diff --git a/community/buildkit/APKBUILD b/community/buildkit/APKBUILD
index 7443d82ec15..c34671caa7a 100644
--- a/community/buildkit/APKBUILD
+++ b/community/buildkit/APKBUILD
@@ -1,7 +1,7 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=buildkit
-pkgver=0.12.4
-pkgrel=2
+pkgver=0.12.5
+pkgrel=0
 pkgdesc="Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit"
 url="https://github.com/moby/buildkit"
 arch="all"
@@ -15,6 +15,13 @@ source="$pkgname-$pkgver.tar.gz::https://github.com/moby/buildkit/archive/refs/t
 	"
 options="!check" # needs to mount various things as root
 
+# secfixes:
+#   0.12.5-r0:
+#     - CVE-2024-23650
+#     - CVE-2024-23651
+#     - CVE-2024-23652
+#     - CVE-2024-23653
+
 export CGO_ENABLED=0
 export GOCACHE="${GOCACHE:-"$srcdir/go-cache"}"
 export GOTMPDIR="${GOTMPDIR:-"$srcdir"}"
@@ -53,7 +60,7 @@ buildctl() {
 }
 
 sha512sums="
-ee20e202303b274d6f71339f792b68c469cba2e574952c38dc1fb4a76cc9ad8fcf629043002432652c3fdf8bd57df09a63abfedc8fbf56d673130cd1f55e551e  buildkit-0.12.4.tar.gz
+35ac3bb1551c961ee9613bc151d8179d2ed148a394ac20d8249999fb15bc5f607aa89e1054def2c49e382f6a3123d295b2d0efd5f3384a2fca08a43669e06e3c  buildkit-0.12.5.tar.gz
 01007221e6aab7a9f9565b48d2a338b2a72508234c7874a4aeaf9fd9181a19ffebe6374560bbae0262b009643b1fb49fb51b0f8006540355ae0f42fbaad5dd59  buildkitd.initd
 44efad35c5867266a84246cf49afd2c4d775a530409397c817c8026873c75686432388325cd7654d939e8bfeceeada9112f3dd814ae5d95d4470373c3aa6dc3e  buildkitd.confd
 "