Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 42: FEDORA-2025-6ddb790d26 critical docker-buildx input clean-up

fedora
Calendar Grey May 30, 2025
Dist Fedora Esm H88
The latest Docker Buildx v0.24.0 release features essential fixes tackling input sanitization vulnerabilities. It's advisable to upgrade.
Update package to release v0.24.0 Resolve: rhbz#2366388, rhbz#2360632 Upstream fixes and changes

Summary

Docker CLI plugin for extended build capabilities with BuildKit.

Update Information:

Update package to release v0.24.0 Resolve: rhbz#2366388, rhbz#2360632 Upstream fixes and changes

Topics%20covered

Topics Covered

security advisory update critical Fedora docker-buildx input neutralization

Change Log

* Wed May 21 2025 Bradley G Smith - 0.24.0-1 - Update package to release v0.24.0 - Resolve: rhbz#2366388, rhbz#2360632 - Upstream fixes and changes

References


[ 1 ] Bug #2360632 - CVE-2025-22872 docker-buildx: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2360632 [ 2 ] Bug #2366388 - docker-buildx-0.24.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2366388

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-6ddb790d26' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: docker-buildx
Product: Fedora 42
Version: 0.24.0
Release: 1.fc42
URL: https://github.com/docker/buildx
Summary: Docker CLI plugin for extended build capabilities with BuildKit

Topics%20covered

Topics Covered

security advisory update critical Fedora docker-buildx input neutralization

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here