Priority LOW 28
A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.
RHSA-2026:43122
Red Hat Hardened Images RPMs Security Update
Released 2026-07-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Hardened Images buildah-2:1.44.0-3.2.hum1@aarch64, buildah-2:1.44.0-3.2.hum1@src, buildah-2:1.44.0-3.2.hum1@x86_64 +2
Fixes 2 records
TI-2026-13282 CVE-2026-15788
WCOW cache mount source selector resolves NTFS junctions outside of cache root
Priority LOW 25
BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS directory junctions placed inside the cache root.