ZeroDay Findings
Sign inSign up

Technology hubs · Docker

Docker security fix timeline

Public commits from moby/moby whose messages cite a vulnerability or a security fix. Patch text is not stored.

Docker hubVulnerability catalog

53 security-fix timeline events

  1. Mar 14, 2024 · CVE-2024-24786

    vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4

    vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4 full diffs: - https://github.com/protocolbuffers/protobuf-go/compare/v1.31.0...v1.33.0 - https://github.com/golang/protobuf/compare/v1.5.3...v1.5.4 From the Go security announcement list; > Version…

    CVE-2024-24786https://github.com/moby/moby/commit/1ca89d7eae84346a7241f9d7033a7f591ff3a1fa

  2. Mar 5, 2024 · CVE-2024-24783

    update to go1.21.8

    update to go1.21.8 go1.21.8 (released 2024-03-05) includes 5 security fixes - crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783, https://go.dev/issue/65390) - net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-4529…

    CVE-2024-24783https://github.com/moby/moby/commit/57b7ffa7f6543709094bab097b8a9bf42700e03e

  3. Jan 31, 2024 · CVE-2024-21626

    update runc binary to v1.1.12

    update runc binary to v1.1.12 Update the runc binary that's used in CI and for the static packages, which includes a fix for [CVE-2024-21626]. - release notes: https://github.com/opencontainers/runc/releases/tag/v1.1.12 - full diff: https://github.com/opencontainers/runc/compa…

    CVE-2024-21626https://github.com/moby/moby/commit/44bf407d4dfb24dc8f243bad6df23163b46b78bd