https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T15:34:34.125077+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-79699 CVE-2026-79699 — Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination… 2026-10-06T15:34:34.142989+00:00

Affected: Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat OpenShift Container Platform 4, Red Hat OpenShift Dev Spaces, Red Hat OpenShift Virtualization 4, Red Hat Quay 3

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header (e.g. victim/.wh.) can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or ApplyUncompressedLayer.