Security update for docker
This update for docker rebuilds it against the current go security release.
- Обновитесь до 29.4.0_ce-150000.261.1
PatchFirst · Свежие уязвимости
За последние 30 дней в docker опубликовано уязвимостей: 1; в каталоге KEV: 0.
Уязвимостей: 8
This update for docker rebuilds it against the current go security release.
This update for docker rebuilds it against the current go security release.
This update for docker rebuilds it against the current go security release.
This update for docker rebuilds it against the current go security release.
This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266625). - CVE-2026-39984: github.com/sigstore/timestamp-authority/v2/pkg/verification: improper certificate validation can be used to bypass some authorization controls (bsc#1262346). - CVE-2026-41567: arbitrary code execution with full daemon privileges when a user uploads a compressed archive into that
This update for docker fixes the following issues: - Update to Docker 29.4.0. See upstream changelog online at <https://docs.docker.com/engine/release-notes/29/#2940> - Update to buildx 0.33.0. See upstream changelog online at <https://github.com/docker/buildx/releases/tag/v0.33.0>
This update for docker rebuilds it against the current go 1.25 security release.
This update for docker rebuilds it against the current go 1.25 security release.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.