CVE catalog

CVE-2026-71482

golang-github-containerd-stargz-snapshotter: CVE-2026-71482

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]

[Unknown description]

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiangolang-github-containerd-stargz-snapshottersid0.14.3-7vulnerable
Debiangolang-github-containerd-stargz-snapshotterforky0.14.3-7vulnerable
Debiangolang-github-containerd-stargz-snapshottertrixie0.14.3-4vulnerable
Debiangolang-github-containerd-stargz-snapshotterbookworm0.12.0-2vulnerable
Ubuntugolang-github-containerd-stargz-snapshotterpro0.12.0-2build1vulnerable
Ubuntugolang-github-containerd-stargz-snapshotterpro0.12.0-2ubuntu0.24.04.1vulnerable
Ubuntugolang-github-containerd-stargz-snapshotterpro0.12.0-2ubuntu0.24.04.2vulnerable
Ubuntugolang-github-containerd-stargz-snapshotterpro0.12.0-2ubuntu0.24.04.2+esm1vulnerable
Ubuntugolang-github-containerd-stargz-snapshotterpro0.12.0-2ubuntu0.24.04.3vulnerable
Ubuntugolang-github-containerd-stargz-snapshotterpro0.12.0-2ubuntu0.24.04.3+esm1vulnerable
Ubuntugolang-github-containerd-stargz-snapshotterpro0.12.0-2ubuntu0.24.04.3+esm2vulnerable
Ubuntugolang-github-containerd-stargz-snapshotter26.100.14.3-4build1vulnerable
Ubuntugolang-github-containerd-stargz-snapshotter26.100.14.3-5vulnerable
Ubuntugolang-github-containerd-stargz-snapshotter26.100.14.3-6vulnerable
Ubuntugolang-github-containerd-stargz-snapshotter26.100.14.3-7vulnerable
Ubuntugolang-github-containerd-stargz-snapshotter26.040.14.3-4vulnerable
Ubuntugolang-github-containerd-stargz-snapshotter26.040.14.3-4build1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiangolang-github-containerd-stargz-snapshottersourcesid(unfixed)not yet assignedNot reported[1152024]
Debiangolang-github-containerd-stargz-snapshottersourceforky(unfixed)not yet assignedNot reported[1152024]
Debiangolang-github-containerd-stargz-snapshottersourcetrixie(unfixed)not yet assignedNot reported[1152024]
Debiangolang-github-containerd-stargz-snapshottersourcebookworm(unfixed)not yet assignedNot reported[1152024]

[Debian bug #1152024]

Notes

[trixie] golang-github-containerd-stargz-snapshotter: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [golang-github-containerd-stargz-snapshotter-dev]Affected

    Source package: [golang-github-containerd-stargz-snapshotter]

    Details (2)

    • 0.12.0-2 · all · bookworm

      Affected

      dsa · golang-github-containerd-stargz-snapshotter · debian · bookworm; dsa · golang-github-containerd-stargz-snapshotter · debian · 12

    • 0.12.0-2 · all · bookworm

      Affected

      dsa · golang-github-containerd-stargz-snapshotter · debian · bookworm; dsa · golang-github-containerd-stargz-snapshotter · debian · 12

  • [stargz-snapshotter]Affected

    Source package: [golang-github-containerd-stargz-snapshotter]

    Details (2)

    • 0.12.0-2+b10 · amd64 · bookworm

      Affected

      dsa · golang-github-containerd-stargz-snapshotter · debian · bookworm; dsa · golang-github-containerd-stargz-snapshotter · debian · 12

    • 0.12.0-2+b10 · arm64 · bookworm

      Affected

      dsa · golang-github-containerd-stargz-snapshotter · debian · bookworm; dsa · golang-github-containerd-stargz-snapshotter · debian · 12

[Debian 13 (Trixie)]

Observed:

References

[Debian Security Tracker] · [OSV Package Vulnerability Database]