Поиск уязвимостей

ALT-PU-2026-12785: package `buildkit` update to version 0.32.2-alt1

BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS directory junctions placed inside the cache root. A build authored by an untrusted user on a WCOW-configured BuildKit daemon can read arbitrary host files reachable to the BuildKit daemon process.

BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS directory junctions placed inside the cache root. A build authored by an untrusted user on a WCOW-configured BuildKit daemon can read arbitrary host files reachable to the BuildKit daemon process.

WCOW cache mount source selector resolves NTFS junctions outside of cache root

BuildKit's cache mount source= selector on Windows Container on Window ...

A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass authentication, etc.

A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass authentication, etc.

A custom client can produce such an upload request to the BuildKit dae ...

Уязвимость buildkit

Уязвимость buildkit

Уязвимость программного средства сборки контейнеров BuildKit, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.

A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.

A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.

A malicious BuildKit client or frontend could craft a request that cou ...

A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory.

A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory.

A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory.

A crafted message in the BuildKit low-level build API can be used to r ...

Уязвимость buildkit