Download Latest Version v29.5.2 source code.tar.gz (21.1 MB)
Email in envelope

Get an email when there's a new version of Moby

Home / docker-v29.5.1
Name Modified Size InfoDownloads / Week
Parent folder
README.md 2026-05-18 1.5 kB
0
v29.5.1 source code.tar.gz 2026-05-18 21.1 MB
0
v29.5.1 source code.zip 2026-05-18 29.1 MB
0
Totals: 3 Items   50.2 MB 0

29.5.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Security

This release includes fixes for multiple security vulnerabilities affecting Docker Engine.

  • CVE-2026-41567 Fix a vulnerability in docker cp where archive decompression binaries (e.g. xz, unpigz) were resolved via PATH inside the container filesystem while running as host root, allowing a malicious container to execute arbitrary binaries with host root privileges.
    GHSA-x86f-5xw2-fm2r

  • CVE-2026-41568 Fix a TOCTOU vulnerability in docker cp that allowed a container process to create files or directories at arbitrary locations on the host filesystem.
    GHSA-vp62-88p7-qqf5

  • CVE-2026-42306 Fix a TOCTOU vulnerability in docker cp that allowed a container process to redirect a bind mount to an arbitrary location on the host filesystem.
    GHSA-rg2x-37c3-w2rh

Networking

  • Fix UDP conntrack entries not being deleted when not bound to a specific IP address. [#52640]
Source: README.md, updated 2026-05-18