Skip to content

chore(deps): update dependency https://github.com/moby/moby to v29.5.1#420

Merged
jd1048576-renovate[bot] merged 1 commit into
mainfrom
renovate/https-github.com-moby-moby-29.x
May 19, 2026
Merged

chore(deps): update dependency https://github.com/moby/moby to v29.5.1#420
jd1048576-renovate[bot] merged 1 commit into
mainfrom
renovate/https-github.com-moby-moby-29.x

Conversation

@jd1048576-renovate
Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
https://github.com/moby/moby patch 29.5.029.5.1

Release Notes

moby/moby (https://github.com/moby/moby)

v29.5.1: v29.5.1

Compare Source

29.5.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Security

This release includes fixes for multiple security vulnerabilities affecting Docker Engine.

  • CVE-2026-41567 Fix a vulnerability in docker cp where archive decompression binaries (e.g. xz, unpigz) were resolved via PATH inside the container filesystem while running as host root, allowing a malicious container to execute arbitrary binaries with host root privileges.
    GHSA-x86f-5xw2-fm2r

  • CVE-2026-41568 Fix a TOCTOU vulnerability in docker cp that allowed a container process to create files or directories at arbitrary locations on the host filesystem.
    GHSA-vp62-88p7-qqf5

  • CVE-2026-42306 Fix a TOCTOU vulnerability in docker cp that allowed a container process to redirect a bind mount to an arbitrary location on the host filesystem.
    GHSA-rg2x-37c3-w2rh

Networking
  • Fix UDP conntrack entries not being deleted when not bound to a specific IP address. moby/moby#52640

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@jd1048576-renovate jd1048576-renovate Bot enabled auto-merge (squash) May 19, 2026 04:44
@jd1048576-renovate jd1048576-renovate Bot merged commit 63e0a6b into main May 19, 2026
2 checks passed
@jd1048576-renovate jd1048576-renovate Bot deleted the renovate/https-github.com-moby-moby-29.x branch May 19, 2026 04:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants