www.suse.com/security/cve/CVE-2026-78660/\nhttps://www.suse.com/security/cve/CVE-2026-78669/\nhttps://www.suse.com/security/cve/CVE-2026-84445/\n","aliases":"CVE-2026-61801\nCVE-2026-78659\nCVE-2026-78660\nCVE-2026-78669\nCVE-2026-84445\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"013d11da-fbc9-3471-9120-f6786285cca6","product":{"name":"containerized-data-importer1.65-api-0:1.65.0-4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"05dd0ba9-76c7-3990-9e88-ec800506331f","product":{"name":"containerized-data-importer1.65-tests-0:1.65.0-4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"0b959fbc-a610-3ea8-b025-9373c5027aa1","product":{"name":"containerized-data-importer1.65-operator-0:1.65.0-4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"0d034ef1-8a70-3e56-94e4-771d8421cdd3","product":{"name":"containerized-data-importer1.65-cloner-0:1.65.0-4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"0d46dc04-595f-3113-8aa2-1be0c2b951cb","product":{"name":"containerized-data-importer1.65-manifests-0:1.65.0-4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"16697a79-ca96-3234-8faf-d6a105fc9f43","product":{"name":"containerized-data-importer1.65-controller-0:1.65.0-4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"1ab30047-e21c-3a42-a2d9-7c8a47a634b3","product":{"name":"containerized-data-importer1.65-tests-0:1.65.0-4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"2afaaa4e-a6e5-3cea-8530-9783fe9aa042","product":{"name":"containerized-data-importer1.65-importer-0:1.65.0-4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"2e819b39-3de4-35c4-abfe-61a12e2a17d9","product":{"name":"containerized-data-importer1.65-api-0:1.65.0-4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"2ff8c4de-0526-362c-9e84-3c32c82c573d","product":{"name":"containerized-data-importer1.65-importer-0:1.65.0-4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"3742de52-5f3d-38a9-b298-52d2f89b5ef0","product":{"name":"containerized-data-importer1.65-cloner-0:1.65.0-4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"3a3efee5-3b20-377d-bb6f-97519ea0d02b","product":{"name":"containerized-data-importer1.65-tests-0:1.65.0-4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"439ec42f-9167-33a9-9cf8-6490c1b7f878","product":{"name":"obs-service-cdi1.65_containers_meta-0:1.65.0-4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"4787eaac-cf5d-3f6c-ad12-f98237f94329","product":{"name":"containerized-data-importer1.65-api-0:1.65.0-4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"528da95a-99fd-3aa0-b186-fb00d0307af7","product":{"name":"containerized-data-importer1.65-uploadproxy-0:1.65.0-4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"58c9b702-078b-3858-bee6-4931642b6ca7","product":{"name":"containerized-data-importer1.65-cloner-0:1.65.0-4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"70d7c743-e6ee-3456-99f0-14b82dd4bbf1","product":{"name":"containerized-data-importer1.65-manifests-0:1.65.0-4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"78d876ff-0deb-33c7-9021-d343146c898a","product":{"name":"obs-service-cdi1.65_containers_meta-0:1.65.0-4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"8567f493-c164-3fcc-bb0f-093b73c99d0d","product":{"name":"obs-service-cdi1.65_containers_meta-0:1.65.0-4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"861987b0-d735-3776-9e2b-c0bc8ccd3c5d","product":{"name":"containerized-data-importer1.65-controller-0:1.65.0-4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"88bc2acc-7203-3936-95d7-6aa0dcc9ac44","product":{"name":"containerized-data-importer1.65-uploadserver-0:1.65.0-4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"8bc9d1b0-37f3-3a9d-8fd7-930e26eff414","product":{"name":"containerized-data-importer1.65-operator-0:1.65.0-4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"8c0bfc19-0b37-30f6-bbf3-27fb3000ebe5","product":{"name":"containerized-data-importer1.65-manifests-0:1.65.0-4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"9c86e46e-d52d-30b8-9ca8-7f0e260bfe46","product":{"name":"containerized-data-importer1.65-uploadproxy-0:1.65.0-4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"9db58dbd-4450-3517-a33f-899733c9d560","product":{"name":"containerized-data-importer1.65-api-0:1.65.0-4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"a2c19802-560b-3ad7-b390-14a291168165","product":{"name":"containerized-data-importer1.65-uploadproxy-0:1.65.0-4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"a3b0d191-0278-3ef3-8701-8d475a8f7551","product":{"name":"containerized-data-importer1.65-uploadserver-0:1.65.0-4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"a7a94141-6874-3581-b064-7d1f40b32025","product":{"name":"containerized-data-importer1.65-operator-0:1.65.0-4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"ae84e717-7b94-3dc1-9043-849d96393db8","product":{"name":"containerized-data-importer1.65-importer-0:1.65.0-4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"b4106f4d-4c47-3f79-ac8d-9d84dc4a5b15","product":{"name":"containerized-data-importer1.65-importer-0:1.65.0-4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b6bb8f99-b59e-3608-88a0-4938a988d38a","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"bb4c2c3a-341f-326f-90df-de31acebf38a","product":{"name":"containerized-data-importer1.65-uploadproxy-0:1.65.0-4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"c517733f-429d-3609-90f9-9cd01f98b848","product":{"name":"containerized-data-importer1.65-uploadserver-0:1.65.0-4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"d6a6e372-b84e-328f-950a-3078499f8a8d","product":{"name":"containerized-data-importer1.65-cloner-0:1.65.0-4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"ecdff545-4c3a-341b-b419-dd682c300514","product":{"name":"containerized-data-importer1.65-manifests-0:1.65.0-4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f5f348e2-be95-3a57-be7b-a38d64ec05ea","product":{"name":"containerized-data-importer1.65-controller-0:1.65.0-4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"f8dd24f7-461a-3454-8396-34465f16e952","product":{"name":"containerized-data-importer1.65-operator-0:1.65.0-4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"f9229bfb-238f-3c1f-a09b-6b7e8f9f8b25","product":{"name":"containerized-data-importer1.65-controller-0:1.65.0-4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"f9565631-a53b-3248-82ea-c9f4fc456fc8","product":{"name":"containerized-data-importer1.65-uploadserver-0:1.65.0-4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"fb44b206-2d9d-3513-bf41-fabd023dbba1","product":{"name":"containerized-data-importer1.65-tests-0:1.65.0-4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"fd1aedfb-4ec1-3f6b-8cf3-ac13329a57ed","product":{"name":"obs-service-cdi1.65_containers_meta-0:1.65.0-4.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"c59bc8cd-7921-317d-b98e-dc2898efaac4","advisory":{"id":"RHSA-2026:76430","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Oct 5, 2026, 10:17:42 PM","dateUpdated":"Oct 27, 2026, 4:33:54 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:76430\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76430.json\n","aliases":"CVE-2024-24786\nCVE-2026-13719\nCVE-2026-13720\nCVE-2026-56851\nCVE-2026-61801\nCVE-2026-76154\nCVE-2026-81841\nCVE-2026-97394\nCVE-2026-101899\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"3e27b96b-374c-3924-82dd-40e59dc102ee","product":{"name":"grafana13.2-0:13.2.3-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"495ab95f-06df-375a-9483-ccd5377fddb4","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"b8095ef2-6375-3dc5-8f97-dd9b59059057","product":{"name":"grafana13.2-0:13.2.3-0.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"dfd7aab1-c131-3807-8753-13a6469be92d","product":{"name":"grafana13.2-0:13.2.3-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}},{"id":"e4ef94f2-a059-35e9-80a5-9349df22104e","advisory":{"id":"openSUSE-SU-2026:12152-1","description":"google-osconfig-agent-20261015.00-1.1 on GA media","summary":"google-osconfig-agent-20261015.00-1.1 on GA media","datePublished":"Oct 16, 2026, 12:00:00 AM","dateUpdated":"Oct 17, 2026, 9:17:47 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12152-1.json\nhttps://www.suse.com/security/cve/CVE-2026-61801/\nhttps://www.suse.com/security/cve/CVE-2026-78669/\nhttps://www.suse.com/security/cve/CVE-2026-95838/\n","aliases":"CVE-2026-61801\nCVE-2026-78669\nCVE-2026-95838\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"322cae3a-4956-3e2d-ac37-e492f257b347","product":{"name":"google-osconfig-agent-0:20261015.00-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"70688bca-f8ac-3403-af34-37964ab8cc72","product":{"name":"google-osconfig-agent-0:20261015.00-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"7ab23fd5-6091-36c7-b688-91d517bbcb93","product":{"name":"google-osconfig-agent-0:20261015.00-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"9e193e2a-78c4-3a60-b879-18abdd8f536c","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"ce2f92a0-d28c-382a-8b83-dbd553677bde","product":{"name":"google-osconfig-agent-0:20261015.00-1.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"ec446ceb-8194-3d7d-b477-38c271053e35","advisory":{"id":"msrc_CVE-2026-61801","description":"github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files","datePublished":"Oct 11, 2026, 1:50:24 AM","dateUpdated":"Oct 21, 2026, 1:43:48 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-61801.json\n","aliases":"CVE-2026-61801\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"05aeec98-4ee3-3947-904b-68540eaba748","product":{"name":"3.0","vendor":{"name":"Wind River"}}},{"id":"14392bbb-d4cf-33bc-a342-02da1e913e25","product":{"name":"azl3 telegraf 0:1.31.0-33.azl3","vendor":{"name":"Microsoft"}}},{"id":"16eee661-e55f-3a26-a260-733a3ec1e0cb","product":{"name":"kubevirt","vendor":{"name":"KubeVirt"}}},{"id":"1ca78926-fd1c-36d9-b311-75bab06554e2","product":{"name":"telegraf","vendor":{"name":"Microsoft"}}},{"id":"257f79db-7a97-396a-8b4b-ce9dd24c4ef7","product":{"name":"azl3 runc 0:1.4.3-1.azl3","vendor":{"name":"Microsoft"}}},{"id":"3046c85b-8ccf-3a2d-9db0-488bcd97d98e","product":{"name":"azl3 kata-containers-cc 0:3.15.0.aks0-21.azl3","vendor":{"name":"Microsoft"}}},{"id":"361e9ebb-6f3a-3bc7-b927-6de4071909e2","product":{"name":"azl3 docker-cli 0:25.0.7-5.azl3","vendor":{"name":"Microsoft"}}},{"id":"48fdd815-283c-3144-a3c0-e1b7a806d601","product":{"name":"containerized-data-importer","vendor":{"name":"KubeVirt"}}},{"id":"50a44dd8-b6b9-3b49-951f-f00c54bb2e37","product":{"name":"skopeo","vendor":{"name":"Microsoft"}}},{"id":"51d4afeb-3d65-3635-9276-9e9c1849df2b","product":{"name":"azl3 kubevirt 0:1.8.4-2.azl3","vendor":{"name":"Microsoft"}}},{"id":"54ae7549-565f-3bf5-acb3-d504eb101abf","product":{"name":"docker-buildx","vendor":{"name":"Microsoft"}}},{"id":"62f52467-f6ae-3fc3-ae01-3191641848c8","product":{"name":"azl3 kubernetes 0:1.30.10-30.azl3","vendor":{"name":"Microsoft"}}},{"id":"63872f88-b6fd-34cc-bb55-1c6ff5d430f6","product":{"name":"azl3 kata-containers 0:4.1.0.kata0-1.azl3","vendor":{"name":"Microsoft"}}},{"id":"666e9c0b-a4b6-3a77-a294-ff90bd77cd60","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}},{"id":"6cef0eb1-1979-3060-9acb-82cf8e9317d3","product":{"name":"azl3 libcontainers-common 0:20240213-3.azl3","vendor":{"name":"Microsoft"}}},{"id":"6f39009e-0ef1-35a7-b624-968e54f49b94","product":{"name":"moby-engine","vendor":{"name":"Microsoft"}}},{"id":"71e3982b-1b3b-3343-b912-0511c6d103c2","product":{"name":"kata-containers","vendor":{"name":"kata-containers"}}},{"id":"79ff8fbb-5b31-3762-8c5c-d0bf13ef9da1","product":{"name":"containerd2","vendor":{"name":"Microsoft"}}},{"id":"aed0ad3c-2659-3d92-9877-0f29e8f13848","product":{"name":"Kubernetes","vendor":{"name":"Kubernetes"}}},{"id":"b2f930a3-72a5-375d-8384-d24e8746d904","product":{"name":"libcontainers-common","vendor":{"name":"Microsoft"}}},{"id":"b766d26b-66c3-383c-ac93-9716134ee24c","product":{"name":"kata-containers-cc","vendor":{"name":"Microsoft"}}},{"id":"bfad2f4a-ff7d-385f-8cd2-bba63d3a5234","product":{"name":"azl3 moby-engine 0:25.0.3-20.azl3","vendor":{"name":"Microsoft"}}},{"id":"c15118bb-bdfc-3131-9499-3dee07ca0a25","product":{"name":"azl3 containerd2 0:2.3.4-1.azl3","vendor":{"name":"Microsoft"}}},{"id":"c284a1bc-dea0-328b-ba69-e28b41e1f030","product":{"name":"azl3 skopeo 0:1.14.4-13.azl3","vendor":{"name":"Microsoft"}}},{"id":"ce7578cc-17c8-34fa-9cd9-ec31e8032db7","product":{"name":"docker-compose","vendor":{"name":"Microsoft"}}},{"id":"dd0f63c7-fcb6-390c-bda6-084127516296","product":{"name":"azl3 docker-buildx 0:0.14.0-17.azl3","vendor":{"name":"Microsoft"}}},{"id":"f3df2b46-1b37-3a77-9d33-a9938afdca30","product":{"name":"docker-cli","vendor":{"name":"Microsoft"}}},{"id":"f750bd6b-ccd8-36f2-8029-b8f0c88b2e60","product":{"name":"runc","vendor":{"name":"opencontainers"}}},{"id":"feb89464-c71a-3670-86e9-cd5e2d4cd118","product":{"name":"azl3 docker-compose 0:2.27.0-14.azl3","vendor":{"name":"Microsoft"}}},{"id":"ffb349e5-a2a8-3a66-a789-779300e0e360","product":{"name":"azl3 containerized-data-importer 0:1.62.0-8.azl3","vendor":{"name":"Microsoft"}}}]}}]}