Docker Engine 29.6.1 addresses security vulnerabilities and updates components
Docker Engine 29.6.1 is a patch release that addresses multiple security vulnerabilities, including issues with memory consumption and build container security protections. It also includes updates to core components like containerd and BuildKit. This release is recommended for all users, especially those concerned with security and stability.
- →Update containerd (static binaries) to v2.2.5. moby/moby#52950
- →Update BuildKit to v0.31.1. moby/moby#52954
Security (2) ›
A malicious image could supply a malicious /etc/passwd or /etc/group-style file causing excessive memory consumption, potentially resulting in process termination due to Out Of Memory (OOM) conditions. GHSA-mjcv-p78q-w5fw, GHSA-jpcc-p29g-p8mq, GHSA-72x6-4j93-7w86
A custom frontend could send a crafted build request that disabled Seccomp and AppArmor protections for the build container, even if the user did not explicitly allow the security.insecure entitlement. Other security measures, like Linux capabilities were still applied to these containers. GHSA-7236-3392-c5c6
Enhancements (1) ›
- Update BuildKit to v0.31.1. moby/moby#52954
Fixes (1) ›
- Update containerd (static binaries) to v2.2.5. moby/moby#52950
https://github.com/moby/moby/releases/tag/docker-v29.6.1
Related releases
- Docker Compose v5.5.0 Overhauls Image Digest Reconciliation Docker Compose Releases ·
- Docker Engine (moby/moby) v25.0.17 Patch Release Addresses Multiple CVEs Docker Engine Releases ·
- Moby Project v25.0.16 Patches CVEs and Fixes Image Store Bug Docker Engine Releases ·
- Docker Engine 29.7.2 addresses panics, image pull regressions, and networking issues Docker Engine Releases ·
- Docker Compose v5.4.0 enhances resource reconciliation and fixes bugs Docker Compose Releases ·
- Docker v29.7.1 addresses image pull and CopyToContainer regressions Docker Engine Releases ·