Apptainer is an open source container platform. In Apptainer versions less than 1.4.5, a container can disable two of the forms of the little used --security option, in particular the forms --security=apparmor:<profile> and --security=selinux:<label> which otherwise put restrictions on operations that containers can do. The --security option has always been mentioned in Apptainer documentation as being a feature for the root user, although these forms do also work for unprivileged users on systems where the corresponding feature is enabled. Apparmor is enabled by default on Debian-based distributions and SElinux is enabled by default on RHEL-based distributions, but on SUSE it depends on the distribution version. This vulnerability is fixed in 1.4.5.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ff963b3775 advisory.

    Apply fuse2fs patches that were accidentally empty

    ----

    Update to upstream 1.4.5, including a fix for CVE-2025-65105

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-cf169a01e8 advisory.

    Apply fuse2fs patches that were accidentally empty

    ----

    Update to upstream 1.4.5, including a fix for CVE-2025-65105

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-df330356b2 advisory.

    Apply fuse2fs patches that were accidentally empty

    ----

    Update to upstream 1.4.5, including a fix for CVE-2025-65105

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Apptainer is an open source container platform. In Apptainer versions less than 1.4.5, a container can     disable two of the forms of the little used --security option, in particular the forms
    --security=apparmor:<profile> and --security=selinux:<label> which otherwise put restrictions on     operations that containers can do. The --security option has always been mentioned in Apptainer     documentation as being a feature for the root user, although these forms do also work for unprivileged     users on systems where the corresponding feature is enabled. Apparmor is enabled by default on Debian-     based distributions and SElinux is enabled by default on RHEL-based distributions, but on SUSE it depends     on the distribution version. This vulnerability is fixed in 1.4.5. (CVE-2025-65105)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
278585	Fedora 42 : apptainer (2025-ff963b3775)	Nessus	Fedora Local Security Checks	medium
278584	Fedora 43 : apptainer (2025-cf169a01e8)	Nessus	Fedora Local Security Checks	medium
278583	Fedora 41 : apptainer (2025-df330356b2)	Nessus	Fedora Local Security Checks	medium
277096	Linux Distros Unpatched Vulnerability : CVE-2025-65105	Nessus	Misc.	medium

Detections

Analytics

CVE-2025-65105

medium

Tenable Plugins

medium

medium

medium

medium