RAUDI

🐳 RAUDI: Regularly and Automatically Updated Docker Images RAUDI Regularly and Automatically Updated Docker Images automatically generates and keep updated a series of Docker Images through GitHub Actions for tools that are not provided by the developers. Table of Contents What is RAUDI Fork Setu...

openSUSE 16: docker / docker-bash-completion / docker-buildx / etc (openSUSE-SU-2026:22158-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22158-1 advisory. Security issues fixed: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc126578...

SUSE SLED15: docker / docker-bash-completion / docker-buildx / etc (SUSE-SU-2026:4822-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4822-1 advisory. This update for docker rebuilds it against the current go security release. Tenable has extracted the preceding...

[SECURITY] Fedora 43 Update: docker-buildx-0.38.0-1.fc43

Docker CLI plugin for extended build capabilities with BuildKit...

Fedora 43 : docker-buildx (2026-60dcacbb4f)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-60dcacbb4f advisory. - Update to release v0.38.0 - Resolves: rhbz2544412 ---- - Update to release v0.37.2 - Resolves: rhbz2544198 - Resolves CVE-2026-56855: rhbz2530594 ...

CVE-2026-92543 affecting package docker-buildx for versions less than 0.14.0-19

CVE-2026-92543 affecting package docker-buildx for versions less than 0.14.0-19. A patched version of the package is available...

CVE-2026-78660 affecting package docker-buildx for versions less than 0.14.0-19

CVE-2026-78660 affecting package docker-buildx for versions less than 0.14.0-19. A patched version of the package is available...

CVE-2026-97032 affecting package docker-buildx for versions less than 0.14.0-19

CVE-2026-97032 affecting package docker-buildx for versions less than 0.14.0-19. A patched version of the package is available...

CVE-2026-78659 affecting package docker-buildx for versions less than 0.14.0-19

CVE-2026-78659 affecting package docker-buildx for versions less than 0.14.0-19. A patched version of the package is available...

CVE-2026-81870 affecting package docker-buildx for versions less than 0.14.0-19

CVE-2026-81870 affecting package docker-buildx for versions less than 0.14.0-19. A patched version of the package is available...

CVE-2026-78669 affecting package docker-buildx for versions less than 0.14.0-19

CVE-2026-78669 affecting package docker-buildx for versions less than 0.14.0-19. A patched version of the package is available...

PT-2026-115327

Name of the Vulnerable Software and Affected Versions Docker affected versions not specified Description A failure in the Docker Buildx filesystem entitlements protection mechanism allows for remote code execution. Recommendations At the moment, there is no information about a newer version that...

Docker Buildx Filesystem Entitlements Protection Mechanism Failure Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Docker Buildx. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of ba...

CVE-2026-84304 affecting package docker-buildx for versions less than 0.14.0-18

CVE-2026-84304 affecting package docker-buildx for versions less than 0.14.0-18. A patched version of the package is available...

AZL-107309 CVE-2026-97032 affecting package docker-buildx 0.14.0-17

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107321 CVE-2026-78669 affecting package docker-buildx 0.14.0-17

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

AZL-107312 CVE-2026-78660 affecting package docker-buildx 0.14.0-17

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

AZL-107306 CVE-2026-78659 affecting package docker-buildx 0.14.0-17

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

AZL-107318 CVE-2026-78663 affecting package docker-buildx 0.14.0-17

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

AZL-107303 CVE-2026-61801 affecting package docker-buildx 0.14.0-17

The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...