From 1c178b6892a7f54e38cb4edfe63a4c52fd5e3a85 Mon Sep 17 00:00:00 2001 From: Christian Stewart Date: Sun, 31 Mar 2024 00:46:13 -0700 Subject: [PATCH] package/docker-engine: security bump to version v26.0.0 Update to the latest major release of docker-engine. Fixes CVE-2024-29018: potential data exfiltration from 'internal' networks via authoritative DNS servers. Do not forward requests to external DNS servers for a container that is only connected to an 'internal' network. https://github.com/moby/moby/releases/tag/v26.0.0 Signed-off-by: Christian Stewart Signed-off-by: Yann E. MORIN --- package/docker-engine/docker-engine.hash | 2 +- package/docker-engine/docker-engine.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/docker-engine/docker-engine.hash b/package/docker-engine/docker-engine.hash index 931d6529e1..5c76b99af3 100644 --- a/package/docker-engine/docker-engine.hash +++ b/package/docker-engine/docker-engine.hash @@ -1,3 +1,3 @@ # Locally calculated -sha256 16a2cb4cf4d314a070085e0df06e3a6bd9ec678d28715b64060af694fc9051d5 docker-engine-24.0.7.tar.gz +sha256 fae1aabb63ed5cf6d302a5f4266ed092716b1cea9a974a9d61154ef31b03c302 docker-engine-26.0.0.tar.gz sha256 7c87873291f289713ac5df48b1f2010eb6963752bbd6b530416ab99fc37914a8 LICENSE diff --git a/package/docker-engine/docker-engine.mk b/package/docker-engine/docker-engine.mk index 05bf23ad3d..86106d3ccb 100644 --- a/package/docker-engine/docker-engine.mk +++ b/package/docker-engine/docker-engine.mk @@ -4,7 +4,7 @@ # ################################################################################ -DOCKER_ENGINE_VERSION = 24.0.7 +DOCKER_ENGINE_VERSION = 26.0.0 DOCKER_ENGINE_SITE = $(call github,moby,moby,v$(DOCKER_ENGINE_VERSION)) DOCKER_ENGINE_LICENSE = Apache-2.0