Fedora 44 : docker-buildkit (2025-c1b04cbaba)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c1b04cbaba advisory. Automatic update for docker-buildkit-0.25.2-1.fc44. Changelog Wed Nov 5 2025 Bradley G Smith - 0.25.2-1 - Update to v0.25.2 - CVE-2025-58183;...

Low: runc

Issue Overview: No CVE associated with this advisory Affected Packages: runc Note: This advisory is applicable to Amazon Linux 2 - Docker Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue...

Important Photon OS Security Update - PHSA-2025-5.0-91-0667

Updates of 'docker-compose' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-5.0-0667

Updates of 'docker-compose' packages of Photon OS have been released...

PT-2025-45375

Name of the Vulnerable Software and Affected Versions runc version 1.2.7 runc version 1.3.2 runc version 1.4.0-rc.2 Description runc is a CLI tool for spawning and running containers according to the OCI specification. A race condition exists that allows an attacker to trick the tool into...

[SECURITY] Fedora 43 Update: skopeo-1.20.0-5.fc43

Command line utility to inspect images and repositories directly on Docker registries without the need to pull them...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: hydra, cert-manager-webhook-pdns, kratos, gosu, go-licenses, ini-file, azure-workload-identity-webhook, policy-controller, fixuid, rancher-helm, kubecolor, timestamp-authority, wazero, opentofu, whereabouts, dbmate, docker-credential-gcr, speedtest-go, elvish,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: policy-controller, ini-file, azure-workload-identity-webhook, wazero, docker-cli, coredns, oras, task, direnv, helm-push, terraform-provider-random, gostatsd, metacontroller, dagdotdev, dockerize, infinispan-operator, chart-testing, go-tools, custom-pod-autoscaler,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: hydra, cert-manager-webhook-pdns, kratos, gosu, go-licenses, ini-file, azure-workload-identity-webhook, policy-controller, fixuid, rancher-helm, kubecolor, timestamp-authority, wazero, opentofu, whereabouts, dbmate, docker-credential-gcr, speedtest-go, elvish,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: hydra, cert-manager-webhook-pdns, kratos, gosu, go-licenses, ini-file, azure-workload-identity-webhook, policy-controller, fixuid, rancher-helm, kubecolor, timestamp-authority, wazero, opentofu, whereabouts, dbmate, docker-credential-gcr, speedtest-go, elvish,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: hydra, cert-manager-webhook-pdns, kratos, gosu, go-licenses, ini-file, azure-workload-identity-webhook, policy-controller, fixuid, rancher-helm, kubecolor, timestamp-authority, wazero, opentofu, whereabouts, dbmate, docker-credential-gcr, speedtest-go, elvish,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: hydra, cert-manager-webhook-pdns, kratos, gosu, go-licenses, ini-file, azure-workload-identity-webhook, policy-controller, fixuid, rancher-helm, kubecolor, timestamp-authority, wazero, opentofu, whereabouts, dbmate, docker-credential-gcr, speedtest-go, elvish,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: hydra, cert-manager-webhook-pdns, kratos, gosu, go-licenses, ini-file, azure-workload-identity-webhook, policy-controller, fixuid, rancher-helm, kubecolor, timestamp-authority, wazero, opentofu, whereabouts, dbmate, docker-credential-gcr, speedtest-go, elvish,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: hydra, cert-manager-webhook-pdns, kratos, policy-controller, go-licenses, ini-file, azure-workload-identity-webhook, rancher-helm, fixuid, timestamp-authority, kubecolor, whereabouts, wazero, opentofu, dbmate, docker-credential-gcr, speedtest-go, elvish, octo-sts,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: hydra, cert-manager-webhook-pdns, kratos, gosu, go-licenses, ini-file, azure-workload-identity-webhook, policy-controller, fixuid, rancher-helm, kubecolor, timestamp-authority, wazero, opentofu, whereabouts, dbmate, docker-credential-gcr, speedtest-go, elvish,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: hydra, cert-manager-webhook-pdns, kratos, gosu, go-licenses, ini-file, azure-workload-identity-webhook, policy-controller, fixuid, rancher-helm, kubecolor, timestamp-authority, wazero, opentofu, whereabouts, dbmate, docker-credential-gcr, speedtest-go, elvish,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: hydra, cert-manager-webhook-pdns, kratos, gosu, go-licenses, ini-file, azure-workload-identity-webhook, policy-controller, fixuid, rancher-helm, kubecolor, timestamp-authority, whereabouts, opentofu, dbmate, docker-credential-gcr, speedtest-go, elvish, octo-sts,...

CVE-2025-61725 vulnerabilities

Vulnerabilities for packages: hydra, cert-manager-webhook-pdns, kratos, gosu, go-licenses, ini-file, azure-workload-identity-webhook, policy-controller, fixuid, rancher-helm, kubecolor, timestamp-authority, wazero, opentofu, whereabouts, dbmate, docker-credential-gcr, speedtest-go, elvish,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: hydra, cert-manager-webhook-pdns, kratos, gosu, go-licenses, ini-file, azure-workload-identity-webhook, policy-controller, fixuid, rancher-helm, kubecolor, timestamp-authority, wazero, opentofu, whereabouts, dbmate, docker-credential-gcr, speedtest-go, elvish,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: hydra, cert-manager-webhook-pdns, kratos, gosu, go-licenses, ini-file, azure-workload-identity-webhook, policy-controller, fixuid, rancher-helm, kubecolor, timestamp-authority, wazero, opentofu, whereabouts, dbmate, docker-credential-gcr, speedtest-go, elvish,...