214 matches found
CVE-2026-61711 affecting package moby-engine for versions less than 25.0.3-20
CVE-2026-61711 affecting package moby-engine for versions less than 25.0.3-20. A patched version of the package is available...
CVE-2026-75593 affecting package moby-engine for versions less than 25.0.3-20
CVE-2026-75593 affecting package moby-engine for versions less than 25.0.3-20. A patched version of the package is available...
CVE-2026-61712 affecting package moby-engine for versions less than 25.0.3-20
CVE-2026-61712 affecting package moby-engine for versions less than 25.0.3-20. A patched version of the package is available...
CVE-2026-17106 affecting package moby-engine for versions less than 25.0.3-20
CVE-2026-17106 affecting package moby-engine for versions less than 25.0.3-20. A patched version of the package is available...
AZL-99285 CVE-2026-78662 affecting package moby-engine 25.0.3-20
Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...
AZL-99282 CVE-2026-56855 affecting package moby-engine 25.0.3-20
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...
AZL-97035 CVE-2026-75593 affecting package moby-engine for versions less than 25.0.3-20
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.2, a custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to...
AZL-97029 CVE-2026-61712 affecting package moby-engine for versions less than 25.0.3-20
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, BuildKit read attacker-controlled /etc/passwd and /etc/group files without an upper bound while resolving a username to a user identifier or group identifier in...
CVE-2026-56852 affecting package moby-engine for versions less than 25.0.3-19
CVE-2026-56852 affecting package moby-engine for versions less than 25.0.3-19. A patched version of the package is available...
AZL-93264 CVE-2026-56852 affecting package moby-engine for versions less than 25.0.3-19
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
[SECURITY] Fedora 43 Update: moby-engine-29.6.0-1.fc43
Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between =E2=80=94 and...
[SECURITY] Fedora 44 Update: moby-engine-29.6.0-1.fc44
Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between =E2=80=94 and...
Fedora 44 : moby-engine (2026-d8e03bae55)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d8e03bae55 advisory. - Update to release v29.6.0 - Resolves: rhbz2490590 - Resolves CVE-2026-39828: rhbz2489945 - Resolves CVE-2026-39829: rhbz2490099 - Resolves...
Fedora 43 : moby-engine (2026-0feb6e4967)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0feb6e4967 advisory. - Update to release v29.6.0 - Resolves: rhbz2490590 - Resolves CVE-2026-39828: rhbz2489945 - Resolves CVE-2026-39829: rhbz2490099 - Resolves...
Fedora 45 : moby-engine (2026-d8b527c6c7)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d8b527c6c7 advisory. Automatic update for moby-engine-29.6.0-1.fc45. Changelog Fri Jun 19 2026 Bradley G Smith - 29.6.0-1 - Update to release v29.6.0 - Resolves:...
CVE-2026-39829 affecting package moby-engine for versions less than 25.0.3-18
CVE-2026-39829 affecting package moby-engine for versions less than 25.0.3-18. A patched version of the package is available...
CVE-2026-39827 affecting package moby-engine for versions less than 25.0.3-18
CVE-2026-39827 affecting package moby-engine for versions less than 25.0.3-18. A patched version of the package is available...
CVE-2026-39834 affecting package moby-engine for versions less than 25.0.3-18
CVE-2026-39834 affecting package moby-engine for versions less than 25.0.3-18. A patched version of the package is available...