Stay Secure with the Latest Linux Advisories

security advisorydenial of servicefedora

Fedora 44 moby-engine Critical Denial of Service Fix 2026-853a2fa7e5

Update to release v29.4.0 Resolves: rhbz#2455894 Resolves CVE-2026-34986: rhbz#2455665 Upstream new features and fixes Update to release v29.3.1. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-853a2fa7e5 2026-04-25 01:21:36.172282+00:00 -------------------------------------------------------------------------------- Name : moby-engine Product : Fedora 44 Version : 29.4.0 Release : 1.fc44 URL : https://github.com/moby/moby Summary : The open-source application container engine Description : Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance and everything in between \u2014 and they do not require you to use a particular language, framework or packaging system. That makes them great building blocks for deploying and scaling web apps, databases, and backend services without depending on a particular stack or provider. -------------------------------------------------------------------------------- Update Information: Update to release v29.4.0 Resolves: rhbz#2455894 Resolves CVE-2026-34986: rhbz#2455665 Upstream new features and fixes Update to release v29.3.1 Resolves: rhbz#2451425 Upstream notes that this release resolves: CVE-2026-34040, CVE-2026-33997, CVE-2026-33748, CVE-2026-33747 Upstream fixes -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 7 2026 Bradley G Smith - 29.4.0-1 - Update to release v29.4.0 - Resolves: rhbz#2455894 - Resolves CVE-2026-34986: rhbz#2455665 - Upstream new features and fixes * Wed Mar 25 2026 Bradley G Smith - 29.3.1-1 - Update to release v29.3.1 - Resolves: rhbz#2451425 - Upstream notes that this release resolves: CVE-2026-34040, CVE-2026-33997, CVE-2026-33748, CVE-2026-33747 - Upstreamfixes -------------------------------------------------------------------------------- References: [ 1 ] Bug #2451425 - moby-engine-29.3.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2451425 [ 2 ] Bug #2455665 - CVE-2026-34986 moby-engine: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2455665 [ 3 ] Bug #2455894 - moby-engine-29.4.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2455894 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-853a2fa7e5' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Update of Fedora 44 moby-engine includes critical fixes for Denial of Service vulnerabilities. Act now!. Fedora 44, moby-engine, Denial of Service, application container, security update. . Severity: Critical. LinuxSecurity.com Team

Apr 25, 2026 •Critical Fedora