CVE catalog

CVE-2025-0495

Security update for docker

[CVE catalog]

Severity
Medium · CVSS 5.9CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.20% · Oct 25, 2026

Buildx is a Docker CLI plugin that extends build capabilities using BuildKit. Cache backends support credentials by setting secrets directly as attribute values in cache-to/cache-from configuration. When supplied as user input, these secure values may be inadvertently captured in OpenTelemetry traces as part of the arguments and flags for the traced CLI command. OpenTelemetry traces are also saved in BuildKit daemon's history records. This vulnerability does not impact secrets passed to the Github cache backend via environment variables or registry authentication.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandocker-buildx130.13.1+ds1-3fixed
Debiandocker-buildx140.13.1+ds1-3fixed
Susedocker-composelinux micro 6.12.33.1-slfo.1.1_3.1fixed
Susedocker-composelinux micro 6.02.33.1-5.1fixed
Susedocker-composelinux enterprise server 16.02.33.1-160000.5.1fixed
Susedocker-composelinux enterprise server for sap applications 16.02.33.1-160000.5.1fixed
Susedocker-composelinux micro 6.22.33.1-160000.5.1fixed
Opensusedocker-composeleap 16.02.33.1-160000.5.1fixed
Susedockerlinux micro 6.127.5.1_ce-slfo.1.1_2.1fixed
Susedockerlinux enterprise high performance computing 15 sp3-ltss28.2.2_ce-150000.227.1fixed
Susedocker-stablelinux enterprise high performance computing 15 sp3-ltss24.0.9_ce-150000.1.22.1fixed
Susedockerlinux enterprise high performance computing 15 sp4-espos28.2.2_ce-150000.227.1fixed
Susedocker-stablelinux enterprise high performance computing 15 sp4-espos24.0.9_ce-150000.1.22.1fixed
Susedockerlinux enterprise high performance computing 15 sp4-ltss28.2.2_ce-150000.227.1fixed
Susedocker-stablelinux enterprise high performance computing 15 sp4-ltss24.0.9_ce-150000.1.22.1fixed
Susedockerlinux enterprise high performance computing 15 sp5-espos28.2.2_ce-150000.227.1fixed
Susedocker-stablelinux enterprise high performance computing 15 sp5-espos24.0.9_ce-150000.1.22.1fixed
Susedockerlinux enterprise high performance computing 15 sp5-ltss28.2.2_ce-150000.227.1fixed
Susedocker-stablelinux enterprise high performance computing 15 sp5-ltss24.0.9_ce-150000.1.22.1fixed
Susedockerlinux enterprise server 15 sp3-ltss28.2.2_ce-150000.227.1fixed
Susedocker-stablelinux enterprise server 15 sp3-ltss24.0.9_ce-150000.1.22.1fixed
Susedockerlinux enterprise server 15 sp4-ltss28.2.2_ce-150000.227.1fixed
Susedocker-stablelinux enterprise server 15 sp4-ltss24.0.9_ce-150000.1.22.1fixed
Susedockerlinux enterprise server 15 sp5-ltss28.2.2_ce-150000.227.1fixed
Susedocker-stablelinux enterprise server 15 sp5-ltss24.0.9_ce-150000.1.22.1fixed
Susedockerlinux enterprise server for sap applications 15 sp328.2.2_ce-150000.227.1fixed
Susedocker-stablelinux enterprise server for sap applications 15 sp324.0.9_ce-150000.1.22.1fixed
Susedockerlinux enterprise server for sap applications 15 sp428.2.2_ce-150000.227.1fixed
Susedocker-stablelinux enterprise server for sap applications 15 sp424.0.9_ce-150000.1.22.1fixed
Susedockerlinux enterprise server for sap applications 15 sp528.2.2_ce-150000.227.1fixed
Susedocker-stablelinux enterprise server for sap applications 15 sp524.0.9_ce-150000.1.22.1fixed
Susedockerenterprise storage 7.128.2.2_ce-150000.227.1fixed
Susedocker-stableenterprise storage 7.124.0.9_ce-150000.1.22.1fixed
Opensusedocker-stabletumbleweed24.0.9_ce-9.1fixed
Opensusedockertumbleweed27.5.1_ce-15.1fixed
Susedockerlinux enterprise micro 5.328.2.2_ce-150000.227.1fixed
Susedockerlinux enterprise micro 5.428.2.2_ce-150000.227.1fixed
Susedockerlinux enterprise micro 5.528.2.2_ce-150000.227.1fixed
Susedockerlinux enterprise module for basesystem 15 sp728.2.2_ce-150000.227.1fixed
Susedockerlinux enterprise module for containers 15 sp628.2.2_ce-150000.227.1fixed
Susedocker-stablelinux enterprise module for containers 15 sp624.0.9_ce-150000.1.22.1fixed
Susedockerlinux enterprise module for containers 15 sp728.2.2_ce-150000.227.1fixed
Susedocker-stablelinux enterprise module for containers 15 sp724.0.9_ce-150000.1.22.1fixed
Susedockerlinux enterprise micro 5.128.2.2_ce-150000.227.1fixed
Susedockerlinux enterprise micro 5.228.2.2_ce-150000.227.1fixed
Opensusedockerleap 15.628.2.2_ce-150000.227.1fixed
Opensusedocker-stableleap 15.624.0.9_ce-150000.1.22.1fixed
Susedocker-stablelinux enterprise server ltss extended security 12 sp524.0.9_ce-1.14.1fixed
Susedockerlinux enterprise server ltss extended security 12 sp527.5.1_ce-98.129.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiandocker-buildxdeb130.13.1+ds1-3Not reportedDEBIAN-CVE-2025-0495Not reported
Debiandocker-buildxdeb140.13.1+ds1-3Not reportedDEBIAN-CVE-2025-0495Not reported
Susedocker-composerpmlinux micro 6.12.33.1-slfo.1.1_3.1Not reportedSUSE-SU-2026:22887-1Not reported
Susedocker-composerpmlinux micro 6.02.33.1-5.1Not reportedSUSE-SU-2026:22703-1Not reported
Susedocker-composerpmlinux enterprise server 16.02.33.1-160000.5.1Not reportedSUSE-SU-2026:22567-1Not reported
Susedocker-composerpmlinux enterprise server for sap applications 16.02.33.1-160000.5.1Not reportedSUSE-SU-2026:22567-1Not reported
Susedocker-composerpmlinux micro 6.22.33.1-160000.5.1Not reportedSUSE-SU-2026:22546-1Not reported
Opensusedocker-composerpmleap 16.02.33.1-160000.5.1Not reportedOPENSUSE-SU-2026:21247-1Not reported
Susedockerrpmlinux micro 6.127.5.1_ce-slfo.1.1_2.1Not reportedSUSE-SU-2025:20360-1Not reported
Susedockerrpmlinux enterprise high performance computing 15 sp3-ltss28.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedocker-stablerpmlinux enterprise high performance computing 15 sp3-ltss24.0.9_ce-150000.1.22.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedockerrpmlinux enterprise high performance computing 15 sp4-espos28.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedocker-stablerpmlinux enterprise high performance computing 15 sp4-espos24.0.9_ce-150000.1.22.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedockerrpmlinux enterprise high performance computing 15 sp4-ltss28.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedocker-stablerpmlinux enterprise high performance computing 15 sp4-ltss24.0.9_ce-150000.1.22.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedockerrpmlinux enterprise high performance computing 15 sp5-espos28.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedocker-stablerpmlinux enterprise high performance computing 15 sp5-espos24.0.9_ce-150000.1.22.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedockerrpmlinux enterprise high performance computing 15 sp5-ltss28.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedocker-stablerpmlinux enterprise high performance computing 15 sp5-ltss24.0.9_ce-150000.1.22.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedockerrpmlinux enterprise server 15 sp3-ltss28.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedocker-stablerpmlinux enterprise server 15 sp3-ltss24.0.9_ce-150000.1.22.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedockerrpmlinux enterprise server 15 sp4-ltss28.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedocker-stablerpmlinux enterprise server 15 sp4-ltss24.0.9_ce-150000.1.22.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedockerrpmlinux enterprise server 15 sp5-ltss28.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedocker-stablerpmlinux enterprise server 15 sp5-ltss24.0.9_ce-150000.1.22.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedockerrpmlinux enterprise server for sap applications 15 sp328.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedocker-stablerpmlinux enterprise server for sap applications 15 sp324.0.9_ce-150000.1.22.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedockerrpmlinux enterprise server for sap applications 15 sp428.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedocker-stablerpmlinux enterprise server for sap applications 15 sp424.0.9_ce-150000.1.22.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedockerrpmlinux enterprise server for sap applications 15 sp528.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedocker-stablerpmlinux enterprise server for sap applications 15 sp524.0.9_ce-150000.1.22.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedockerrpmenterprise storage 7.128.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-2Not reported
Susedocker-stablerpmenterprise storage 7.124.0.9_ce-150000.1.22.1Not reportedSUSE-SU-2025:02289-2Not reported
Opensusedocker-stablerpmtumbleweed24.0.9_ce-9.1Not reportedOPENSUSE-SU-2025:14980-1Not reported
Opensusedockerrpmtumbleweed27.5.1_ce-15.1Not reportedOPENSUSE-SU-2025:14985-1Not reported
Susedockerrpmlinux enterprise micro 5.328.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-1Not reported
Susedockerrpmlinux enterprise micro 5.428.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-1Not reported
Susedockerrpmlinux enterprise micro 5.528.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-1Not reported
Susedockerrpmlinux enterprise module for basesystem 15 sp728.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-1Not reported
Susedockerrpmlinux enterprise module for containers 15 sp628.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-1Not reported
Susedocker-stablerpmlinux enterprise module for containers 15 sp624.0.9_ce-150000.1.22.1Not reportedSUSE-SU-2025:02289-1Not reported
Susedockerrpmlinux enterprise module for containers 15 sp728.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-1Not reported
Susedocker-stablerpmlinux enterprise module for containers 15 sp724.0.9_ce-150000.1.22.1Not reportedSUSE-SU-2025:02289-1Not reported
Susedockerrpmlinux enterprise micro 5.128.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-1Not reported
Susedockerrpmlinux enterprise micro 5.228.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-1Not reported
Opensusedockerrpmleap 15.628.2.2_ce-150000.227.1Not reportedSUSE-SU-2025:02289-1Not reported
Opensusedocker-stablerpmleap 15.624.0.9_ce-150000.1.22.1Not reportedSUSE-SU-2025:02289-1Not reported
Susedocker-stablerpmlinux enterprise server ltss extended security 12 sp524.0.9_ce-1.14.1Not reportedSUSE-SU-2025:1344-1Not reported
Susedockerrpmlinux enterprise server ltss extended security 12 sp527.5.1_ce-98.129.1Not reportedSUSE-SU-2025:1341-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [docker-bash-completion]Unknown

    Source package: [docker]

    Details (1)

    • 29.4.0_ce-40.3 · noarch · tumbleweed

      Unknown · Fixed: 27.5.1_ce-15.1

      Version impact unknown

      pypi · docker · opensuse · tumbleweed

  • [docker-buildx]Unknown

    Source package: [docker]

    Details (1)

    • 0.33.0-40.3 · x86_64 · tumbleweed

      Unknown · Fixed: 27.5.1_ce-15.1

      Version impact unknown

      pypi · docker · opensuse · tumbleweed

  • [docker-fish-completion]Unknown

    Source package: [docker]

    Details (1)

    • 29.4.0_ce-40.3 · noarch · tumbleweed

      Unknown · Fixed: 27.5.1_ce-15.1

      Version impact unknown

      pypi · docker · opensuse · tumbleweed

  • [docker-rootless-extras]Unknown

    Source package: [docker]

    Details (1)

    • 29.4.0_ce-40.3 · noarch · tumbleweed

      Unknown · Fixed: 27.5.1_ce-15.1

      Version impact unknown

      pypi · docker · opensuse · tumbleweed

  • [docker-stable-bash-completion]Unknown

    Source package: [docker-stable]

    Details (1)

    • 24.0.9_ce-19.3 · noarch · tumbleweed

      Unknown · Fixed: 24.0.9_ce-9.1

      Version impact unknown

      pypi · docker-stable · opensuse · tumbleweed

  • [docker-stable-buildx]Unknown

    Source package: [docker-stable]

    Details (1)

    • 0.25.0-19.3 · x86_64 · tumbleweed

      Unknown · Fixed: 24.0.9_ce-9.1

      Version impact unknown

      pypi · docker-stable · opensuse · tumbleweed

  • [docker-stable-fish-completion]Unknown

    Source package: [docker-stable]

    Details (1)

    • 24.0.9_ce-19.3 · noarch · tumbleweed

      Unknown · Fixed: 24.0.9_ce-9.1

      Version impact unknown

      pypi · docker-stable · opensuse · tumbleweed

  • [docker-stable-rootless-extras]Unknown

    Source package: [docker-stable]

    Details (1)

    • 24.0.9_ce-19.3 · noarch · tumbleweed

      Unknown · Fixed: 24.0.9_ce-9.1

      Version impact unknown

      pypi · docker-stable · opensuse · tumbleweed

  • [docker-stable-zsh-completion]Unknown

    Source package: [docker-stable]

    Details (1)

    • 24.0.9_ce-19.3 · noarch · tumbleweed

      Unknown · Fixed: 24.0.9_ce-9.1

      Version impact unknown

      pypi · docker-stable · opensuse · tumbleweed

  • [docker-zsh-completion]Unknown

    Source package: [docker]

    Details (1)

    • 29.4.0_ce-40.3 · noarch · tumbleweed

      Unknown · Fixed: 27.5.1_ce-15.1

      Version impact unknown

      pypi · docker · opensuse · tumbleweed

  • [docker]Fixed

    Source package: [docker]

    Details (1)

    • 29.4.0_ce-40.3 · x86_64 · tumbleweed

      Fixed · Fixed: 27.5.1_ce-15.1

      pypi · docker · opensuse · tumbleweed

  • [docker-stable]Fixed

    Source package: [docker-stable]

    Details (1)

    • 24.0.9_ce-19.3 · x86_64 · tumbleweed

      Fixed · Fixed: 24.0.9_ce-9.1

      pypi · docker-stable · opensuse · tumbleweed

[Debian 13 (Trixie)]

  • [docker-buildx]Fixed
    Details (2)

    • 0.13.1+ds1-3 · amd64 · trixie

      Fixed · Fixed: 0.13.1+ds1-3

      pypi · docker-buildx · debian · 13

    • 0.13.1+ds1-3 · arm64 · trixie

      Fixed · Fixed: 0.13.1+ds1-3

      pypi · docker-buildx · debian · 13

  • [golang-github-docker-buildx-dev]Fixed

    Source package: [docker-buildx]

    Details (2)

    • 0.13.1+ds1-3 · all · trixie

      Fixed · Fixed: 0.13.1+ds1-3

      pypi · docker-buildx · debian · 13

    • 0.13.1+ds1-3 · all · trixie

      Fixed · Fixed: 0.13.1+ds1-3

      pypi · docker-buildx · debian · 13

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]