Fedora 42 : moby-engine (2025-2f6ca95a74)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2f6ca95a74 advisory. - Update to release v29.1.3 - Resolves: rhbz2417969 - Resolves CVE-2024-25621: rhbz2419019, rhbz2419046, rhbz2419442 - Upstream new features and fix...

CVE-2025-65637 affecting package moby-buildx for versions less than 0.7.1-27

CVE-2025-65637 affecting package moby-buildx for versions less than 0.7.1-27. A patched version of the package is available...

CVE-2025-65637 affecting package moby-compose for versions less than 2.17.3-13

CVE-2025-65637 affecting package moby-compose for versions less than 2.17.3-13. A patched version of the package is available...

CVE-2025-58183 affecting package moby-engine for versions less than 24.0.9-19

CVE-2025-58183 affecting package moby-engine for versions less than 24.0.9-19. A patched version of the package is available...

CVE-2025-58183 affecting package moby-engine for versions less than 25.0.3-14

CVE-2025-58183 affecting package moby-engine for versions less than 25.0.3-14. A patched version of the package is available...

Fedora 44 : moby-engine (2025-2ca3289343)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2ca3289343 advisory. Automatic update for moby-engine-29.1.3-1.fc44. Changelog Fri Dec 12 2025 Bradley G Smith - 29.1.3-1 - Update to release v29.1.3 - Resolves:...

Security Bulletin: Moby Multiple Concurrency and NULL Pointer Dereference Vulnerabilities Leading to DoS and Data Corruption, affects watsonx.data

Summary Multiple vulnerabilities affect Moby across versions 25.x–26.0.2, including a NULL pointer dereference in daemon/images/imagehistory.go v25.0.0–v26.0.2 that can crash the daemon, a race condition in builder/builder-next/adapters/snapshot/layer.go v25.0.5 that allows concurrent builds to...

AZL-71632 CVE-2025-65637 affecting package moby-compose for versions less than 2.17.3-13

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

AZL-71629 CVE-2025-65637 affecting package moby-buildx for versions less than 0.7.1-27

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

CVE-2025-47913 affecting package moby-compose for versions less than 2.17.3-12

CVE-2025-47913 affecting package moby-compose for versions less than 2.17.3-12. A patched version of the package is available...

Security Bulletin: Astronomer with IBM is vulnerable to network segmentation abuse due to the moby package (CVE-2025-54410)

Summary Moby is used by Astronomer with IBM as part of container management. Vulnerability Details CVEID:CVE-2025-54410 DESCRIPTION: Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream...

CVE-2025-64329 affecting package moby-containerd-cc for versions less than 1.7.7-10

CVE-2025-64329 affecting package moby-containerd-cc for versions less than 1.7.7-10. A patched version of the package is available...

CVE-2024-25621 affecting package moby-containerd-cc for versions less than 1.7.7-10

CVE-2024-25621 affecting package moby-containerd-cc for versions less than 1.7.7-10. A patched version of the package is available...

TencentOS Server 3: container-tools:3.0 (TSSA-2022:0033)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0033 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 4: moby (TSSA-2024:0335)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0335 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: moby (TSSA-2024:1079)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:1079 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

CVE-2025-64329 affecting package moby-containerd-cc for versions less than 1.7.7-13

CVE-2025-64329 affecting package moby-containerd-cc for versions less than 1.7.7-13. A patched version of the package is available...

CVE-2024-25621 affecting package moby-containerd for versions less than 1.6.26-13

CVE-2024-25621 affecting package moby-containerd for versions less than 1.6.26-13. A patched version of the package is available...

CVE-2025-64329 affecting package moby-containerd for versions less than 1.6.26-13

CVE-2025-64329 affecting package moby-containerd for versions less than 1.6.26-13. A patched version of the package is available...

CVE-2024-25621 affecting package moby-containerd-cc for versions less than 1.7.7-13

CVE-2024-25621 affecting package moby-containerd-cc for versions less than 1.7.7-13. A patched version of the package is available...