Back Linuxsecurity

Fedora 44 docker-buildkit High Improper Certificate Validation CVE-2026

Linuxsecurity •LinuxSecurity Advisories • May 23, 2026

Update to release v0.30.0 Resolves CVE-2026-39984: rhbz#2458929 Upstream new features and fixes

* Wed May 13 2026 Bradley G Smith - 0.30.0-1 - Update to release v0.30.0 - Resolves CVE-2026-39984: rhbz#2458929 - Upstream new features and fixes

[ 1 ] Bug #2458929 - CVE-2026-39984 docker-buildkit: improper certificate validation in verifier [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-5045ce29e3' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Fedora Docker Vulnerabilities Addressed in Recent Updates Fedora has released updates for docker-buildx and docker-buildkit to address CVE-2026-39984, which involves improper certificate validation. The vulnerabilities affect multiple Fedora versions, including 42, 43, and 44, with docker-buildx and docker-buildkit both impacted. The updates were published on May 13, 2026, and resolve issues that could allow attackers to exploit the improper validation in the verifier. Users are advised to upgrade to the latest versions (0.34.0 for docker-buildx and 0.30.0 for docker-buildkit) to mitigate these vulnerabilities. The flaws could potentially lead to security breaches if left unpatched. The updates are available through the dnf package manager. This situation highlights the importance of timely updates in maintaining system security. 6 sources 58

Extracted Entities

Fedora 44 docker-buildkit High Improper Certificate Validation CVE-2026

The full story

Extracted Entities

Companies (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)