melange

melange 선언형 파이프라인을 사용하여 apk 패키지를 빌드합니다. 일반적으로 apko로 빌드된 컨테이너 이미지에 맞춤 패키지를 제공하는 데 사용됩니다. 대부분의 apk는 Wolfi 또는 Alpine Linux 에코시스템에서 사용하기 위해 빌드됩니다. 주요 기능: 파이프라인 중심 빌드. 빌드 파이프라인의 모든 단계는 전통적인 패키지 관리자와 달리 명확한 단계가 없이 사용자가 정의하고 제어합니다. 기본 다중 아키텍처. QEMU를 사용하여 다양한 아키텍처를 에뮬레이션하므로 크로스 컴파일 단계가 필요하지 않습니다. 왜 보안...

CVE-2026-54174

CVE-2026-54174 affects melange (Chainguard's declarative APK package builder), specifically the Apko component (chainguard.dev/apko). Prior to Apko 1.2.9 (corresponding to melange 0.50.4), the tool verified the control section hash (.PKGINFO etc.) against the signed APKINDEX but never verified th...

CVE-2026-54174 melange: Incomplete package integrity verification allows data section substitution

melange allows users to build apk packages using declarative pipelines. Apko prior to version 1.2.9, corresponding to melange prior to version 0.50.4, verified the control section hash .PKGINFO etc. against the signed APKINDEX, but never verified the data section hash the actual package files tha...

CVE-2026-64388 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

CVE-2026-53091 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

CVE-2026-53113 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

CVE-2026-64067 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

CVE-2026-64068 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

CVE-2026-64079 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

CVE-2026-64082 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

CVE-2026-64154 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

CVE-2026-64283 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

GHSA-8264-G9FH-VX2H vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

GHSA-8VM6-JVF8-6W38 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

GHSA-P5XX-69G5-8564 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

GHSA-XQ85-JG4P-XF7W vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

GHSA-CG5C-7728-29V7 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

GHSA-F2M7-5M7M-7G2C vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

GHSA-HRH3-6X34-5FXF vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

GHSA-4C74-G9CQ-VHC5 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...