Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Fedora 43 moby-engine 29.4.0 Moderate Denial of Service CVE-2026-34986

fedora
Calendar Grey April 16, 2026
Dist Fedora Esm H88
Update to Fedora 43's moby-engine 29.4.0 fixes CVE-2026-34986 Denial of Service risk via crafted JSON.
Update to release v29.4.0 Resolves: rhbz#2455894 Resolves CVE-2026-34986: rhbz#2455665 Upstream new features and fixes

Summary

Docker is an open source project to build, ship and run any application as a

lightweight container.

Docker containers are both hardware-agnostic and platform-agnostic. This means

they can run anywhere, from your laptop to the largest EC2 compute instance and

everything in between \u2014 and they do not require you to use a particular

language, framework or packaging system. That makes them great building blocks

for deploying and scaling web apps, databases, and backend services without

depending on a particular stack or provider.

Update Information:

Update to release v29.4.0 Resolves: rhbz#2455894 Resolves CVE-2026-34986: rhbz#2455665 Upstream new features and fixes

Change Log

* Tue Apr 7 2026 Bradley G Smith - 29.4.0-1 - Update to release v29.4.0 - Resolves: rhbz#2455894 - Resolves CVE-2026-34986: rhbz#2455665 - Upstream new features and fixes

References


[ 1 ] Bug #2455665 - CVE-2026-34986 moby-engine: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2455665 [ 2 ] Bug #2455894 - moby-engine-29.4.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2455894

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-a5015b57b9' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: moby-engine
Product: Fedora 43
Version: 29.4.0
Release: 1.fc43
Summary: The open-source application container engine

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here