Docker Engine v29.6.1

v29.6.1
Changed 2
  • Update containerd (static binaries) to v2.2.5
  • Update BuildKit to v0.31.1
Security 2
  • Fix vulnerability where a malicious image could supply a malicious /etc/passwd or /etc/group-style file causing excessive memory consumption and potential Out Of Memory conditions
  • Fix vulnerability where a custom frontend could send a crafted build request that disabled Seccomp and AppArmor protections for the build container without explicit user permission

From Docker Engine

29.6.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Security

This release includes fixes for multiple security vulnerabilities affecting Docker Engine.

  • A malicious image could supply a malicious /etc/passwd or /etc/group-style file causing excessive memory consumption, potentially resulting in process termination due to Out Of Memory (OOM) conditions. GHSA-mjcv-p78q-w5fw, GHSA-jpcc-p29g-p8mq, GHSA-72x6-4j93-7w86
  • A custom frontend could send a crafted build request that disabled Seccomp and AppArmor protections for the build container, even if the user did not explicitly allow the security.insecure entitlement. Other security measures, like Linux capabilities were still applied to these containers. GHSA-7236-3392-c5c6
Bug fixes and enhancements
Packaging updates
View original

Upgraded? How did it go?

Discussion