Package
podman-fips-5.8
Component
github.com/moby/buildkit
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Justification
Impact
False positive: the vulnerable code is not in this package.
podman v5.8.5 vendors only four buildkit packages (vendor/modules.txt): frontend/dockerfile/{command,parser,shell} and util/stack -- it uses buildkit solely as a Dockerfile parser and never invokes buildkit's Git source resolution. This advisory's Git URL subdir handling lives in source/git and util/gitutil; the v0.28.1 fix touches source/git/{identifier,source}.go, util/gitutil/git_url.go and source/util/pathutil, none of which are vendored.
Status