this post was submitted on 25 Feb 2026
9 points (90.9% liked)

Debian

1204 readers
32 users here now

❤️ Debian

Rules

founded 2 years ago
MODERATORS
 

It's a bit strange how The Debian Way recommends installing software from the official repository, but not in the case of a crucial program like Docker.

you are viewing a single comment's thread
view the rest of the comments
[–] moonpiedumplings@programming.dev 8 points 2 days ago* (last edited 2 days ago)

Please don't use the versions to analyze if debian's docker has security issues.

Debian has a model of taking a version of a package, and then only doing security updates to it, no feature updates or even noncritical bugfixes, to ensure maximum compatibility. Like most stable release distros, they use their own versioning scheme, usually appending extra numbers. The actual version of docker in use is 26.1.5+dfsg1-9 - the stuff after the dash indicating extra updates. https://packages.debian.org/stable/docker.io

If you visit the debian security tracker, you will see that docker.io is not included in the list of currently vulnerable packages: https://security-tracker.debian.org/tracker/status/release/stable