[DSA 6443-1] docker.io security update
Aron Xu <[email protected]>
| Newsgroups | gmane.linux.debian.user.security.announce |
|---|---|
| Message-ID | <[email protected]> |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6443-1 [email protected] https://www.debian.org/security/ Aron Xu August 16, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : docker.io CVE ID : CVE-2026-33747 CVE-2026-33748 CVE-2026-33997 CVE-2026-34040 CVE-2026-41567 CVE-2026-41568 CVE-2026-42306 Multiple vulnerabilities were discovered in the Docker container engine and in the bundled BuildKit build toolkit, which may result in privilege escalation, arbitrary file access on the host, or bypass of authorization policies. For the stable distribution (trixie), these problems have been fixed in version 26.1.5+dfsg1-9+deb13u1. We recommend that you upgrade your docker.io packages. For the detailed security status of docker.io please refer to its security tracker page at: https://security-tracker.debian.org/tracker/docker.io Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: [email protected] -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmqBeuAACgkQ+GQ1dHE8 m65VTwgAjidgYsQsNvX39I+1PE1amNWY6079+IDHIMvZbqJA9e90ZbKe+VNDZKhK iSyiqxbAWZ4bYZtkfK8uE0geu8y/Zgz5S4RDGrY3jK4WaTa1N/OP/d93lnCxmAIo ns91h+z5wMIt3eFDucwby8IXWl9mepzKbKP2CTTHMvQcvxSau+xq5iI4S86vIzuX kNb/PYE2zSw02oznSURvq9l3QmC+jFwwr7Lgyo55mLb5ZWSw/gJPdKZIwpPskzN2 cRbHff25frLkjkxUk4q3hOmDCAG9YGYCx2OQen+mTwiQ8erFnXQmQzfHBhc11tgU 46d8Th+oTxptO8xQFm8aOAJPKrK9wQ== =4MaX -----END PGP SIGNATURE-----