RAUDI

🐳 RAUDI: Regularly and Automatically Updated Docker Images RAUDI Regularly and Automatically Updated Docker Images automatically generates and keep updated a series of Docker Images through GitHub Actions for tools that are not provided by the developers. Table of Contents What is RAUDI Fork Setu...

CVE-2026-103433

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

CVE-2026-103433 Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

CVE-2026-103433

Docker Buildx Bake fails to request the required fs.read approval for specific filesystem inputs. This vulnerability allows an untrusted Bake definition to expose a readable file via a pathless secret (where the ID is interpreted as a client-side pathname) or to consume a local OCI image layout o...

CVE-2026-78662 affecting package docker-buildx for versions less than 0.14.0-17

CVE-2026-78662 affecting package docker-buildx for versions less than 0.14.0-17. A patched version of the package is available...

CVE-2026-56855 affecting package docker-buildx for versions less than 0.14.0-17

CVE-2026-56855 affecting package docker-buildx for versions less than 0.14.0-17. A patched version of the package is available...

CVE-2026-37236 affecting package docker-buildx for versions less than 0.14.0-17

CVE-2026-37236 affecting package docker-buildx for versions less than 0.14.0-17. A patched version of the package is available...

Fedora 46 : docker-buildx (2026-934d570022)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-934d570022 advisory. Automatic update for docker-buildx-0.37.2-1.fc46. Changelog Wed Sep 30 2026 Bradley G Smith - 0.37.2-1 - Update to release v0.37.2 - Resolves:...

AZL-99195 CVE-2026-78662 affecting package docker-buildx for versions less than 0.14.0-17

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

AZL-99198 CVE-2026-56855 affecting package docker-buildx for versions less than 0.14.0-17

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

AZL-98358 CVE-2026-37236 affecting package docker-buildx for versions less than 0.14.0-17

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16

CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16. A patched version of the package is available...

Fedora 45 : docker-buildx (2026-c37317fdde)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c37317fdde advisory. Automatic update for docker-buildx-0.36.0-1.fc45. Changelog Wed Jul 29 2026 Bradley G Smith - 0.36.0-1 - Update to release v0.36.0 - Resolves:...

AZL-93165 CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: doppler-kubernetes-operator, kubernetes-csi-external-provisioner, pgpool2exporter, aws-otel-collector, kubewatch, ytt, pvc-autoresizer, conjur-cli, cerbos, nri-elasticsearch, kapp-controller, tekton-chains, secrets-store-csi-driver-provider-gcp, kyverno-notation-aws,...

[SECURITY] Fedora 44 Update: docker-buildx-0.35.0-1.fc44

Docker CLI plugin for extended build capabilities with BuildKit...

[SECURITY] Fedora 43 Update: docker-buildx-0.35.0-1.fc43

Docker CLI plugin for extended build capabilities with BuildKit...

Fedora 43 : docker-buildx (2026-3cca6f41d4)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3cca6f41d4 advisory. - Update to release v0.35.0 - Resolves: rhbz2487819 - Resolves CVE-2026-39828: rhbz2489918, rhbz2490102 - Upstream enhancements, new features, and...

Fedora 44 : docker-buildx (2026-105f7df940)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-105f7df940 advisory. - Update to release v0.35.0 - Resolves: rhbz2487819 - Resolves CVE-2026-39828: rhbz2489918, rhbz2490102 - Upstream enhancements, new features, and...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, helm-push, tigera-operator, kubescape-operator-fips, neuvector-scanner-fips, packer-fips, tigera-operator-fips, docker, docker-compose, cloudbeat, helm-operator-fips, kubescape-server-fips, datadog-agent, manifest-tool, kaniko, gitlab-rails-ce,...