355 matches found
melange
melange Build apk packages using declarative pipelines. Commonly used to provide custom packages for container images built with apko. The majority of apks are built for use with either the Wolfi or Alpine Linux ecosystems. Key features: Pipeline-oriented builds. Every step of the build pipeline ...
dasel-melange-apko
dasel v3.3.1 — Melange + apko build, patched for CVE-2026-33320 This repo packages the dasel CLI v3.3.1 as an APK with Melange , builds a minimal container image with apko , and applies a fix for CVE-2026-33320 while staying on the v3.3.1 codebase a patch, not a version bump. The result is a 4 MB...
dasel-hardened-container
dasel v3.3.1 hardened container This is a melange package and apko container image for dasel v3.3.1 with a build-time patch for CVE-2026-33320 unbounded YAML alias expansion. The image is built entirely from a locally-produced APK - no prebuilt upstream image is used. Prerequisites Tool| Tested...
CLEANSTART-2026-GP93140 Security fix for GHSA-x744-4wpc-v9h2 applied in: amazon-cloudwatch-agent 1.300065.0-r1, melange 0.55.0-r1, promxy 0.0.96-r2, promxy 0.0.96-r3
GHSA-x744-4wpc-v9h2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-GY19353 Security fix for GHSA-fpg8-7664-jc5q applied in: melange 0.55.0-r1
Security vulnerability affects the melange package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-VE30653 Security fix for GHSA-w5pp-99ch-qj29 applied in: melange 0.50.0-r1
Security vulnerability affects the melange package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-QC57398 Security fix for GHSA-m7cr-m3pv-hgrp applied in: argo-cd 3.2.7-r2, argo-cd-fips 3.3.7-r2, melange 0.50.0-r1
GHSA-m7cr-m3pv-hgrp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-WG42729 Security fix for GHSA-389r-gv7p-r3rp applied in: melange 0.50.0-r1
Security vulnerability affects the melange package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-ZS17332 Security fix for GHSA-crhj-59gh-8x96 applied in: argo-cd 3.2.7-r2, argo-cd-fips 3.3.7-r2, melange 0.50.0-r1
GHSA-crhj-59gh-8x96 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-ZF72021 Security fix for GHSA-hcwr-pq9g-rq3m applied in: melange 0.50.0-r1
Security vulnerability affects the melange package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-TH39318 Security fix for GHSA-m7hm-vm4x-28jf applied in: melange 0.50.0-r1
Security vulnerability affects the melange package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-FL36737 Security fix for GHSA-m3xc-h892-ggx6 applied in: rclone 1.74.1-r0, rclone 1.73.5.r1, melange 0.50.0-r1
GHSA-m3xc-h892-ggx6 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-KA00609 Security fix for GHSA-qw64-3x98-g7q2 applied in: rclone 1.73.5.r1, melange 0.50.0-r1
GHSA-qw64-3x98-g7q2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-OX52673 Security fix for GHSA-qq3r-w4hj-gjp6 applied in: melange 0.50.0-r1
Security vulnerability affects the melange package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-64013 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-qemu-melange...
CVE-2026-64020 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-qemu-melange...
GHSA-VRP7-59VV-QGVC vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-qemu-melange...
GHSA-F2X8-XRW8-F2M5 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-qemu-melange...