Fedora 44 : docker-buildkit (2025-c1b04cbaba)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c1b04cbaba advisory. Automatic update for docker-buildkit-0.25.2-1.fc44. Changelog Wed Nov 5 2025 Bradley G Smith - 0.25.2-1 - Update to v0.25.2 - CVE-2025-58183;...

Low: runc

Issue Overview: No CVE associated with this advisory Affected Packages: runc Note: This advisory is applicable to Amazon Linux 2 - Docker Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue...

PT-2026-22403

Name of the Vulnerable Software and Affected Versions Docker Model Runner versions prior to 1.0.16 Docker Desktop versions prior to 4.61.0 when Model Runner is enabled Description Docker Model Runner is software used to manage, run, and deploy AI models using Docker. Versions prior to 1.0.16 expo...

Important Photon OS Security Update - PHSA-2025-5.0-0667

Updates of 'docker-compose' packages of Photon OS have been released...

PT-2025-45375

Name of the Vulnerable Software and Affected Versions runc version 1.2.7 runc version 1.3.2 runc version 1.4.0-rc.2 Description runc is a CLI tool for spawning and running containers according to the OCI specification. A race condition exists that allows an attacker to trick the tool into...

[SECURITY] Fedora 43 Update: skopeo-1.20.0-5.fc43

Command line utility to inspect images and repositories directly on Docker registries without the need to pull them...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: runc, spark-operator, wire-go, kubeflow, ini-file, kube-vip-cloud-provider, src-fingerprint, policy-controller, kubescape-operator, terraform-provider-tls, controller-gen, kapp, capslock, kwok, kind, hydra, nfpm, pulumi-kubernetes-operator, task, dataplaneapi,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file, sbom-scorecard...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...

CVE-2025-61725 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file, sbom-scorecard...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file, sbom-scorecard...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: runc, cluster-proportional-autoscaler, go-licenses, helm-mapkubeapis, http-echo, dask-gateway, kubernetes-csi-driver-hostpath, rancher-loglevel, spark-operator, wire-go, yunikorn-web, kubeflow, cargobump, cadvisor, neuvector-dbgen, vault-env, ini-file,...