UbuntuUpdates.org

Package "docker-doc"

Name: docker-doc

Description:

Linux container runtime -- documentation
Latest version: 29.1.3-0ubuntu3~24.04.2
Release: noble (24.04)
Level: security
Repository: universe
Head package: docker.io-app
Homepage: https://mobyproject.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "docker-doc"

All arch deb package
APT INSTALL

Other versions of "docker-doc" in Noble

Repository Area Version
base universe 24.0.7-0ubuntu4
updates universe 29.1.3-0ubuntu3~24.04.2

Changelog

Version: 29.1.3-0ubuntu3~24.04.2 2026-05-05 15:07:33 UTC

  docker.io-app (29.1.3-0ubuntu3~24.04.2) noble-security; urgency=medium

  * SECURITY UPDATE: BuildKit path traversal
    - debian/patches/CVE-2026-33747_1.patch: Validate container IDs centrally
      in engine/vendor/.../buildkit/executor/containerdexecutor/executor.go,
      engine/vendor/.../buildkit/executor/containerid.go,
      engine/vendor/.../buildkit/executor/runcexecutor/executor.go.
    - debian/patches/CVE-2026-33747_2.patch: Sanitize downloaded filenames in
      engine/vendor/.../buildkit/source/http/source.go.
    - debian/patches/CVE-2026-33747_3.patch: Use os.Root for saved file
      operations in engine/vendor/.../buildkit/source/http/source.go.
    - CVE-2026-33747
  * SECURITY UPDATE: BuildKit path traversal
    - debian/patches/CVE-2026-33748_1.patch: Harden ref arg handling in
      engine/vendor/.../buildkit/source/git/source.go.
    - debian/patches/CVE-2026-33748_2.patch: Normalize and validate subdir
      paths in engine/vendor/.../buildkit/client/llb/source.go,
      engine/vendor/.../buildkit/source/git/identifier.go,
      engine/vendor/.../buildkit/source/git/source.go,
      engine/vendor/.../buildkit/util/gitutil/git_url.go.
    - CVE-2026-33748

 -- Edwin Jiang <email address hidden> Wed, 29 Apr 2026 12:41:06 -0400
Source diff to previous version
CVE-2026-33747 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, when
CVE-2026-33748 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insuf

Version: 27.5.1-0ubuntu3~24.04.2 2025-06-02 18:09:04 UTC

  docker.io-app (27.5.1-0ubuntu3~24.04.2) noble-security; urgency=medium

  * No-change rebuild to copy previous update to the security pocket.

 -- Hlib Korzhynskyy <email address hidden> Mon, 02 Jun 2025 09:21:53 -0230


About   -   Send Feedback to @ubuntu_updates