CVE-2026-42575

apko allows users to build and publish OCI container images built from apk packages. Prior to version 1.2.7, apko verifies the signature on APKINDEX.tar.gz but never compares individually downloaded .apk packages against the checksum recorded in the signed index. The checksum is parsed and...

ROOT-OS-ALPINE-315-CVE-2022-28506 CVE-2022-28506 in rootio-giflib - Patched by Root

Root has patched CVE-2022-28506 in the rootio-giflib package for Root:Alpine:3.15. Multiple fixed versions available...

CVE-2026-42574 apko dirFS has a symlink-following path traversal that allows multiple entry points to escape the build root

apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before version 1.2.5, a crafted .apk could install a TypeSymlink tar entry whose target pointed outside the build root, and a subsequent directory-creation or file-write entry in the same o...

apko 路径遍历漏洞

Apko is an open-source OCI image builder based on APK. In versions 0.14.8 to 1.2.5 of Apko, there was a path traversal vulnerability. This vulnerability occurred because specially crafted APK packages could install entries that pointed to directories other than the build root directory. This...

Astra Linux - уязвимость в linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerabilities have been resolved: irqchip/alpine-msi: The refcount leak in alpinemsixinitdomains has been fixed. The function ofirqfindparent returns a node pointer with the refcount incremented. We should use ofnodeput on it when it is no longer needed. Add t...

Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain

Cybersecurity researchers have warned of malicious images pushed to the official "checkmarx/kics" Docker Hub repository. In an alert published today, software supply chain security company Socket revealed that unknown threat actors managed to have overwritten existing tags, including v2.1.20 and...

ALPINE-CVE-2026-25835

Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator PRNG...

ALPINE-CVE-2026-25834

Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade...

ROOT-OS-ALPINE-322-CVE-2025-9820 CVE-2025-9820 in rootio-gnutls - Patched by Root

Root has patched CVE-2025-9820 in the rootio-gnutls package for Root:Alpine:3.22. Multiple fixed versions available...

ROOT-OS-ALPINE-322-CVE-2025-32990 CVE-2025-32990 in rootio-gnutls - Patched by Root

Root has patched CVE-2025-32990 in the rootio-gnutls package for Root:Alpine:3.22. Multiple fixed versions available...

ROOT-OS-ALPINE-322-CVE-2025-32988 CVE-2025-32988 in rootio-gnutls - Patched by Root

Root has patched CVE-2025-32988 in the rootio-gnutls package for Root:Alpine:3.22. Multiple fixed versions available...

ROOT-OS-ALPINE-322-CVE-2025-6395 CVE-2025-6395 in rootio-gnutls - Patched by Root

Root has patched CVE-2025-6395 in the rootio-gnutls package for Root:Alpine:3.22. Multiple fixed versions available...

ROOT-OS-ALPINE-322-CVE-2025-32989 CVE-2025-32989 in rootio-gnutls - Patched by Root

Root has patched CVE-2025-32989 in the rootio-gnutls package for Root:Alpine:3.22. Multiple fixed versions available...

ROOT-OS-ALPINE-319-CVE-2023-5568 CVE-2023-5568 in rootio-samba - Patched by Root

Root has patched CVE-2023-5568 in the rootio-samba package for Root:Alpine:3.19. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2024-23638 CVE-2024-23638 in rootio-squid - Patched by Root

Root has patched CVE-2024-23638 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2023-46848 CVE-2023-46848 in rootio-squid - Patched by Root

Root has patched CVE-2023-46848 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2024-37894 CVE-2024-37894 in rootio-squid - Patched by Root

Root has patched CVE-2024-37894 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2023-49286 CVE-2023-49286 in rootio-squid - Patched by Root

Root has patched CVE-2023-49286 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2023-46847 CVE-2023-46847 in rootio-squid - Patched by Root

Root has patched CVE-2023-46847 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2023-50269 CVE-2023-50269 in rootio-squid - Patched by Root

Root has patched CVE-2023-50269 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...