Cloudsmith - Repositories - Kurrent (eventstore) - eventstore (eventstore) - eventstoredb-ee

Package Search Help

You can use boolean logic (e.g. AND/OR/NOT) for complex search queries. For more help and examples, see the search documentation.

Search by package name:
my-package _(implicit)
name:my-package _(explicit)

Search by package filename:
filename:my-package.ext

Search by package tag:
tag:latest

Search by package version:
version:1.0.0 prerelease:true _{(prereleases)}
prerelease:false _{(no prereleases)}

Search by package architecture:
architecture:x86_64

Search by package distribution:
distribution:el

Search by package license:
license:MIT

Search by package format:
format:deb

Search by package status:
status:in_progress

Search by package file checksum:
checksum:5afba

Search by package security status:
severity:critical

Search by package vulnerabilities:
vulnerabilities:>1
vulnerabilities:<1000

Search by # of package downloads:
downloads:>8
downloads:<100

Search by package type:
type:binary
type:source

Search by package size (bytes):
size:>50000
size:<10000

Search by dependency name/version:
dependency:log4j
dependency:log4j=1.0.0
dependency:log4j>1.0.0

Search by uploaded date:
uploaded:>"1 day ago"
uploaded:<"August 14, 2022 EST"

Search by entitlement token (identifier):
entitlement:3lKPVJPosCsY

Search by policy violation:
policy_violated:true
deny_policy_violated:true
license_policy_violated:true
vulnerability_policy_violated:true

Search by repository:
repository:repo-name

Search by last download date:
last_downloaded:<"30 days ago"
last_downloaded:>"August 14, 2022 EST"

Search queries for all Debian-specific (and related) package types

Search by component:
deb_component:unstable

Search queries for all Maven-specific (and related) package types

Search by group ID:
maven_group_id:org.apache

Search queries for all Docker-specific (and related) package types

Search by image digest:
docker_image_digest:sha256:7c5..6d4
(full hashref only)

Search by layer digest:
docker_layer_digest:sha256:4c4..ae4
(full hashref only)

Search queries for all Generic-specific package types

Search by file path:
generic_filepath:path/to/file.txt

Search by directory:
generic_directory:path/to

Field type modifiers (depending on the type, you can influence behaviour)

For all queries, you can use:
~foo for negation

For string queries, you can use:
^foo to anchor to start of term
foo$ to anchor to end of term
foo*bar for fuzzy matching

For number/date or version queries, you can use:
>foo for values greater than
>=foo for values greater / equal
<foo for values less than
<=foo for values less / equal

Need a secure and centralised artifact repository to deliver Alpine, Cargo, CocoaPods, Composer, Conan, Conda, CRAN, Dart, Debian, Docker, Generic, Go, Helm, Hex, HuggingFace, LuaRocks, Maven, MCP, Nix, npm, NuGet, P2, Python, RedHat, Ruby, Swift, Terraform, Vagrant, VSX, Raw & More packages?

Cloudsmith is the new standard in Package / Artifact Management and Software Distribution.

With support for all major package formats, you can trust us to manage your software supply chain.

Start My Free Trial

Set Me Up

Public — eventstore (Kurrent) / eventstore

A certifiably-awesome public package repository curated by Kurrent, hosted by Cloudsmith.

eventstoredb-ee 24.10.16-x64-8.0-jammy

Download

One-liner (summary)

A certifiably-awesome package curated by trainstation, hosted by Cloudsmith.

Description

A certifiably-awesome package curated by trainstation, hosted by Cloudsmith.

License

Unknown

Size

308.6 MB

Downloads

Tags

image amd64 linux d8f75ca7-0a28-44dc-…

Status	Completed
Checksum (MD5)	036d8e3679ad99c523e9a9b74e1b80b1
Checksum (SHA-1)	808fcf1c3a9e59ea626628202e518f6ecca11c4c
Checksum (SHA-256)	6736ea443d7257452da2f7c3cf859a217289fb0c020350b022cce8563470513d
Checksum (SHA-512)	5c7fd236bf259455efb250f6ed54544e28bb4dff2e97bfee34cde6b3ec058da32c…
GPG Signature	Download
GPG Fingerprint	94087ebb6192d6033b449d20d008fda5e151e345
Storage Region	Dublin, Ireland
Type	Binary (contains binaries and binary artifacts)
Uploaded At	4 days, 20 hours ago
Uploaded By
Slug Id	eventstoredb-ee-bd6p
Unique Id	gRAsZjGEpJR8
Version (Raw)	24.10.16-x64-8.0-jammy
Version (Parsed)	Major: 24 Minor: 10 Patch: 16 Pre (Str): xjammy Pre (Num Array): 64.8.0 Type: SemVer (Strict)
Orig Version (Raw)	6736ea443d7257452da2f7c3cf859a217289fb0c020350b022cce8563470513d
Orig Version (Parsed)	Type: Unknown
	docker-specific metadata
Image Digest	sha256:6736ea443d7257452da2f7c3cf859a217289fb0c020350b022cce8563470513d
Config Digest	sha256:1e2b1312b1d9e2c6fe9d2ffeeaa10596812e5ec960df74b9ea8b8cb25ef97da6
V1 OCI Index Digest	sha256:5f61816008988eccca1e14c80bef367cd353b02e33eb5f25a121b953caed5ec7
V1 Distribution (Signed) Digest	sha256:f35b58d7d37c5deb038f2785b3227126d4a99ea542d124477a41a97ffb5e9805
V1 OCI Digest	sha256:e376edf6f494d923eda18748b6070b78cd8b34640b3c0ba3e29268d7ebadf0a2
V2 Distribution List Digest	sha256:b941890a787e0ec759c35e4778050a855039ccea419b57f1a6ac66ace0eb1e57
V1 Distribution Digest	sha256:6ca80e222ecc1e893a3a5b6b879fcc924727f5871145964de6e2d749789caf29
V2 Distribution Digest	sha256:6736ea443d7257452da2f7c3cf859a217289fb0c020350b022cce8563470513d
	extended metadata
Manifest Type	V2 Distribution
Architecture	amd64
Config	Entrypoint /opt/eventstore/eventstored Env ACCEPT_EULA=Y \| APP_UID=1654 \| ASPNETCORE_HTTP_PORTS=8080 \| DEBIAN_FRONTEND=noninteractive \| DOTNET_RUNNING_IN_CONTAINER=true \| LANGUAGE=en_US:en \| PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin Exposed Ports 1112/tcp \| 1113/tcp \| 2113/tcp Healthcheck Interval 5000000000 Retries 24 Test CMD-SHELL \| curl --fail --insecure https://localhost:2113/health/live \|\| curl --fail http://localhost:2113/health/live \|\| exit 1 Timeout 5000000000 Labels 'org.opencontainers.image.version' '22.04' User eventstore Volumes /var/lib/eventstore \| /var/log/eventstore Working Dir /opt/eventstore
Created	2026-08-27 09:34:06 UTC
Os	linux

This package was uploaded with the following V2 Distribution manifest:

{
   "schemaVersion": 2,
   "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
   "config": {
      "mediaType": "application/vnd.docker.container.image.v1+json",
      "size": 7018,
      "digest": "sha256:9d9df3989018c20de3bd50b7bdc411247f252f3a14986e7023e12ef1c904b379"
   },
   "layers": [
      {
         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
         "size": 30649033,
         "digest": "sha256:1317dd93c0c3b4562b5180bc49726f743cc1622f5fd1327aa883d8d8968012e3"
      },
      {
         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
         "size": 16673838,
         "digest": "sha256:b9276b9d9603192c0a01ca56004fcf8fea890559161fea0f39b35c289fd5e514"
      },
      {
         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
         "size": 3547,
         "digest": "sha256:72ff7a23db2fb244a744247e3afe37a8900d8b1cbc2950e9be1e1f766484d574"
      },
      {
         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
         "size": 59290138,
         "digest": "sha256:598af654c47261346eafc570613c99d96381b55d84341f97172292bba379d57d"
      },
      {
         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
         "size": 107553852,
         "digest": "sha256:f941a98ace36013f9eb126c6016825859c93298a1b6ac8b24af6b981b5ca0bc0"
      },
      {
         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
         "size": 1830278,
         "digest": "sha256:18dd766cdbf8742fd9b3e1154fd1384d2ec74ed7afcfa88e77e77b2399920764"
      },
      {
         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
         "size": 32,
         "digest": "sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1"
      },
      {
         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
         "size": 1846,
         "digest": "sha256:59646c35971241b8a654bd040b10325fa324c3112f7503dc9571fa21bdbdd841"
      },
      {
         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
         "size": 107552468,
         "digest": "sha256:d7888170425c89f7f18442e0c8f35431face7651381a547338b836e348e2d6ce"
      },
      {
         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
         "size": 193,
         "digest": "sha256:acd4c99ad2396ecbc879fe076e3f579356c1cdaa8fb5c1cc923a2bb6c432c563"
      }
   ]
}

	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: /bin/sh -c #(nop) ARG RELEASE	32 bytes
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: /bin/sh -c #(nop) ARG LAUNCHPAD_BUILD_ARCH	32 bytes
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: /bin/sh -c #(nop) LABEL org.opencontainers.image.version=22.04	32 bytes
	Digest: sha256:1317dd93c0c3b4562b5180bc49726f743cc1622f5fd1327aa883d8d8968012e3 Command: /bin/sh -c #(nop) ADD file:799f4e238d67485cc109d93512f4fe6f75bafc26a3476772191154125e52201d in /	29.2 MB
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: /bin/sh -c #(nop) CMD ["/bin/bash"]	32 bytes
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: ENV APP_UID=1654 ASPNETCORE_HTTP_PORTS=8080 DOTNET_RUNNING_IN_CONTAINER=true	32 bytes
	Digest: sha256:b9276b9d9603192c0a01ca56004fcf8fea890559161fea0f39b35c289fd5e514 Command: RUN /bin/sh -c apt-get update && apt-get install -y --no-install-recommends ca-certificates libc6 libgcc-s1 libicu70 libssl3 libstdc++6 tzdata zlib1g && rm -rf /var/lib/apt/lists/* # buildkit	15.9 MB
	Digest: sha256:72ff7a23db2fb244a744247e3afe37a8900d8b1cbc2950e9be1e1f766484d574 Command: RUN /bin/sh -c groupadd --gid=$APP_UID app && useradd --no-log-init --uid=$APP_UID --gid=$APP_UID --create-home app # buildkit	3.5 KB
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: ARG DATABASE_ARCHIVE_DIR=eventstoredb-24.10.16-ee-linux-x64.tar.gz	32 bytes
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: ARG UID=1000	32 bytes
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: ARG GID=1000	32 bytes
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: ENV LANGUAGE=en_US:en DEBIAN_FRONTEND=noninteractive ACCEPT_EULA=Y	32 bytes
	Digest: sha256:598af654c47261346eafc570613c99d96381b55d84341f97172292bba379d57d Command: RUN \|3 DATABASE_ARCHIVE_DIR=eventstoredb-24.10.16-ee-linux-x64.tar.gz UID=1000 GID=1000 /bin/sh -c apt-get update && apt-get upgrade -y && apt-get clean # buildkit	56.5 MB
	Digest: sha256:f941a98ace36013f9eb126c6016825859c93298a1b6ac8b24af6b981b5ca0bc0 Command: COPY eventstoredb-24.10.16-ee-linux-x64.tar.gz /opt/eventstore/ # buildkit	102.6 MB
	Digest: sha256:18dd766cdbf8742fd9b3e1154fd1384d2ec74ed7afcfa88e77e77b2399920764 Command: RUN \|3 DATABASE_ARCHIVE_DIR=eventstoredb-24.10.16-ee-linux-x64.tar.gz UID=1000 GID=1000 /bin/sh -c apt update && apt install -y curl && rm -rf /var/lib/apt/lists/* # buildkit	1.7 MB
	Digest: sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 Command: WORKDIR /opt/eventstore	32 bytes
	Digest: sha256:59646c35971241b8a654bd040b10325fa324c3112f7503dc9571fa21bdbdd841 Command: RUN \|3 DATABASE_ARCHIVE_DIR=eventstoredb-24.10.16-ee-linux-x64.tar.gz UID=1000 GID=1000 /bin/sh -c addgroup --gid ${GID} "eventstore" && adduser --disabled-password --gecos "" --ingroup "eventstore" --no-create-home --uid ${UID} "eventstore" # buildkit	1.8 KB
	Digest: sha256:d7888170425c89f7f18442e0c8f35431face7651381a547338b836e348e2d6ce Command: RUN \|3 DATABASE_ARCHIVE_DIR=eventstoredb-24.10.16-ee-linux-x64.tar.gz UID=1000 GID=1000 /bin/sh -c mkdir -p /var/lib/eventstore && mkdir -p /var/log/eventstore && mkdir -p /etc/eventstore && chown -R eventstore:eventstore /opt/eventstore /var/lib/eventstore /var/log/eventstore /etc/eventstore # buildkit	102.6 MB
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: USER eventstore	32 bytes
	Digest: sha256:acd4c99ad2396ecbc879fe076e3f579356c1cdaa8fb5c1cc923a2bb6c432c563 Command: RUN \|3 DATABASE_ARCHIVE_DIR=eventstoredb-24.10.16-ee-linux-x64.tar.gz UID=1000 GID=1000 /bin/sh -c echo "NodeIp: 0.0.0.0\nReplicationIp: 0.0.0.0" >> /etc/eventstore/eventstore.conf # buildkit	193 bytes
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: VOLUME [/var/lib/eventstore]	32 bytes
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: VOLUME [/var/log/eventstore]	32 bytes
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: EXPOSE map[1112/tcp:{}]	32 bytes
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: EXPOSE map[1113/tcp:{}]	32 bytes
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: EXPOSE map[2113/tcp:{}]	32 bytes
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: HEALTHCHECK &{["CMD-SHELL" "curl --fail --insecure https://localhost:2113/health/live \|\| curl --fail http://localhost:2113/health/live \|\| exit 1"] "5s" "5s" "0s" "0s" '\x18'}	32 bytes
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: ENTRYPOINT ["/opt/eventstore/eventstored"]	32 bytes

	eventstoredb-ee 24.10.16-x64-8.0-jammy	image amd64 linux d8f75ca7-0a28-44dc-… 308.6 MB — 4 days, 20 hours ago	27
Older	eventstoredb-ee 24.10.16-x64-8.0-bookworm-slim	image amd64 linux bea15cd7-31b2-4093-… 267.8 MB — 4 days, 19 hours ago	0
Older	eventstoredb-ee 24.10.15	image amd64 linux 24.10.15-x64-8.0-ja… 8fdcf7c2-6f9f-4b9e-… 24.10 latest 1 more 302.8 MB — 1 week, 6 days ago	179
Older	eventstoredb-ee 24.10.15-x64-8.0-bookworm-slim	image amd64 linux fbca4eb5-334f-46a5-… 267.6 MB — 1 week, 6 days ago	8
Older	eventstoredb-ee 24.10.14	image amd64 linux 24.10.14-x64-8.0-ja… 221e0ad0-09aa-413b-… 299.5 MB — 3 months, 2 weeks ago	1367
Older	eventstoredb-ee 24.10.14-x64-8.0-bookworm-slim	image amd64 linux bf7996a7-3814-4eeb-… 266.0 MB — 3 months, 2 weeks ago	9
Older	eventstoredb-ee 24.10.13	image amd64 linux 24.10.13-x64-8.0-ja… ffe47d2b-5de3-4897-… 299.0 MB — 5 months ago	6188
Older	eventstoredb-ee 24.10.13-x64-8.0-bookworm-slim	image amd64 linux d2f0ae75-1469-4ca4-… 266.1 MB — 5 months ago	19
Older	eventstoredb-ee 24.10.12	image amd64 linux 24.10.12-x64-8.0-ja… 5aec4e5c-dd2d-4c23-… 299.0 MB — 5 months, 2 weeks ago	1036
Older	eventstoredb-ee 24.10.12-x64-8.0-bookworm-slim	image amd64 linux 3190d8b8-9f2b-4b56-… 266.1 MB — 5 months, 2 weeks ago	17
Older	eventstoredb-ee 24.10.11	image amd64 linux 24.10.11-x64-8.0-ja… 32db3a88-a6f7-4f30-… 298.5 MB — 6 months, 1 week ago	410
Older	eventstoredb-ee 24.10.11-x64-8.0-bookworm-slim	image amd64 linux 1a05a80d-daea-4380-… 267.2 MB — 6 months, 1 week ago	14
Older	eventstoredb-ee 24.10.10	image amd64 linux 24.10.10-x64-8.0-ja… 4c1c0084-d5ae-4e94-… 296.6 MB — 7 months, 2 weeks ago	854
Older	eventstoredb-ee 24.10.10-x64-8.0-bookworm-slim	image amd64 linux 3f800137-60f1-4646-… 266.1 MB — 7 months, 2 weeks ago	13
Older	eventstoredb-ee 24.10.9	image amd64 linux 24.10.9-x64-8.0-jam… ba9999dc-7620-4f96-… 296.2 MB — 8 months, 3 weeks ago	466
Older	eventstoredb-ee 24.10.9-x64-8.0-bookworm-slim	image amd64 linux 50bcc967-d927-4d51-… 266.1 MB — 8 months, 3 weeks ago	12
Older	eventstoredb-ee 24.10.8	image amd64 linux 24.10.8-x64-8.0-jam… 8bdebf73-fe93-4dcd-… 296.3 MB — 9 months ago	451
Older	eventstoredb-ee 24.10.8-x64-8.0-bookworm-slim	image amd64 linux 4b5fb235-2b9c-42ef-… 266.4 MB — 9 months ago	13
Older	eventstoredb-ee 24.10.7	image amd64 linux 24.10.7-x64-8.0-jam… 567526f9-a8e7-4e90-… 294.5 MB — 11 months, 3 weeks ago	5054
Older	eventstoredb-ee 24.10.7-x64-8.0-bookworm-slim	image amd64 linux 154112d7-abbd-4d12-… 266.4 MB — 11 months, 3 weeks ago	9

Only packages within the same repository are displayed. The current package you're viewing is highlighted.

Last scanned

4 days, 20 hours ago

Scan result

Vulnerable

Vulnerability count

Max. severity

High

Target:	gRAsZjGEpJR8.sbom-cyclonedx.json (ubuntu 22.04)
MEDIUM	CVE-2026-27456: util-linux: TOCTOU in the mount program when setting up loop devices util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privileges via fork() + setuid() + realpath(), but subsequently re-canonicalizes and opens it with root privileges (euid=0) without verifying that the path has not been replaced between both operations. Neither O_NOFOLLOW, nor inode comparison, nor post-open fstat() are employed. This allows a local unprivileged user to replace the source file with a symlink pointing to any root-owned file or device during the race window, causing the SUID binary to open and mount it as root. Exploitation requires an /etc/fstab entry with user,loop options whose path points to a directory where the attacker has write permission, and that /usr/bin/mount has the SUID bit set (the default configuration on virtually all Linux distributions). The impact is unauthorized read access to root-protected files and block devices, including backup images, disk volumes, and any file containing a valid filesystem. This issue has been patched in version 2.41.4. Package Name: bsdutils Installed Version: 1:2.37.2-4ubuntu3.5 Fixed Version: References: cve.mitre.org access.redhat.com github.com github.com github.com github.com nvd.nist.gov www.cve.org
MEDIUM	CVE-2026-54371: attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component can redirect getfattr and setfattr operations to arbitrary files by substituting a symlink, leading to local privilege escalation when getfattr or setfattr is invoked by a privileged process over an attacker-controlled path. Package Name: libattr1 Installed Version: 1:2.5.1-1build1 Fixed Version: References: access.redhat.com access.redhat.com access.redhat.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com cgit.git.savannah.nongnu.org cgit.git.savannah.nongnu.org creativecommons.org cve.mitre.org errata.almalinux.org errata.rockylinux.org linux.oracle.com linux.oracle.com nvd.nist.gov security.access.redhat.com www.cve.org www.openwall.com www.vulncheck.com
MEDIUM	CVE-2026-27456: util-linux: TOCTOU in the mount program when setting up loop devices util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privileges via fork() + setuid() + realpath(), but subsequently re-canonicalizes and opens it with root privileges (euid=0) without verifying that the path has not been replaced between both operations. Neither O_NOFOLLOW, nor inode comparison, nor post-open fstat() are employed. This allows a local unprivileged user to replace the source file with a symlink pointing to any root-owned file or device during the race window, causing the SUID binary to open and mount it as root. Exploitation requires an /etc/fstab entry with user,loop options whose path points to a directory where the attacker has write permission, and that /usr/bin/mount has the SUID bit set (the default configuration on virtually all Linux distributions). The impact is unauthorized read access to root-protected files and block devices, including backup images, disk volumes, and any file containing a valid filesystem. This issue has been patched in version 2.41.4. Package Name: libblkid1 Installed Version: 2.37.2-4ubuntu3.5 Fixed Version: References: cve.mitre.org access.redhat.com github.com github.com github.com github.com nvd.nist.gov www.cve.org
MEDIUM	CVE-2026-27456: util-linux: TOCTOU in the mount program when setting up loop devices util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privileges via fork() + setuid() + realpath(), but subsequently re-canonicalizes and opens it with root privileges (euid=0) without verifying that the path has not been replaced between both operations. Neither O_NOFOLLOW, nor inode comparison, nor post-open fstat() are employed. This allows a local unprivileged user to replace the source file with a symlink pointing to any root-owned file or device during the race window, causing the SUID binary to open and mount it as root. Exploitation requires an /etc/fstab entry with user,loop options whose path points to a directory where the attacker has write permission, and that /usr/bin/mount has the SUID bit set (the default configuration on virtually all Linux distributions). The impact is unauthorized read access to root-protected files and block devices, including backup images, disk volumes, and any file containing a valid filesystem. This issue has been patched in version 2.41.4. Package Name: libmount1 Installed Version: 2.37.2-4ubuntu3.5 Fixed Version: References: cve.mitre.org access.redhat.com github.com github.com github.com github.com nvd.nist.gov www.cve.org
MEDIUM	CVE-2026-13757: p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services. Package Name: libp11-kit0 Installed Version: 0.24.0-6build1 Fixed Version: References: access.redhat.com access.redhat.com access.redhat.com access.redhat.com access.redhat.com access.redhat.com access.redhat.com access.redhat.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com creativecommons.org cve.mitre.org errata.almalinux.org errata.rockylinux.org github.com linux.oracle.com linux.oracle.com nvd.nist.gov www.cve.org
MEDIUM	CVE-2026-27456: util-linux: TOCTOU in the mount program when setting up loop devices util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privileges via fork() + setuid() + realpath(), but subsequently re-canonicalizes and opens it with root privileges (euid=0) without verifying that the path has not been replaced between both operations. Neither O_NOFOLLOW, nor inode comparison, nor post-open fstat() are employed. This allows a local unprivileged user to replace the source file with a symlink pointing to any root-owned file or device during the race window, causing the SUID binary to open and mount it as root. Exploitation requires an /etc/fstab entry with user,loop options whose path points to a directory where the attacker has write permission, and that /usr/bin/mount has the SUID bit set (the default configuration on virtually all Linux distributions). The impact is unauthorized read access to root-protected files and block devices, including backup images, disk volumes, and any file containing a valid filesystem. This issue has been patched in version 2.41.4. Package Name: libsmartcols1 Installed Version: 2.37.2-4ubuntu3.5 Fixed Version: References: cve.mitre.org access.redhat.com github.com github.com github.com github.com nvd.nist.gov www.cve.org
MEDIUM	CVE-2026-27456: util-linux: TOCTOU in the mount program when setting up loop devices util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privileges via fork() + setuid() + realpath(), but subsequently re-canonicalizes and opens it with root privileges (euid=0) without verifying that the path has not been replaced between both operations. Neither O_NOFOLLOW, nor inode comparison, nor post-open fstat() are employed. This allows a local unprivileged user to replace the source file with a symlink pointing to any root-owned file or device during the race window, causing the SUID binary to open and mount it as root. Exploitation requires an /etc/fstab entry with user,loop options whose path points to a directory where the attacker has write permission, and that /usr/bin/mount has the SUID bit set (the default configuration on virtually all Linux distributions). The impact is unauthorized read access to root-protected files and block devices, including backup images, disk volumes, and any file containing a valid filesystem. This issue has been patched in version 2.41.4. Package Name: libuuid1 Installed Version: 2.37.2-4ubuntu3.5 Fixed Version: References: cve.mitre.org access.redhat.com github.com github.com github.com github.com nvd.nist.gov www.cve.org
MEDIUM	CVE-2026-27456: util-linux: TOCTOU in the mount program when setting up loop devices util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privileges via fork() + setuid() + realpath(), but subsequently re-canonicalizes and opens it with root privileges (euid=0) without verifying that the path has not been replaced between both operations. Neither O_NOFOLLOW, nor inode comparison, nor post-open fstat() are employed. This allows a local unprivileged user to replace the source file with a symlink pointing to any root-owned file or device during the race window, causing the SUID binary to open and mount it as root. Exploitation requires an /etc/fstab entry with user,loop options whose path points to a directory where the attacker has write permission, and that /usr/bin/mount has the SUID bit set (the default configuration on virtually all Linux distributions). The impact is unauthorized read access to root-protected files and block devices, including backup images, disk volumes, and any file containing a valid filesystem. This issue has been patched in version 2.41.4. Package Name: mount Installed Version: 2.37.2-4ubuntu3.5 Fixed Version: References: cve.mitre.org access.redhat.com github.com github.com github.com github.com nvd.nist.gov www.cve.org
MEDIUM	CVE-2026-18477: tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access to the system where the restore is being performed. During restoration, files or directories may be created, renamed or overwritten outside the intended extraction directory. This could lead to unauthorized file modification or, in some cases, privilege escalation. Exploitation does not require the attacker to modify or craft the archive, and standard backup and restore workflows—including extracting into a newly created directory without using the -P option do not mitigate the issue. Package Name: tar Installed Version: 1.34+dfsg-1ubuntu0.1.22.04.6 Fixed Version: References: access.redhat.com access.redhat.com bugzilla.redhat.com nvd.nist.gov www.cve.org
MEDIUM	CVE-2026-18508: tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary and, when combined with a preexisting symbolic link under the working directory, may allow writing outside that boundary during a single extraction. Package Name: tar Installed Version: 1.34+dfsg-1ubuntu0.1.22.04.6 Fixed Version: References: access.redhat.com access.redhat.com bugzilla.redhat.com nvd.nist.gov www.cve.org
MEDIUM	CVE-2026-27456: util-linux: TOCTOU in the mount program when setting up loop devices util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privileges via fork() + setuid() + realpath(), but subsequently re-canonicalizes and opens it with root privileges (euid=0) without verifying that the path has not been replaced between both operations. Neither O_NOFOLLOW, nor inode comparison, nor post-open fstat() are employed. This allows a local unprivileged user to replace the source file with a symlink pointing to any root-owned file or device during the race window, causing the SUID binary to open and mount it as root. Exploitation requires an /etc/fstab entry with user,loop options whose path points to a directory where the attacker has write permission, and that /usr/bin/mount has the SUID bit set (the default configuration on virtually all Linux distributions). The impact is unauthorized read access to root-protected files and block devices, including backup images, disk volumes, and any file containing a valid filesystem. This issue has been patched in version 2.41.4. Package Name: util-linux Installed Version: 2.37.2-4ubuntu3.5 Fixed Version: References: cve.mitre.org access.redhat.com github.com github.com github.com github.com nvd.nist.gov www.cve.org
LOW	CVE-2022-27943: binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new. Package Name: gcc-12-base Installed Version: 12.3.0-1ubuntu1~22.04.3 Fixed Version: References: access.redhat.com gcc.gnu.org gcc.gnu.org gcc.gnu.org gcc.gnu.org gcc.gnu.org lists.fedoraproject.org nvd.nist.gov sourceware.org www.cve.org
LOW	CVE-2022-27943: binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new. Package Name: libgcc-s1 Installed Version: 12.3.0-1ubuntu1~22.04.3 Fixed Version: References: access.redhat.com gcc.gnu.org gcc.gnu.org gcc.gnu.org gcc.gnu.org gcc.gnu.org lists.fedoraproject.org nvd.nist.gov sourceware.org www.cve.org
LOW	CVE-2024-2236: libgcrypt: vulnerable to Marvin Attack A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts. Package Name: libgcrypt20 Installed Version: 1.9.4-3ubuntu3.2 Fixed Version: References: access.redhat.com access.redhat.com access.redhat.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com creativecommons.org cve.mitre.org dev.gnupg.org errata.almalinux.org errata.rockylinux.org github.com gitlab.com linux.oracle.com linux.oracle.com lists.gnupg.org nvd.nist.gov www.cve.org
LOW	CVE-2025-5222: icu: Stack buffer overflow in the SRBRoot::addTag function A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution. Package Name: libicu70 Installed Version: 70.1-2 Fixed Version: References: access.redhat.com access.redhat.com access.redhat.com access.redhat.com access.redhat.com access.redhat.com access.redhat.com access.redhat.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com cert-portal.siemens.com creativecommons.org cve.mitre.org errata.almalinux.org errata.rockylinux.org linux.oracle.com linux.oracle.com lists.debian.org nvd.nist.gov unicode-org.atlassian.net www.cve.org
LOW	CVE-2023-50495: ncurses: segmentation fault via _nc_wrap_entry() NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry(). Package Name: libncurses6 Installed Version: 6.3-2ubuntu0.2 Fixed Version: References: access.redhat.com lists.fedoraproject.org lists.gnu.org lists.gnu.org nvd.nist.gov security.netapp.com ubuntu.com www.cve.org
LOW	CVE-2023-50495: ncurses: segmentation fault via _nc_wrap_entry() NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry(). Package Name: libncursesw6 Installed Version: 6.3-2ubuntu0.2 Fixed Version: References: access.redhat.com lists.fedoraproject.org lists.gnu.org lists.gnu.org nvd.nist.gov security.netapp.com ubuntu.com www.cve.org
LOW	CVE-2022-41409: pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input. Package Name: libpcre2-8-0 Installed Version: 10.39-3ubuntu0.1 Fixed Version: References: access.redhat.com github.com github.com github.com nvd.nist.gov www.cve.org
LOW	CVE-2022-27943: binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new. Package Name: libstdc++6 Installed Version: 12.3.0-1ubuntu1~22.04.3 Fixed Version: References: access.redhat.com gcc.gnu.org gcc.gnu.org gcc.gnu.org gcc.gnu.org gcc.gnu.org lists.fedoraproject.org nvd.nist.gov sourceware.org www.cve.org
LOW	CVE-2026-40228: systemd: systemd-journald: Unintended output to user terminals via logger command In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set. Package Name: libsystemd0 Installed Version: 249.11-0ubuntu3.22 Fixed Version: References: www.openwall.com access.redhat.com nvd.nist.gov www.cve.org www.openwall.com
LOW	CVE-2023-50495: ncurses: segmentation fault via _nc_wrap_entry() NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry(). Package Name: libtinfo6 Installed Version: 6.3-2ubuntu0.2 Fixed Version: References: access.redhat.com lists.fedoraproject.org lists.gnu.org lists.gnu.org nvd.nist.gov security.netapp.com ubuntu.com www.cve.org
LOW	CVE-2026-40228: systemd: systemd-journald: Unintended output to user terminals via logger command In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set. Package Name: libudev1 Installed Version: 249.11-0ubuntu3.22 Fixed Version: References: www.openwall.com access.redhat.com nvd.nist.gov www.cve.org www.openwall.com
LOW	CVE-2022-4899: zstd: mysql: buffer overrun in util.c A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun. Package Name: libzstd1 Installed Version: 1.4.8+dfsg-3build1 Fixed Version: References: access.redhat.com access.redhat.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com creativecommons.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org cve.mitre.org errata.almalinux.org errata.rockylinux.org github.com github.com github.com github.com github.com linux.oracle.com linux.oracle.com lists.fedoraproject.org lists.fedoraproject.org lists.fedoraproject.org lists.fedoraproject.org lists.fedoraproject.org lists.fedoraproject.org nvd.nist.gov security.netapp.com security.netapp.com www.cve.org
LOW	CVE-2023-29383: shadow: Improper input validation in shadow-utils package utility chfn In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that "cat /etc/passwd" shows a rogue user account. Package Name: login Installed Version: 1:4.8.1-2ubuntu2.2 Fixed Version: References: access.redhat.com github.com github.com lists.debian.org nvd.nist.gov www.cve.org www.trustwave.com www.trustwave.com
LOW	CVE-2024-56433: shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid. Package Name: login Installed Version: 1:4.8.1-2ubuntu2.2 Fixed Version: References: access.redhat.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com creativecommons.org cve.mitre.org errata.almalinux.org errata.rockylinux.org github.com github.com github.com linux.oracle.com linux.oracle.com nvd.nist.gov www.cve.org
LOW	CVE-2023-50495: ncurses: segmentation fault via _nc_wrap_entry() NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry(). Package Name: ncurses-base Installed Version: 6.3-2ubuntu0.2 Fixed Version: References: access.redhat.com lists.fedoraproject.org lists.gnu.org lists.gnu.org nvd.nist.gov security.netapp.com ubuntu.com www.cve.org
LOW	CVE-2023-50495: ncurses: segmentation fault via _nc_wrap_entry() NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry(). Package Name: ncurses-bin Installed Version: 6.3-2ubuntu0.2 Fixed Version: References: access.redhat.com lists.fedoraproject.org lists.gnu.org lists.gnu.org nvd.nist.gov security.netapp.com ubuntu.com www.cve.org
LOW	CVE-2023-29383: shadow: Improper input validation in shadow-utils package utility chfn In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that "cat /etc/passwd" shows a rogue user account. Package Name: passwd Installed Version: 1:4.8.1-2ubuntu2.2 Fixed Version: References: access.redhat.com github.com github.com lists.debian.org nvd.nist.gov www.cve.org www.trustwave.com www.trustwave.com
LOW	CVE-2024-56433: shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid. Package Name: passwd Installed Version: 1:4.8.1-2ubuntu2.2 Fixed Version: References: access.redhat.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com creativecommons.org cve.mitre.org errata.almalinux.org errata.rockylinux.org github.com github.com github.com linux.oracle.com linux.oracle.com nvd.nist.gov www.cve.org
Target:	opt/eventstore/EventStore.ClusterNode.deps.json
MEDIUM	CVE-2026-40894: OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to 1.15.2 and OpenTelemetry.Extensions.Propagators 1.3.1 to 1.15.2, The implementation details of the baggage, B3 and Jaeger processing code in the OpenTelemetry.Api and OpenTelemetry.Extensions.Propagators NuGet packages can allocate excessive memory when parsing which could create a potential denial of service (DoS) in the consuming application. This vulnerability is fixed in 1.15.3. Package Name: OpenTelemetry.Api Installed Version: 1.4.0-rc.1 Fixed Version: 1.15.3 References: github.com github.com github.com github.com github.com github.com github.com github.com github.com nvd.nist.gov
Target:	opt/eventstore/EventStore.TestClient.deps.json
MEDIUM	CVE-2026-40894: OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to 1.15.2 and OpenTelemetry.Extensions.Propagators 1.3.1 to 1.15.2, The implementation details of the baggage, B3 and Jaeger processing code in the OpenTelemetry.Api and OpenTelemetry.Extensions.Propagators NuGet packages can allocate excessive memory when parsing which could create a potential denial of service (DoS) in the consuming application. This vulnerability is fixed in 1.15.3. Package Name: OpenTelemetry.Api Installed Version: 1.4.0-rc.1 Fixed Version: 1.15.3 References: github.com github.com github.com github.com github.com github.com github.com github.com github.com nvd.nist.gov
Target:	opt/eventstore/plugins/EventStore.Auth.StreamPolicyPlugin/EventStore.Auth.StreamPolicyPlugin.deps.json
HIGH	CVE-2025-6965: sqlite: Integer Truncation in SQLite There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above. Package Name: SQLitePCLRaw.lib.e_sqlite3 Installed Version: 2.1.6 Fixed Version: References: seclists.org seclists.org seclists.org seclists.org seclists.org www.openwall.com access.redhat.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com cert-portal.siemens.com cert-portal.siemens.com creativecommons.org cve.mitre.org errata.almalinux.org errata.rockylinux.org github.com github.com github.com linux.oracle.com linux.oracle.com nvd.nist.gov ubuntu.com ubuntu.com www.cve.org www.oracle.com www.sqlite.org
MEDIUM	CVE-2026-40894: OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to 1.15.2 and OpenTelemetry.Extensions.Propagators 1.3.1 to 1.15.2, The implementation details of the baggage, B3 and Jaeger processing code in the OpenTelemetry.Api and OpenTelemetry.Extensions.Propagators NuGet packages can allocate excessive memory when parsing which could create a potential denial of service (DoS) in the consuming application. This vulnerability is fixed in 1.15.3. Package Name: OpenTelemetry.Api Installed Version: 1.4.0-rc.1 Fixed Version: 1.15.3 References: github.com github.com github.com github.com github.com github.com github.com github.com github.com nvd.nist.gov
Target:	opt/eventstore/plugins/EventStore.AutoScavengePlugin/EventStore.AutoScavenge.deps.json
HIGH	CVE-2025-6965: sqlite: Integer Truncation in SQLite There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above. Package Name: SQLitePCLRaw.lib.e_sqlite3 Installed Version: 2.1.6 Fixed Version: References: seclists.org seclists.org seclists.org seclists.org seclists.org www.openwall.com access.redhat.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com cert-portal.siemens.com cert-portal.siemens.com creativecommons.org cve.mitre.org errata.almalinux.org errata.rockylinux.org github.com github.com github.com linux.oracle.com linux.oracle.com nvd.nist.gov ubuntu.com ubuntu.com www.cve.org www.oracle.com www.sqlite.org
MEDIUM	CVE-2026-40894: OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to 1.15.2 and OpenTelemetry.Extensions.Propagators 1.3.1 to 1.15.2, The implementation details of the baggage, B3 and Jaeger processing code in the OpenTelemetry.Api and OpenTelemetry.Extensions.Propagators NuGet packages can allocate excessive memory when parsing which could create a potential denial of service (DoS) in the consuming application. This vulnerability is fixed in 1.15.3. Package Name: OpenTelemetry.Api Installed Version: 1.4.0-rc.1 Fixed Version: 1.15.3 References: github.com github.com github.com github.com github.com github.com github.com github.com github.com nvd.nist.gov
Target:	opt/eventstore/plugins/EventStore.ConnectedSubsystemsPlugin/EventStore.POC.ConnectedSubsystemsPlugin.deps.json
HIGH	CVE-2025-6965: sqlite: Integer Truncation in SQLite There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above. Package Name: SQLitePCLRaw.lib.e_sqlite3 Installed Version: 2.1.6 Fixed Version: References: seclists.org seclists.org seclists.org seclists.org seclists.org www.openwall.com access.redhat.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com cert-portal.siemens.com cert-portal.siemens.com creativecommons.org cve.mitre.org errata.almalinux.org errata.rockylinux.org github.com github.com github.com linux.oracle.com linux.oracle.com nvd.nist.gov ubuntu.com ubuntu.com www.cve.org www.oracle.com www.sqlite.org
MEDIUM	CVE-2026-40894: OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to 1.15.2 and OpenTelemetry.Extensions.Propagators 1.3.1 to 1.15.2, The implementation details of the baggage, B3 and Jaeger processing code in the OpenTelemetry.Api and OpenTelemetry.Extensions.Propagators NuGet packages can allocate excessive memory when parsing which could create a potential denial of service (DoS) in the consuming application. This vulnerability is fixed in 1.15.3. Package Name: OpenTelemetry.Api Installed Version: 1.4.0-rc.1 Fixed Version: 1.15.3 References: github.com github.com github.com github.com github.com github.com github.com github.com github.com nvd.nist.gov
Target:	opt/eventstore/plugins/EventStore.TcpPlugin/EventStore.TcpPlugin.deps.json
HIGH	CVE-2025-6965: sqlite: Integer Truncation in SQLite There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above. Package Name: SQLitePCLRaw.lib.e_sqlite3 Installed Version: 2.1.6 Fixed Version: References: seclists.org seclists.org seclists.org seclists.org seclists.org www.openwall.com access.redhat.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com cert-portal.siemens.com cert-portal.siemens.com creativecommons.org cve.mitre.org errata.almalinux.org errata.rockylinux.org github.com github.com github.com linux.oracle.com linux.oracle.com nvd.nist.gov ubuntu.com ubuntu.com www.cve.org www.oracle.com www.sqlite.org
MEDIUM	CVE-2026-40894: OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to 1.15.2 and OpenTelemetry.Extensions.Propagators 1.3.1 to 1.15.2, The implementation details of the baggage, B3 and Jaeger processing code in the OpenTelemetry.Api and OpenTelemetry.Extensions.Propagators NuGet packages can allocate excessive memory when parsing which could create a potential denial of service (DoS) in the consuming application. This vulnerability is fixed in 1.15.3. Package Name: OpenTelemetry.Api Installed Version: 1.4.0-rc.1 Fixed Version: 1.15.3 References: github.com github.com github.com github.com github.com github.com github.com github.com github.com nvd.nist.gov

Package statistics are no longer available on cloudsmith.io. Please visit our new web app to access this feature.

You can embed a badge in another website that shows this or the latest version of this package.

To embed the badge for this specific package version, use the following:

[![This version of 'eventstoredb-ee' @ Cloudsmith](https://dkr-api.cloudsmith.com/v1/badges/version/eventstore/eventstore/docker/eventstoredb-ee/24.10.16-x64-8.0-jammy/a=amd64;xpo=linux/?render=true)](https://cloudsmith.io/~eventstore/repos/eventstore/packages/detail/docker/eventstoredb-ee/6736ea443d7257452da2f7c3cf859a217289fb0c020350b022cce8563470513d/a=amd64;xpo=linux/)

|This version of 'eventstoredb-ee' @ Cloudsmith|
.. |This version of 'eventstoredb-ee' @ Cloudsmith| image:: https://dkr-api.cloudsmith.com/v1/badges/version/eventstore/eventstore/docker/eventstoredb-ee/24.10.16-x64-8.0-jammy/a=amd64;xpo=linux/?render=true
   :target: https://cloudsmith.io/~eventstore/repos/eventstore/packages/detail/docker/eventstoredb-ee/6736ea443d7257452da2f7c3cf859a217289fb0c020350b022cce8563470513d/a=amd64;xpo=linux/

image::https://dkr-api.cloudsmith.com/v1/badges/version/eventstore/eventstore/docker/eventstoredb-ee/24.10.16-x64-8.0-jammy/a=amd64;xpo=linux/?render=true[link="https://cloudsmith.io/~eventstore/repos/eventstore/packages/detail/docker/eventstoredb-ee/6736ea443d7257452da2f7c3cf859a217289fb0c020350b022cce8563470513d/a=amd64;xpo=linux/",title="This version of 'eventstoredb-ee' @ Cloudsmith"]

<a href="https://cloudsmith.io/~eventstore/repos/eventstore/packages/detail/docker/eventstoredb-ee/6736ea443d7257452da2f7c3cf859a217289fb0c020350b022cce8563470513d/a=amd64;xpo=linux/"><img src="https://dkr-api.cloudsmith.com/v1/badges/version/eventstore/eventstore/docker/eventstoredb-ee/24.10.16-x64-8.0-jammy/a=amd64;xpo=linux/?render=true" alt="This version of 'eventstoredb-ee' @ Cloudsmith" /></a>

rendered as:

To embed the badge for the latest package version, use the following:

[![Latest version of 'eventstoredb-ee' @ Cloudsmith](https://dkr-api.cloudsmith.com/v1/badges/version/eventstore/eventstore/docker/eventstoredb-ee/latest/a=amd64;xpo=linux/?render=true&show_latest=true)](https://cloudsmith.io/~eventstore/repos/eventstore/packages/detail/docker/eventstoredb-ee/latest/a=amd64;xpo=linux/)

|Latest version of 'eventstoredb-ee' @ Cloudsmith|
.. |Latest version of 'eventstoredb-ee' @ Cloudsmith| image:: https://dkr-api.cloudsmith.com/v1/badges/version/eventstore/eventstore/docker/eventstoredb-ee/latest/a=amd64;xpo=linux/?render=true&show_latest=true
   :target: https://cloudsmith.io/~eventstore/repos/eventstore/packages/detail/docker/eventstoredb-ee/latest/a=amd64;xpo=linux/

image::https://dkr-api.cloudsmith.com/v1/badges/version/eventstore/eventstore/docker/eventstoredb-ee/latest/a=amd64;xpo=linux/?render=true&show_latest=true[link="https://cloudsmith.io/~eventstore/repos/eventstore/packages/detail/docker/eventstoredb-ee/latest/a=amd64;xpo=linux/",title="Latest version of 'eventstoredb-ee' @ Cloudsmith"]

<a href="https://cloudsmith.io/~eventstore/repos/eventstore/packages/detail/docker/eventstoredb-ee/latest/a=amd64;xpo=linux/"><img src="https://dkr-api.cloudsmith.com/v1/badges/version/eventstore/eventstore/docker/eventstoredb-ee/latest/a=amd64;xpo=linux/?render=true&show_latest=true" alt="Latest version of 'eventstoredb-ee' @ Cloudsmith" /></a>

rendered as:

These instructions assume you have setup the repository first (or read it).

To pull eventstoredb-ee @ reference/tag d8f75ca7-0a28-44dc-96b3-4516f209f293:

docker pull docker.eventstore.com/eventstore/eventstoredb-ee:d8f75ca7-0a28-44dc-96b3-4516f209f293

You can also pull the latest version of this image (if it exists):

docker pull docker.eventstore.com/eventstore/eventstoredb-ee:latest

To refer to this image after pulling in a Dockerfile, specify the following:

FROM docker.eventstore.com/eventstore/eventstoredb-ee:d8f75ca7-0a28-44dc-96b3-4516f209f293

Note: You should replace d8f75ca7-0a28-44dc-96b3-4516f209f293 with an alternative reference to pull, such as: 24.10.16-x64-8.0-jammy.

Still stuck? Need help? Don't panic. Just contact us for help (even if you're not a customer).

Previous Version: 24.10.16-x64-8.0-bo…

Next Version

eventstoredb-ee 24.10.16-x64-8.0-jammy

One-liner (summary)

Description

License

Size

Downloads

Tags

Last scanned

Scan result

Vulnerability count

Max. severity

CVE-2026-27456: util-linux: TOCTOU in the mount program when setting up loop devices

CVE-2026-54371: attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

CVE-2026-27456: util-linux: TOCTOU in the mount program when setting up loop devices

CVE-2026-27456: util-linux: TOCTOU in the mount program when setting up loop devices

CVE-2026-13757: p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

CVE-2026-27456: util-linux: TOCTOU in the mount program when setting up loop devices

CVE-2026-27456: util-linux: TOCTOU in the mount program when setting up loop devices

CVE-2026-27456: util-linux: TOCTOU in the mount program when setting up loop devices

CVE-2026-18477: tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

CVE-2026-18508: tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

CVE-2026-27456: util-linux: TOCTOU in the mount program when setting up loop devices

CVE-2022-27943: binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

CVE-2022-27943: binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

CVE-2024-2236: libgcrypt: vulnerable to Marvin Attack

CVE-2025-5222: icu: Stack buffer overflow in the SRBRoot::addTag function

CVE-2023-50495: ncurses: segmentation fault via _nc_wrap_entry()

CVE-2023-50495: ncurses: segmentation fault via _nc_wrap_entry()

CVE-2022-41409: pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop

CVE-2022-27943: binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

CVE-2026-40228: systemd: systemd-journald: Unintended output to user terminals via logger command

CVE-2023-50495: ncurses: segmentation fault via _nc_wrap_entry()

CVE-2026-40228: systemd: systemd-journald: Unintended output to user terminals via logger command

CVE-2022-4899: zstd: mysql: buffer overrun in util.c

CVE-2023-29383: shadow: Improper input validation in shadow-utils package utility chfn

CVE-2024-56433: shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

CVE-2023-50495: ncurses: segmentation fault via _nc_wrap_entry()

CVE-2023-50495: ncurses: segmentation fault via _nc_wrap_entry()

CVE-2023-29383: shadow: Improper input validation in shadow-utils package utility chfn

CVE-2024-56433: shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

CVE-2026-40894: OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers

CVE-2026-40894: OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers

CVE-2025-6965: sqlite: Integer Truncation in SQLite

CVE-2026-40894: OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers

CVE-2025-6965: sqlite: Integer Truncation in SQLite

CVE-2026-40894: OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers

CVE-2025-6965: sqlite: Integer Truncation in SQLite

CVE-2026-40894: OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers

CVE-2025-6965: sqlite: Integer Truncation in SQLite

CVE-2026-40894: OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers