CVE-2026-39829 affecting package moby-engine for versions less than 25.0.3-18

CVE-2026-39829 affecting package moby-engine for versions less than 25.0.3-18. A patched version of the package is available...

CVE-2026-39830 affecting package moby-engine for versions less than 25.0.3-18

CVE-2026-39830 affecting package moby-engine for versions less than 25.0.3-18. A patched version of the package is available...

CVE-2026-46597 affecting package moby-engine for versions less than 25.0.3-18

CVE-2026-46597 affecting package moby-engine for versions less than 25.0.3-18. A patched version of the package is available...

CVE-2026-39827 affecting package moby-engine for versions less than 25.0.3-18

CVE-2026-39827 affecting package moby-engine for versions less than 25.0.3-18. A patched version of the package is available...

CVE-2026-39821 affecting package moby-engine for versions less than 25.0.3-18

CVE-2026-39821 affecting package moby-engine for versions less than 25.0.3-18. A patched version of the package is available...

CVE-2026-39834 affecting package moby-engine for versions less than 25.0.3-18

CVE-2026-39834 affecting package moby-engine for versions less than 25.0.3-18. A patched version of the package is available...

CVE-2026-39835 affecting package moby-engine for versions less than 25.0.3-18

CVE-2026-39835 affecting package moby-engine for versions less than 25.0.3-18. A patched version of the package is available...

CVE-2026-39821 affecting package moby-containerd-cc for versions less than 1.7.7-13

CVE-2026-39821 affecting package moby-containerd-cc for versions less than 1.7.7-13. A patched version of the package is available...

openSUSE 16 Security Update : alloy (openSUSE-SU-2026:20816-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20816-1 advisory. This update for alloy fixes the following issues - CVE-2026-34986: github.com/go-jose/go-jose/v4: crafted JWE input with a missing encrypted key...

OPENSUSE-SU-2026:20816-1 Security update for alloy

This update for alloy fixes the following issues - CVE-2026-34986: github.com/go-jose/go-jose/v4: crafted JWE input with a missing encrypted key can lead to a denial of service bsc1262955. - CVE-2026-41602: github.com/apache/thrift: TFramedTransport frame size headers can lead to a uint32 integer...

SUSE-SU-2026:21852-1 Security update for alloy

This update for alloy fixes the following issues - CVE-2026-34986: github.com/go-jose/go-jose/v4: crafted JWE input with a missing encrypted key can lead to a denial of service bsc1262955. - CVE-2026-41602: github.com/apache/thrift: TFramedTransport frame size headers can lead to a uint32 integer...

Astra Linux - уязвимость в docker.io

Moby is an open-source container framework developed by Docker Inc. It is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component, dockerd, which is developed as moby/moby, is commonly referred to as Docker. Swarm Mode, which is...

Astra Linux - уязвимость в docker.io-app

Moby version 25.0.3 has a race condition vulnerability in the StreamFormatter package. This vulnerability can be exploited to trigger multiple concurrent write operations, leading to data corruption or application crashes...

Amazon Linux 2023 : docker (ALAS2023-2026-1659)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1659 advisory. Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin...

CVE-2026-35469 affecting package moby-containerd-cc for versions less than 1.7.7-12

CVE-2026-35469 affecting package moby-containerd-cc for versions less than 1.7.7-12. A patched version of the package is available...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following during docker cp mount setup before subsequent mount syscall. An attacker can overwrite arbitrary files on the host or cause denial of service by exploiting a race condition where a symlink is create...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following during docker cp mount setup before subsequent mount syscall. An attacker can overwrite arbitrary files on the host or cause denial of service by exploiting a race condition where a symlink is create...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following during docker cp mount setup before subsequent mount syscall. An attacker can overwrite arbitrary files on the host or cause denial of service by exploiting a race condition where a symlink is create...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following during docker cp mount setup due to the switching from GetResourcePath and to createIfNotExists method that has no absolute path checks. An attacker can create empty files or directories at arbitrary...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following during docker cp mount setup due to the switching from GetResourcePath and to createIfNotExists method that has no absolute path checks. An attacker can create empty files or directories at arbitrary...