From e36265aafb47c9c65d14aa71db1932506c52b34d Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Wed, 3 Jun 2026 09:32:42 +0200 Subject: [PATCH] package/docker-engine: security bump to version 28.3.3 Fixes the following security issue: - CVE-2025-54388: Firewalld reload makes published container ports accessible from remote hosts https://github.com/moby/moby/security/advisories/GHSA-x4rx-4gw3-53p4 Signed-off-by: Peter Korsgaard Signed-off-by: Julien Olivain (cherry picked from commit 831335ac71c8fd366c1dbbc34a9a11d26f32df97) Signed-off-by: Thomas Perale --- package/docker-engine/docker-engine.hash | 2 +- package/docker-engine/docker-engine.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/docker-engine/docker-engine.hash b/package/docker-engine/docker-engine.hash index 5d7bc51a6a..7f305b6880 100644 --- a/package/docker-engine/docker-engine.hash +++ b/package/docker-engine/docker-engine.hash @@ -1,3 +1,3 @@ # Locally calculated -sha256 e4828e32e474cef1b78f40278211648300071399c7498252dfe0b96e789b8a31 docker-engine-28.3.2-go2.tar.gz +sha256 3727c8963ab4bcff12291e99e4d4a6b9a29ace5236fd245717bbff648f15f8cd docker-engine-28.3.3-go2.tar.gz sha256 7c87873291f289713ac5df48b1f2010eb6963752bbd6b530416ab99fc37914a8 LICENSE diff --git a/package/docker-engine/docker-engine.mk b/package/docker-engine/docker-engine.mk index 5fe225fbbc..2df260e1e5 100644 --- a/package/docker-engine/docker-engine.mk +++ b/package/docker-engine/docker-engine.mk @@ -4,7 +4,7 @@ # ################################################################################ -DOCKER_ENGINE_VERSION = 28.3.2 +DOCKER_ENGINE_VERSION = 28.3.3 DOCKER_ENGINE_SITE = $(call github,moby,moby,v$(DOCKER_ENGINE_VERSION)) DOCKER_ENGINE_LICENSE = Apache-2.0