NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference through the LLB solver and llbsolver operation handling in solver/llbsolver/ops and solver/llbsolver/vertex.go. An attacker can crash the BuildKit daemon by supplying a malicious frontend or LLB definition with...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference through the LLB solver and llbsolver operation handling in solver/llbsolver/ops and solver/llbsolver/vertex.go. An attacker can crash the BuildKit daemon by supplying a malicious frontend or LLB definition with...

SUSE SLES12 Security Update : docker, docker-stable (SUSE-SU-2025:1102-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1102-1 advisory. - CVE-2025-22868: Fixed unexpected memory consumption during token parsing in golang.org/x/oauth2 bsc1239185. - CVE-2025-22869: Fixed Denial of...

Security update for docker, docker-stable

This update for docker, docker-stable fixes the following issues: CVE-2025-22868: Fixed unexpected memory consumption during token parsing in golang.org/x/oauth2 bsc1239185. CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh bsc1239322. CVE-2024-29018: Fixed...

SUSE-SU-2025:1102-1 Security update for docker, docker-stable

This update for docker, docker-stable fixes the following issues: - CVE-2025-22868: Fixed unexpected memory consumption during token parsing in golang.org/x/oauth2 bsc1239185. - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh bsc1239322. - CVE-2024-29018:...

Security update for docker-stable

This update for docker-stable fixes the following issues: CVE-2024-29018: Fixed external DNS request handling from 'internal' networks that could have led to data exfiltration bsc1234089. CVE-2024-23650: Fixed possibile BuildKit daemon crash via malicious BuildKit client or frontend request...

Astra Linux – Vulnerability in libpod

BuildKit is a toolkit for converting source code into build artifacts in an efficient, expressive, and repeatable manner. A malicious BuildKit client or frontend could create a request that could cause the BuildKit daemon to crash with a panic. This issue has been fixed in v0.12.5. As a workaroun...