Security update for docker
This update for docker rebuilds it against the current go security release.
- Update to 29.4.0_ce-150000.261.1
PatchFirst · Latest vulnerabilities
Vulnerability published for docker in the last 30 days: 1. Listed in the KEV catalogue: 0.
Vulnerabilities: 8
This update for docker rebuilds it against the current go security release.
This update for docker rebuilds it against the current go security release.
This update for docker rebuilds it against the current go security release.
This update for docker rebuilds it against the current go security release.
This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266625). - CVE-2026-39984: github.com/sigstore/timestamp-authority/v2/pkg/verification: improper certificate validation can be used to bypass some authorization controls (bsc#1262346). - CVE-2026-41567: arbitrary code execution with full daemon privileges when a user uploads a compressed archive into that
This update for docker fixes the following issues: - Update to Docker 29.4.0. See upstream changelog online at <https://docs.docker.com/engine/release-notes/29/#2940> - Update to buildx 0.33.0. See upstream changelog online at <https://github.com/docker/buildx/releases/tag/v0.33.0>
This update for docker rebuilds it against the current go 1.25 security release.
This update for docker rebuilds it against the current go 1.25 security release.
Check your installed stack and versions against the current vulnerability feeds.