RAUDI

🐳 RAUDI: Imágenes Docker Actualizadas Regular y Automáticamente RAUDI Regularly and Automatically Updated Docker Images genera y mantiene actualizadas automáticamente una serie de imágenes Docker mediante GitHub Actions para herramientas que no son proporcionadas por los desarrolladores. Tabla de...

[SECURITY] Fedora 44 Update: docker-buildx-0.37.2-1.fc44

Docker CLI plugin for extended build capabilities with BuildKit...

Linux Distros Unpatched Vulnerability : CVE-2026-103433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through...

DEBIAN-CVE-2026-103433

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

CVE-2026-103433

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

CVE-2026-103433

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

CVE-2026-103433 Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

EUVD-2026-92818

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

CVE-2026-103433 Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

CVE-2026-103433

Docker Buildx Bake fails to request the required fs.read approval for specific filesystem inputs. This vulnerability allows an untrusted Bake definition to expose a readable file via a pathless secret (where the ID is interpreted as a client-side pathname) or to consume a local OCI image layout o...

CVE-2026-103433 Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

CVE-2026-103433

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

PT-2026-106257

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

CLEANSTART-2026-RR17110 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the docker-cli-buildx package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CLEANSTART-2026-SK27128 Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps

Security vulnerability affects the docker-cli-buildx package. Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps...

CLEANSTART-2026-ZT40995 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner

Security vulnerability affects the docker-cli-buildx package. BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner...

CLEANSTART-2026-DU09908 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner

Security vulnerability affects the docker-cli-buildx package. BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner...

CLEANSTART-2026-FH32149 Moby is an open source container framework

Security vulnerability affects the docker-cli-buildx package. Moby is an open source container framework...

CLEANSTART-2026-RR21163 Moby is an open source container framework

Security vulnerability affects the docker-cli-buildx package. Moby is an open source container framework...

CLEANSTART-2026-OE45196 compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, ...

Security vulnerability affects the docker-cli-buildx package. The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory...