please update Docker Engine due to security vulnerabilities

[schnitzel]

Hello, TerraMaster team!

I would like to point out that the current TOS 6 uses version 27.2.1 of the Docker Engine, which reached the end of its lifecycle 10 months ago, according to https://endoflife.date/docker-engine.

Since then, several security vulnerabilities have been patched in the newer Docker versions. An update to version 29.3.0 is a must for anyone using the Docker package on their TerraMaster NAS.

Kind regards,
schnitzel

[crisisacting]

TOS 6 has seemingly ceased to keep receiving updates; critical security updates to the main OS aside, as the majority of TOS 6 devices are capable of updating to TOS 7, which is continuing to receive updates, that's the path to get the newest docker.

If you are waiting on a non-beta of 7, it seems that in this or the next quarter, TOS 7 should exit its current beta stage.

[AzzGuard]

I manually replaced binary files with the latest binaries from official tarball, and also I installed the native latest Portainer instead of version from Market
All works perfectly)

[CursaYang]

All applications in the App Center will be listed and pushed after passing stability testing. We will release updated versions in the future. As a temporary solution, you can try updating manually.

[dgmigdot]

All applications in the App Center will be listed and pushed after passing stability testing. We will release updated versions in the future. As a temporary solution, you can try updating manually.

Obviously you do it somewhen in future. But what do you mean with "future"? Weeks? Monthes? Years? The update of Docker Engine as well as Portainer is highly recommended!

[TMzethar]

We have received your request and will confirm once again that the matter is on the list.

[dgmigdot]

Thank you very much for updating the docker engine and docker compose. Now we need to update the Portainer app as well How is it possible?

[CursaYang]

Thank you very much for updating the docker engine and docker compose. Now we need to update the Portainer app as well How is it possible?

There are no updates yet, but I will pass that on to the product team.