Описание
Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This issue has been patched in version 29.3.1.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| docker.io | fixed | 28.5.2+dfsg4-2 | package | |
| docker.io | no-dsa | trixie | package | |
| docker.io | no-dsa | bookworm | package |
Примечания
https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2
https://github.com/moby/moby/commit/6d311e0d8d4174a6347942db78c553fb7dc3762e (28.x)
https://github.com/moby/moby/commit/db7dadaca041953430d1e2144088c311b78b96d7 (28.x)
EPSS
Связанные уязвимости
Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This issue has been patched in version 29.3.1.
Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This issue has been patched in version 29.3.1.
Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This issue has been patched in version 29.3.1.
Moby has AuthZ plugin bypass when provided oversized request bodies
EPSS