- Fixed CVE‑2025‑62507 and multiple memory‑corruption bugs in XACKDEL, HGETEX, HyperLogLog, Cuckoo and Bloom filters.
- Patched stack overflow, division‑by‑zero, counter overflow, and out‑of‑bounds access issues that could cause crashes or remote code execution.
- Added mitigations for arbitrary memory read/write in Bloom filter and restored handling of invalid filters.
Docker changelog digest
Oct 27 - Nov 2, 2025. Useful releases, risky migrations, and noisy updates from the Docker channel.
No matching updates in this bucket.
Docker updates in 2025-w44
- Fixed multiple critical crashes and memory safety issues across data structures (HGETEX, HyperLogLog, Cuckoo filter, Bloom filter, Top K).
- Patched division‑by‑zero, counter overflow, and out‑of‑bounds accesses in filters.
- Resolved arbitrary memory read/write vulnerabilities (thanks to AWS security disclosure).
- Fixed a potential crash in HyperLogLog when processing entries larger than 2 GB.
- Addressed a critical stability bug affecting a subset of users.
- Critical bug fix preventing crashes in HyperLogLog when processing entries larger than 2 GB
- Improves stability for affected subset of users
- Critical fix for potential crash in HyperLogLog when processing entries larger than 2 GB.
- Addresses a high‑urgency bug affecting a subset of users.
- Add http server option optimizeEmptyRequests, SQLite defensive flag, and watch config namespace; introduce optional disabling of source‑phase imports and experimental IsolateGroups support
- Enhance inspector with network payload buffer limits and websocket handshake response; fix TLS external‑memory leak on invalid protocol versions and update root CA certificates
- Extensive documentation updates, test, build, and tooling fixes across the codebase
- Add passive listener spec compliance and extend SPrintF functions to accept std::string_view, enhancing API flexibility.
- Fix multiple bugs in HTTP2 upgrade flow, process env/defaults, async context handling, timer bindings, and WASI function signatures.
- Improve performance and code quality by optimizing priority queue, array inspection, early hints handling, and reducing unnecessary string allocations.
- Node.js 24.x transitions to LTS (codename Krypton) with support through April 2028.
- Only metadata (e.g., process.release) was updated; no functional changes from 24.10.0.
- Known issue: Buffer.allocUnsafe currently returns zero‑filled buffers; fix slated for the next LTS release.