Containly 2.6.2: security update with Alpine 3.23

Containly 2.6.2 is a security update. No features change.

Security

The image is now based on Alpine 3.23 instead of 3.22.
samba-client is updated to 4.22.10, which fixes CVE-2026-2340. Samba is only used for SMB backup targets.
openldap is updated to 2.6.13.

What scanners such as Docker Scout may still show

CVE-2025-60876 (busybox wget): Alpine has no patch yet. Containly never calls wget.
CVE-2025-62813 (lz4): no patch exists yet. lz4 only comes in as a dependency of samba-client.
CVE-2026-22185 (openldap): the bug is in a tool that is not part of the package.

As soon as Alpine ships patches, they come with the next update.

Update

docker compose pull
docker compose up -d

Reply