安全公告详情

NS-SA-2026-0111

2026-09-07 18:00:00

简介

important: zlib/docker-ce security update

严重级别

important

主题

An update for zlib/docker-ce is now available for NewStart CGSL MAIN 7.02.
NewStart Security has rated this update as having a security impact of important. A Common Vunlnerability Scoring System(CVSS)base score, which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.

详细描述

zlib:
docker-ce:


Security Fix(es):
zlib: A flaw was found in zlib. A global buffer overflow vulnerability exists in the `untgz` utility, specifically within the `TGZfname()` function. This flaw allows an attacker to provide an archive name longer than 1024 bytes, leading to an out-of-bounds write. This can result in memory corruption, denial of service, and potentially arbitrary code execution on the affected system.(CVE-2026-22184)
zlib: bugfix
docker-ce: Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This issue has been patched in version 29.3.1.(CVE-2026-34040)
docker-ce: bugfix


Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
http://security.gd-linux.com/how_to_apply_patch.html
Remember the build tag is 7.02.07B5.

影响组件

  • zlib
  • docker-ce

影响产品

  • CGSL MAIN 7.02

更新包

{"fix":[{"product":"CGSL MAIN 7.02","pkgs":[{"binary":["zlib-1.2.13-3.zncgsl7.5.x86_64.rpm","zlib-doc-1.2.13-3.zncgsl7.5.noarch.rpm","zlib-static-1.2.13-3.zncgsl7.5.x86_64.rpm","zlib-devel-1.2.13-3.zncgsl7.5.x86_64.rpm","zlib-core-1.2.13-3.zncgsl7.5.x86_64.rpm","minizip-compat-1.2.13-3.zncgsl7.5.x86_64.rpm","minizip-compat-devel-1.2.13-3.zncgsl7.5.x86_64.rpm"],"source":"zlib-1.2.13-3.zncgsl7.5.src.rpm"},{"binary":["docker-ce-17.03.3-1.zncgsl7.32.x86_64.rpm"],"source":"docker-ce-17.03.3-1.zncgsl7.32.src.rpm"}]}]}

CVE

参考