{"id":"UBUNTU-CVE-2026-79699","details":"(A flaw was found in the containers/storage library. A crafted tar arch ...)","modified":"2026-10-22T10:30:03.272115147Z","published":"2026-10-21T00:00:00Z","upstream":["CVE-2026-79699"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-79699"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2026-79699"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2523408"}],"affected":[{"package":{"name":"golang-github-containers-storage","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/golang-github-containers-storage?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.2+dfsg1-2","1.13.2+dfsg1-3","1.13.5+dfsg1-1","1.15.1+dfsg1-1","1.15.2+dfsg1-1","1.15.3+dfsg1-1","1.15.5+dfsg1-1","1.15.7+dfsg1-1","1.15.8+dfsg1-1","1.15.8+dfsg1-1ubuntu1","1.15.8+dfsg1-1ubuntu2","1.15.8+dfsg1-1ubuntu2.1"],"ecosystem_specific":{"binaries":[{"binary_name":"containers-storage","binary_version":"1.15.8+dfsg1-1ubuntu2.1"},{"binary_name":"golang-github-containers-storage-dev","binary_version":"1.15.8+dfsg1-1ubuntu2.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-79699.json"}},{"package":{"name":"golang-github-containers-storage","ecosystem":"Ubuntu:Pro:22.04:LTS","purl":"pkg:deb/ubuntu/golang-github-containers-storage?arch=source&distro=esm-apps%2Fjammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.31.3+ds1-1ubuntu1","1.36.0+ds1-2","1.36.0+ds1-2ubuntu0.1","1.36.0+ds1-2ubuntu0.1+esm1","1.36.0+ds1-2ubuntu0.1+esm2"],"ecosystem_specific":{"binaries":[{"binary_name":"containers-storage","binary_version":"1.36.0+ds1-2ubuntu0.1+esm2"},{"binary_version":"1.36.0+ds1-2ubuntu0.1+esm2","binary_name":"golang-github-containers-storage-dev"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-79699.json"}},{"package":{"name":"golang-github-containers-storage","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/golang-github-containers-storage?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.43.0+ds1-8build1","1.50.2+ds1-2","1.51.0+ds1-2","1.51.0+ds1-2ubuntu0.24.04.1","1.51.0+ds1-2ubuntu0.24.04.2","1.51.0+ds1-2ubuntu0.24.04.3"],"ecosystem_specific":{"binaries":[{"binary_name":"containers-storage","binary_version":"1.51.0+ds1-2ubuntu0.24.04.3"},{"binary_version":"1.51.0+ds1-2ubuntu0.24.04.3","binary_name":"golang-github-containers-storage-dev"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-79699.json"}},{"package":{"name":"golang-github-containers-storage","ecosystem":"Ubuntu:26.10","purl":"pkg:deb/ubuntu/golang-github-containers-storage?arch=source&distro=stonking"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.61.0+ds1-6","1.62.0-3","1.63.0-1"],"ecosystem_specific":{"binaries":[{"binary_name":"containers-storage","binary_version":"1.63.0-1"},{"binary_name":"golang-github-containers-storage-dev","binary_version":"1.63.0-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-79699.json"}},{"package":{"name":"golang-github-containers-storage","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/golang-github-containers-storage?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.57.2+ds1-1","1.61.0+ds1-6"],"ecosystem_specific":{"binaries":[{"binary_name":"containers-storage","binary_version":"1.61.0+ds1-6"},{"binary_name":"golang-github-containers-storage-dev","binary_version":"1.61.0+ds1-6"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-79699.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L"},{"type":"Ubuntu","score":"medium"}]}