https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:11:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-248149 EUVD-2026-248149 https://cve.radiocsirt.org/vuln/euvd-2026-248149 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53945 <p>apko allows users to build and publish OCI container images built from apk packages. Starting in version 0.27.0 and prior to version 0.29.5, critical files were inadvertently set to 0666, which could likely be abused for root escalation. Version 0.29.5 contains a fix for the issue.</p> <p>apko allows users to build and publish OCI container images built from apk packages. Starting in version 0.27.0 and prior to version 0.29.5, critical files were inadvertently set to 0666, which could likely be abused for root escalation. Version 0.29.5 contains a fix for the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-53945 https://cve.radiocsirt.org/vuln/ghsa-x6ph-r535-3vjw <p><strong>Affected:</strong> Go: chainguard.dev/apko</p> <p>It was discovered that the ld.so.cache in images generated by apko had file system permissions mode `0666`: ``` bash-5.3# find / -type f -perm -o+w /etc/ld.so.cache ```</p> <p>This issue was introduced in commit [04f37e2 (&#34;generate /etc/ld.so.cache (#1629)&#34;)](https://github.com/chainguard-dev/apko/commit/04f37e2d50d5a502e155788561fb7d40de705bd9)([v0.27.0](https://github.com/chainguard-dev/apko/releases/tag/v0.27.0)).</p> <p>### Impact This potentially allows a local unprivileged user to add additional additional directories including dynamic libraries to the dynamic loader path. A user could exploit this by placing a malicious library in a directory they control.</p> <p>### Patches This issue was addressed in apko in [aedb077 (&#34;fix: /etc/ld.so.cache file permissions (#1758)&#34;)](https://github.com/chainguard-dev/apko/commit/aedb0772d6bf6e74d8f17690946dbc791d0f6af3) ([v0.29.5](https://github.com/chainguard-dev/apko/releases/tag/v0.29.5)).</p> <p>### Acknowledgements</p> <p>Many thanks to Cody Harris from [H2O.ai](http://h2o.ai/) for reporting this issue.</p> <p><strong>Affected:</strong> Go: chainguard.dev/apko</p> <p>It was discovered that the ld.so.cache in images generated by apko had file system permissions mode `0666`: ``` bash-5.3# find / -type f -perm -o+w /etc/ld.so.cache ```</p> <p>This issue was introduced in commit [04f37e2 (&#34;generate /etc/ld.so.cache (#1629)&#34;)](https://github.com/chainguard-dev/apko/commit/04f37e2d50d5a502e155788561fb7d40de705bd9)([v0.27.0](https://github.com/chainguard-dev/apko/releases/tag/v0.27.0)).</p> <p>### Impact This potentially allows a local unprivileged user to add additional additional directories including dynamic libraries to the dynamic loader path. A user could exploit this by placing a malicious library in a directory they control.</p> <p>### Patches This issue was addressed in apko in [aedb077 (&#34;fix: /etc/ld.so.cache file permissions (#1758)&#34;)](https://github.com/chainguard-dev/apko/commit/aedb0772d6bf6e74d8f17690946dbc791d0f6af3) ([v0.29.5](https://github.com/chainguard-dev/apko/releases/tag/v0.29.5)).</p> <p>### Acknowledgements</p> <p>Many thanks to Cody Harris from [H2O.ai](http://h2o.ai/) for reporting this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-x6ph-r535-3vjw https://cve.radiocsirt.org/vuln/opensuse-su-2025:15405-1 <p>govulncheck-vulndb-0.0.20250730T213748-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250730T213748-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15405-1