Back Linuxsecurity Fedora 44 docker-buildx Notable Command Execution 2026
Update to release v0.35.0 Resolves: rhbz#2487819 Resolves CVE-2026-39828: rhbz#2489918, rhbz#2490102 Upstream enhancements, new features, and fixes
* Thu Jun 18 2026 Bradley G Smith - 0.35.0-1 - Update to release v0.35.0 - Resolves: rhbz#2487819 - Resolves CVE-2026-39828: rhbz#2489918, rhbz#2490102 - Upstream enhancements, new features, and fixes * Tue May 19 2026 Bradley G Smith - 0.34.1-1 - Update to release v0.34.1 - Resolves: rhbz#2479976 - Upstream fixes
* Thu Jun 18 2026 Bradley G Smith - 0.35.0-1 - Update to release v0.35.0 - Resolves: rhbz#2487819 - Resolves CVE-2026-39828: rhbz#2489918, rhbz#2490102 - Upstream enhancements, new features, and fixes * Tue May 19 2026 Bradley G Smith - 0.34.1-1 - Update to release v0.34.1 - Resolves: rhbz#2479976 - Upstream fixes
[ 1 ] Bug #2487819 - docker-buildx-0.35.0 is available [ 2 ] Bug #2489918 - CVE-2026-39828 docker-buildx: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions [fedora-all] [ 3 ] Bug #2490102 - CVE-2026-39829 docker-buildx: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters [fedora-all]
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-105f7df940' at the command line. For more information, refer to the dnf documentation available at
Get the latest Linux and open source security news straight to your inbox.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
