Mastodawn

OSTechNix Sep 2, 2025

A Complete Guide to Install Docker in Rootful Mode in Debian 13 Trixie. Setup Docker like a pro!

Read full guide here: https://ostechnix.com/install-docker-debian-rootful-mode/

#Docker #DockerEngine #DockerCompose #DevOps #Debian13 #DebianTrixie #Oslevelvirtualization #Paas #Linux

Install Docker On Debian In Rootful Mode - OSTechNix

Learn how to install and configure Docker on Debian 13 trixie in rootful mode. Set up Docker like a pro using this step-by-step guide.

OSTechNix

Neustradamus :xmpp: :linux:Jul 13, 2025

#Moby 28.3.2 has been released (#MobyProject / #Docker / #DockerCE / #DockerEngine / #Container) https://mobyproject.org/

Moby

Docker Blog Feb 28, 2025

Docker Engine v28: Hardening Container Networking by Default
#Products #Docker #Dockerengine #Security

https://www.docker.com/blog/docker-engine-28-hardening-container-networking-by-default/

Docker Engine v28: Hardening Container Networking by Default | Docker

Learn how Docker streamlines developer onboarding and helps organizations set up the right guardrails to give developers the flexibility to innovate within the boundaries of company policies.

Docker

Benjamin Carr, Ph.D. 👨🏻‍💻🧬Jul 26, 2024

#Docker fixes critical 5-year old authentication bypass flaw
The flaw was initially discovered and fixed in #DockerEngine v18.09.1, released in January 2019, but the fix wasn't carried forward, so the flaw resurfaced. This dangerous regression was identified in April 2024, and patches were eventually released today for all supported Docker Engine versions.
Atackers had a comfortable 5-year period to leverage the flaw, it is unclear if it was ever exploited in the wild.
https://www.bleepingcomputer.com/news/security/docker-fixes-critical-5-year-old-authentication-bypass-flaw/

Docker fixes critical 5-year old authentication bypass flaw

Docker has issued security updates to address a critical vulnerability impacting certain versions of Docker Engine that could allow an attacker to bypass authorization plugins (AuthZ) under certain circumstances.

BleepingComputer

83r71n Jul 25, 2024

A critical flaw in Docker Engine, tracked as CVE-2024-41110, allows attackers to bypass authorization plugins under specific conditions. This vulnerability, with a CVSS score of 10.0, indicates maximum severity. It involves exploiting an API request with a Content-Length set to 0, tricking the Docker daemon into forwarding the request without the body to the AuthZ plugin, potentially leading to incorrect approval of the request. This issue was initially discovered in 2018 and fixed in Docker Engine v18.09.1 in January 2019, but it wasn't applied to subsequent versions until recently. Versions affected include those up to v19.03.15, v20.10.27, v23.0.14, v24.0.9, v25.0.5, v26.0.2, v26.1.4, v27.0.3, and v27.1.0, assuming AuthZ is used for access control decisions. Users relying on AuthZ plugins are at risk unless they update to versions 23.0.14 and 27.1.0 released on July 23, 2024. Docker Desktop versions up to 4.32.0 are also affected, though the chance of exploitation is low due to the need for local access to the host and the absence of AuthZ plugins in default configurations. Docker advises updating to the latest version to mitigate potential threats.

https://www.docker.com/blog/docker-security-advisory-docker-engine-authz-plugin/

#cybersecurity #docker #vulnerability #cve #authz #dockerengine #dockerdesktop #api #plugins #threat #update

Docker Security Advisory: AuthZ Plugin Bypass Regression in Docker Engine | Docker

Certain versions of Docker Engine have a security vulnerability that could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low. This advisory outlines the issue, identifies the affected versions, and provides remediation steps for impacted users.

Docker

Docker Blog Jul 23, 2024

Docker Security Advisory: AuthZ Plugin Bypass Regression in Docker Engine
#Docker #Products #DockerDesktop #Dockerengine #Security

https://www.docker.com/blog/docker-security-advisory-docker-engine-authz-plugin/

Docker Security Advisory: AuthZ Plugin Bypass Regression in Docker Engine | Docker

Docker

Docker Blog May 20, 2024

How to Check Your Docker Installation: Docker Desktop vs. Docker Engine
#Products #Containers #Docker #DockerDesktop #Dockerengine #Opensource

https://www.docker.com/blog/blog-how-to-check-docker-version/

How to Check Your Docker Version: Docker Desktop vs. Docker Engine | Docker

Learn the difference between Docker Desktop vs. Docker Engine, how to check your Docker version, and more.

Docker

InfoQ Feb 2, 2024

#AWSCloudShell now provides access to #DockerEngine for its users!

With this integration, containers can be locally prototyped and pushed to registries before deploying them on AWS.

Get more details on #InfoQ: https://bit.ly/3HKojgL

#Docker #serverless #Containers #AWS #CloudComputing

Docker Now on AWS Cloudshell

AWS recently announced that AWS CloudShell now provides access to Docker Engine for its users. With this integration, containers can be locally prototyped and pushed to registries prior to deploying them on AWS.

InfoQ