UbuntuUpdates.org

Package "docker.io"

Name: docker.io

Description:

Linux container runtime
Latest version: 26.1.3-0ubuntu1.1
Release: oracular (24.10)
Level: security
Repository: universe
Head package: docker.io-app
Homepage: https://mobyproject.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "docker.io"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "docker.io" in Oracular

Repository Area Version
base universe 26.1.3-0ubuntu1
updates universe 26.1.3-0ubuntu1.1

Changelog

Version: 26.1.3-0ubuntu1.1 2024-12-16 18:07:19 UTC

  docker.io-app (26.1.3-0ubuntu1.1) oracular-security; urgency=medium

  * SECURITY UPDATE: authz plugin bypass causes privilege escalation
    - debian/patches/CVE-2024-41110-1.patch: Authz plugin security fixes
    for 0-length content and path validation
    - debian/patches/CVE-2024-41110-2.patch: If url includes scheme,
    urlPath will drop hostname, which would not match the auth check
    - CVE-2024-41110

 -- Vyom Yadav <email address hidden> Thu, 12 Dec 2024 13:57:10 +0530
CVE-2024-41110 Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Doc


About   -   Send Feedback to @ubuntu_updates