Download Latest Version
v29.0.0 source code.tar.gz (18.7 MB)
Get an email when there's a new version of Moby
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2025-11-05 | 2.3 kB | |
| v28.5.2 source code.tar.gz | 2025-11-05 | 18.1 MB | |
| v28.5.2 source code.zip | 2025-11-05 | 24.5 MB | |
| Totals: 3 Items | 42.6 MB | 0 | |
28.5.2
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
[!CAUTION] This release contains fixes for three high-severity security vulnerabilities in runc: - CVE-2025-31133 - CVE-2025-52565 - CVE-2025-52881
All three vulnerabilities ultimately allow (through different methods) for full container breakouts by bypassing runc's restrictions for writing to arbitrary
/procfiles.
Packaging updates
Bug fixes and enhancements
- dockerd-rootless.sh: if slirp4netns is not installed, try using pasta (passt). [#51162]
- Update Go runtime to 1.24.9. [#51387], [docker/cli#6613](https://github.com/docker/cli/issues/6613)
Deprecations
- Go-SDK: cli/command/image/build: deprecate
DefaultDockerfileName,DetectArchiveReader,WriteTempDockerfile,ResolveAndValidateContextPath. These utilities were only used internally and will be removed in the next release. [docker/cli#6610](https://github.com/docker/cli/issues/6610) - Go-SDK: cli/command/image/build: deprecate IsArchive utility. [docker/cli#6560](https://github.com/docker/cli/issues/6560)
- Go-SDK: opts: deprecate
ValidateMACAddress. [docker/cli#6560](https://github.com/docker/cli/issues/6560) - Go-SDK: opts: deprecate ListOpts.Delete(). [docker/cli#6560](https://github.com/docker/cli/issues/6560)
