stable

docker-buildkit-0.25.2-1.fc44

FEDORA-2025-c1b04cbaba created by buckaroogeek 4 months ago for Fedora 44

Automatic update for docker-buildkit-0.25.2-1.fc44.

Changelog
* Wed Nov  5 2025 Bradley G Smith <bradley.g.smith@gmail.com> - 0.25.2-1
- Update to v0.25.2
- CVE-2025-58183; Resolves: rhbz#2412529
- CVE-2025-58188; Resolves: rhbz#2412380, rhbz#2411476, rhbz#2410945
- CVE-2025-58185; Resolves: rhbz#2410578, rhbz#2410299, rhbz#2410013
- CVE-2025-61723; Resolves: rhbz#2409627, rhbz#2409349, rhbz#2409065
- CVE-2025-58189; Resolves: rhbz#2408157, rhbz#2407880, rhbz#2407612
- Upstream updates

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2025-c1b04cbaba

This update was automatically created

4 months ago

This update's test gating status has been changed to 'ignored'.

4 months ago

This update's test gating status has been changed to 'waiting'.

4 months ago

This update's test gating status has been changed to 'ignored'.

4 months ago

This update has been submitted for stable by bodhi

4 months ago

Please log in to add feedback.

Metadata
Type
security
Karma
0
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
disabled
Stable by Time
0 days
Dates
submitted
4 months ago
in testing
4 months ago
in stable
4 months ago
approved
4 months ago
Builds
1
docker-buildkit-0.25.2-1.fc44
BZ#2407612 CVE-2025-58189 docker-buildkit: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-41]
0
0
BZ#2407880 CVE-2025-58189 docker-buildkit: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
0
0
BZ#2408157 CVE-2025-58189 docker-buildkit: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43]
0
0
BZ#2409065 CVE-2025-61723 docker-buildkit: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-41]
0
0
BZ#2409349 CVE-2025-61723 docker-buildkit: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-42]
0
0
BZ#2409627 CVE-2025-61723 docker-buildkit: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-43]
0
0
BZ#2410013 CVE-2025-58185 docker-buildkit: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-41]
0
0
BZ#2410299 CVE-2025-58185 docker-buildkit: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-42]
0
0
BZ#2410578 CVE-2025-58185 docker-buildkit: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43]
0
0
BZ#2410945 CVE-2025-58188 docker-buildkit: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-41]
0
0
BZ#2411476 CVE-2025-58188 docker-buildkit: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-43]
0
0
BZ#2412380 CVE-2025-58188 docker-buildkit: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-42]
0
0
BZ#2412529 CVE-2025-58183 docker-buildkit: Unbounded allocation when parsing GNU sparse map [fedora-41]
0
0
docker-buildkit-0.25.2-1.fc44

Automated Test Results

Copyright © 2007-2026 Red Hat, Inc. and others.

Running bodhi-server 25.11.3 on bodhi-web-20-v5tqb.

bodhi is Free Software. Please file issues if you have any problems. Read the documentation.

• Composes • Legal • Privacy policy •