Mastodon Feed
Boosted by andrewnez ("Andrew Nesbitt"):
bmitch@fosstodon.org ("Brandon Mitchell") wrote:
RE: https://mastodon.com.pl/@grono/117361991910931158
Digging a bit into CVE-2026-92543, this one looks bad. A MITM can trivially get #docker to ignore TLS certificate issues when pulling content from a registry, allowing an attacker with control of the network to inject malicious container images to run on the target. Digest pinning and signature verification would prevent this attack.