Docker Engine v29.9.0
Fix CVE-2026-97032, where an HTTP/2 client could crash the daemon by changing the HPACK header table size while sending requests
#dockerengine — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #dockerengine, aggregated by home.social.
-
Docker Engine v29.8.2
Fix CVE-2026-53493: Pulling a crafted OCI image index with deeply nested or widely fanned-out descriptors could cause unbounded CPU and memory use
-
Docker Engine v29.8.1
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
-
Docker VMM Public Beta: A Complete Overhaul, Built for Performance
#Docker #Products #DockerDesktop #DockerDesktoprelease #Dockerengine #DockerVMM -
Mitigating CVE-2026-31431 (“Copy Fail”) in Docker Engine
#Docker #Engineering #AF_ALG #CopyFail #CVE202631431 #Dockerengine #Seccomp #Security #Selinuxhttps://www.docker.com/blog/mitigating-cve-2026-31431-copy-fail-in-docker-engine/
-
Docker Flaw Exposes Hosts to Unauthorized Access
A recent security patch meant to tighten up Docker Engine's defenses has left a gaping hole, exposing hosts to unauthorized access - and it's up to you to make sure you're not the one who gets exploited. A high-severity flaw, tracked as CVE-2026-34040, allows attackers to bypass authorization plugins and potentially gain access to your host.
https://osintsights.com/docker-flaw-exposes-hosts-to-unauthorized-access
#Docker #Cve202634040 #AuthorizationBypass #Containerization #DockerEngine
-
A Complete Guide to Install Docker in Rootful Mode in Debian 13 Trixie. Setup Docker like a pro!
Read full guide here: https://ostechnix.com/install-docker-debian-rootful-mode/
#Docker #DockerEngine #DockerCompose #DevOps #Debian13 #DebianTrixie #Oslevelvirtualization #Paas #Linux
-
#Moby 28.3.2 has been released (#MobyProject / #Docker / #DockerCE / #DockerEngine / #Container) https://mobyproject.org/
-
Docker Engine v28: Hardening Container Networking by Default
#Products #Docker #Dockerengine #Securityhttps://www.docker.com/blog/docker-engine-28-hardening-container-networking-by-default/
-
#Docker fixes critical 5-year old authentication bypass flaw
The flaw was initially discovered and fixed in #DockerEngine v18.09.1, released in January 2019, but the fix wasn't carried forward, so the flaw resurfaced. This dangerous regression was identified in April 2024, and patches were eventually released today for all supported Docker Engine versions.
Atackers had a comfortable 5-year period to leverage the flaw, it is unclear if it was ever exploited in the wild.
https://www.bleepingcomputer.com/news/security/docker-fixes-critical-5-year-old-authentication-bypass-flaw/ -
Docker Patches Critical AuthZ Plugin Bypass Vulnerability Dating Back to 2018 https://www.securityweek.com/docker-patches-critical-authz-plugin-bypass-vulnerability-dating-back-to-2018/ #Vulnerabilities #CloudSecurity #CVE202441110 #DockerEngine #AuthZbypass #CVSS10 #Docker
-
Docker Patches Critical AuthZ Plugin Bypass Vulnerability Dating Back to 2018 https://www.securityweek.com/docker-patches-critical-authz-plugin-bypass-vulnerability-dating-back-to-2018/ #Vulnerabilities #CloudSecurity #CVE202441110 #DockerEngine #AuthZbypass #CVSS10 #Docker
-
Docker Security Advisory: AuthZ Plugin Bypass Regression in Docker Engine
#Docker #Products #DockerDesktop #Dockerengine #Securityhttps://www.docker.com/blog/docker-security-advisory-docker-engine-authz-plugin/
-
How to Check Your Docker Installation: Docker Desktop vs. Docker Engine
#Products #Containers #Docker #DockerDesktop #Dockerengine #Opensourcehttps://www.docker.com/blog/blog-how-to-check-docker-version/
-
#AWSCloudShell now provides access to #DockerEngine for its users!
With this integration, containers can be locally prototyped and pushed to registries before deploying them on AWS.
Get more details on #InfoQ: https://bit.ly/3HKojgL
-
OracleIV DDoS Botnet Malware Targets Docker Engine API Instances https://www.hackread.com/oracleiv-ddos-botnet-malware-docker-engine-api-instances/ #Cybersecurity #Vulnerability #DockerEngine #Security #OracleIV #security #Malware #Botnet #DDOS #API
-
This week on my Live show key members of Docker's staff join me and Matt to talk about recent Docker Hub changes, as well as their latest release (v23) for Docker Engine and CLI. Justin Cormack, Chief Technology Officer at Docker, and Michael Irwin, Sr. Manager of DevRel at Docker, will be my guests. Thursday at 1:00 US ET (UTC-4).
#Docker #dockerengine #DevOps
https://www.youtube.com/watch?v=BUj-aQ7UGGU -
CVE-2022-0847 (aka "Dirty Pipe") is a #Linux vulnerability that enables attackers to modify files inside host images from the container instance. Read on for how to avoid it on #DockerEngine & #DockerDesktop: https://dockr.ly/3CM4Lp1
-
Docker adds “docker scan” capabilities to the Docker CLI on Linux https://buff.ly/3cFFG2X #Docker #Linux #security #vulnerabilities #DockerEngine