Skip to content

4.72 RN addition#24997

Merged
aevesdocker merged 1 commit intodocker:mainfrom
aevesdocker:4.72-item
May 7, 2026
Merged

4.72 RN addition#24997
aevesdocker merged 1 commit intodocker:mainfrom
aevesdocker:4.72-item

Conversation

@aevesdocker
Copy link
Copy Markdown
Contributor

Description

Related issues or tickets

Reviews

  • Technical review
  • Editorial review
  • Product review

@netlify
Copy link
Copy Markdown

netlify Bot commented May 7, 2026

Deploy Preview for docsdocker ready!

Name Link
🔨 Latest commit 89f763f
🔍 Latest deploy log https://app.netlify.com/projects/docsdocker/deploys/69fc517eecd2d40008bd7312
😎 Deploy Preview https://deploy-preview-24997--docsdocker.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Copy link
Copy Markdown

@docker-agent docker-agent left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assessment: 🔴 CRITICAL

### Security

- The Extensions settings page now includes a security notice that extensions run with host-level privileges and are not audited by Docker.
- [Fixed CVE-2026-31431 ("copy.fail")](https://xint.io/blog/copy-fail-linux-distributions) by backporting an upstream Linux kernel patch that prevents an unprivileged container user from gaining root inside the container via a controlled write into the host VM page cache.
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[HIGH] CVE identifier year appears incorrect: CVE-2026-31431 should likely be CVE-2025-31431

The CVE identifier uses the year 2026, which is a future year. CVEs are assigned in the year they are reported, so CVE-2026-31431 would be anachronistic. This is almost certainly a typo — the correct identifier is likely CVE-2025-31431 (or possibly CVE-2024-31431).

An incorrect CVE number prevents users from looking up this vulnerability in NVD or MITRE and could mislead security teams researching the fix.

@aevesdocker aevesdocker merged commit aac8830 into docker:main May 7, 2026
17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants