[Git][security-tracker-team/security-tracker][master] Add new docker-buildx issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
58553dd1 by Salvatore Bonaccorso at 2026-11-04T23:01:35+01:00
Add new docker-buildx issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -522,7 +522,8 @@ CVE-2026-95723 (A missing integrity verification vulnerability has been discover
 CVE-2026-95722 (A local privilege escalation vulnerability has been discovered in the  ...)
 	NOT-FOR-US: HPE
 CVE-2026-93325 (Buildx bake requires the user to grant entitlements with --allow or an ...)
-	TODO: check
+	- docker-buildx <unfixed>
+	NOTE: https://github.com/docker/buildx/security/advisories/GHSA-gwr2-q96m-6682
 CVE-2026-92610 (In esmf-sdk-py-aspect-model-loader versions 2.1.2 to 2.2.1, the Aspect ...)
 	NOT-FOR-US: esmf-sdk-py-aspect-model-loader
 CVE-2026-92211 (Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote C ...)
@@ -897,9 +898,11 @@ CVE-2026-121544 (Koodo Reader through 2.4.6 contains a path traversal vulnerabil
 CVE-2026-121543 (smart-sso through 2.0.1 contains an incorrect authorization vulnerabil ...)
 	TODO: check
 CVE-2026-121542 (In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake d ...)
-	TODO: check
+	- docker-buildx <unfixed>
+	NOTE: https://github.com/docker/buildx/security/advisories/GHSA-rghq-x9hf-hc3r
 CVE-2026-121541 (In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake d ...)
-	TODO: check
+	- docker-buildx <unfixed>
+	NOTE: https://github.com/docker/buildx/security/advisories/GHSA-xg6v-cv2h-2w5h
 CVE-2026-121539 (A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87 ...)
 	TODO: check
 CVE-2026-121535 (A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/58553dd1981ec7bd52db181ca2b9c8a054958b4b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/58553dd1981ec7bd52db181ca2b9c8a054958b4b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/8508a4f5/attachment.htm>