Missing container images for versions containing fix for CVE-2025-52881 #6510
-
|
I’m trying to pull a container image of buildah that includes the fix for CVE-2025-52881, but I’m unable to find any corresponding images on Quay: According to the release notes, the CVE is fixed in the following versions:
|
Beta Was this translation helpful? Give feedback.
Replies: 3 comments 1 reply
-
|
The images are built using Fedora's packages, so I would expect a 1.42.1 image once the package update goes live. The package update is tracked at https://bodhi.fedoraproject.org/updates/FEDORA-2025-8a248ee4f4. |
Beta Was this translation helpful? Give feedback.
-
|
@rutger-gerritsen I wouldn't recommend it for a production environment, but only a test environment until the Fedora Images finally get through testing. The upstream image, built nightly from the GitHub repository, includes the fix for CVE-2025-52881 if you want to test sooner. |
Beta Was this translation helpful? Give feedback.
-
|
Thanks for the explanation — that helps a lot! Good to know that the fix is already available in Fedora’s updates-testing repo. I understand that's not recommended for production use, but it’s very helpful for validating the fix ahead of time. Also appreciate the pointer about the upstream nightly image being built directly from the GitHub source and already containing the CVE-2025-52881 fix — that will make early testing even easier. Thanks again for the clarification! |
Beta Was this translation helpful? Give feedback.
The images are built using Fedora's packages, so I would expect a 1.42.1 image once the package update goes live. The package update is tracked at https://bodhi.fedoraproject.org/updates/FEDORA-2025-8a248ee4f4.