oras vulnerabilities (openSUSE)

2 vulnerabilities.

• oras openSUSE oras-go: Hardlink entry with relative Linkname escapes extract dir via process CWD resolution in `oras-go` tar extraction CVE-2026-50163 Fix available 7.1 HighJuly 1, 2026
• oras openSUSE Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip CVE-2024-24790 Fix available 9.8 CriticalJune 4, 2024