#dockerengine — Public Fediverse posts

Docker Flaw Exposes Hosts to Unauthorized Access

A recent security patch meant to tighten up Docker Engine's defenses has left a gaping hole, exposing hosts to unauthorized access - and it's up to you to make sure you're not the one who gets exploited. A high-severity flaw, tracked as CVE-2026-34040, allows attackers to bypass authorization plugins and potentially gain access to your host.

https://osintsights.com/docker-flaw-exposes-hosts-to-unauthorized-access

#Docker #Cve202634040 #AuthorizationBypass #Containerization #DockerEngine

Docker Flaw Exposes Hosts to Unauthorized Access

A recent security patch meant to tighten up Docker Engine's defenses has left a gaping hole, exposing hosts to unauthorized access - and it's up to you to make sure you're not the one who gets exploited. A high-severity flaw, tracked as CVE-2026-34040, allows attackers to bypass authorization plugins and potentially gain access to your host.

https://osintsights.com/docker-flaw-exposes-hosts-to-unauthorized-access

#Docker #Cve202634040 #AuthorizationBypass #Containerization #DockerEngine

A Complete Guide to Install Docker in Rootful Mode in Debian 13 Trixie. Setup Docker like a pro!

Read full guide here: https://ostechnix.com/install-docker-debian-rootful-mode/

#Docker #DockerEngine #DockerCompose #DevOps #Debian13 #DebianTrixie #Oslevelvirtualization #Paas #Linux

#Moby 28.3.2 has been released (#MobyProject / #Docker / #DockerCE / #DockerEngine / #Container) https://mobyproject.org/

Docker Engine v28: Hardening Container Networking by Default
#Products #Docker #Dockerengine #Security

https://www.docker.com/blog/docker-engine-28-hardening-container-networking-by-default/

#Docker fixes critical 5-year old authentication bypass flaw
The flaw was initially discovered and fixed in #DockerEngine v18.09.1, released in January 2019, but the fix wasn't carried forward, so the flaw resurfaced. This dangerous regression was identified in April 2024, and patches were eventually released today for all supported Docker Engine versions.
Atackers had a comfortable 5-year period to leverage the flaw, it is unclear if it was ever exploited in the wild.
https://www.bleepingcomputer.com/news/security/docker-fixes-critical-5-year-old-authentication-bypass-flaw/

Docker Patches Critical AuthZ Plugin Bypass Vulnerability Dating Back to 2018 https://www.securityweek.com/docker-patches-critical-authz-plugin-bypass-vulnerability-dating-back-to-2018/ #Vulnerabilities #CloudSecurity #CVE202441110 #DockerEngine #AuthZbypass #CVSS10 #Docker

Docker Patches Critical AuthZ Plugin Bypass Vulnerability Dating Back to 2018 https://www.securityweek.com/docker-patches-critical-authz-plugin-bypass-vulnerability-dating-back-to-2018/ #Vulnerabilities #CloudSecurity #CVE202441110 #DockerEngine #AuthZbypass #CVSS10 #Docker

Docker Security Advisory: AuthZ Plugin Bypass Regression in Docker Engine
#Docker #Products #DockerDesktop #Dockerengine #Security

https://www.docker.com/blog/docker-security-advisory-docker-engine-authz-plugin/

#AWSCloudShell now provides access to #DockerEngine for its users!

With this integration, containers can be locally prototyped and pushed to registries before deploying them on AWS.

Get more details on #InfoQ: https://bit.ly/3HKojgL

#Docker #serverless #Containers #AWS #CloudComputing

This week on my Live show key members of Docker's staff join me and Matt to talk about recent Docker Hub changes, as well as their latest release (v23) for Docker Engine and CLI. Justin Cormack, Chief Technology Officer at Docker, and Michael Irwin, Sr. Manager of DevRel at Docker, will be my guests. Thursday at 1:00 US ET (UTC-4).
#Docker #dockerengine #DevOps
https://www.youtube.com/watch?v=BUj-aQ7UGGU

RT @[email protected]

CVE-2022-0847 (aka "Dirty Pipe") is a #Linux vulnerability that enables attackers to modify files inside host images from the container instance. Read on for how to avoid it on #DockerEngine & #DockerDesktop: https://dockr.ly/3CM4Lp1

🐦🔗: https://twitter.com/Docker/status/1504183467923447810

Docker adds “docker scan” capabilities to the Docker CLI on Linux https://buff.ly/3cFFG2X #Docker #Linux #security #vulnerabilities #DockerEngine