Docker Engine 26.0.1 – 26.0.2 und 25.0.5 Security und Bugfix Release

Die Open-Source Containervirtualisierung Docker ermöglicht die Isolierung von Anwendungen in Containern und steht sowohl für Linux, Windows und MacOS zur Verfügung. Die Engine, bzw. Docker -CE erhielt Updates die Fehler korrigieren und zur Stabilität von Docker beitragen.

Docker Engine 26.0.2 Release Notes

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 26.0.2 milestone
• moby/moby, 26.0.2 milestoneDeprecated and removed features, see Deprecated Features.Changes to the Engine API, see API version history

Security

This release contains a security fix for CVE-2024-32473

, an unexpected configuration of IPv6 on IPv4-only interfaces.

Bug fixes and enhancements

• CVE-2024-32473

: Ensure IPv6 is disabled on interfaces only allocated an IPv4 address by the engine. moby#GHSA-x84c-p2g9-rqv9

Docker Engine 26.0.1 Release Notes

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 26.0.1 milestone

moby/moby, 26.0.1 milestoneDeprecated and removed features, see Deprecated Features.Changes to the Engine API, see API version history

• .

Bug fixes and enhancements

• Fix a regression that meant network interface specific --sysctl options prevented container startup. moby/moby#47646

Remove erroneous platform from image config OCI descriptor in docker save output. moby/moby#47694containerd image store: OCI archives produced by docker save will now have a non-empty mediaType field in index.jsonmoby/moby#47701Fix a regression that prevented the internal resolver from forwarding requests from IPvlan L3 networks to external resolvers. moby/moby#47705Prevent the use of external resolvers in IPvlan and Macvlan networks created with no parent interface specified. moby/moby#47705

Docker Engine 25.0.5 Release Notes

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 25.0.5 milestone
• moby/moby, 25.0.5 milestone

Security

This release contains a security fix for CVE-2024-29018

, a potential data exfiltration from ‘internal’ networks via authoritative DNS servers.

Bug fixes and enhancements

• CVE-2024-29018

: Do not forward requests to external DNS servers for a container that is only connected to an ‘internal’ network. Previously, requests were forwarded if the host’s DNS server was running on a loopback address, like systemd’s 127.0.0.53. moby/moby#47589

plugin: fix mounting /etc/hosts when running in UserNS. moby/moby#47588

rootless: fix open /etc/docker/plugins: permission denied. moby/moby#47587

Fix multiple parallel docker build runs leaking disk space. moby/moby#47527

Quelle: https://docs.docker.com/engine/release-notes/25.0/