SUSE-SU-2024:4204-1
Security update for docker-stable
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for docker-stable fixes the following issues: - CVE-2024-41110: Fixed Authz zero length regression (bsc#1228324). Bug fixes: - Allow users to disable SUSE secrets support by setting DOCKER_SUSE_SECRETS_ENABLE=0 in /etc/sysconfig/docker (bsc#1231348). - Import specfile changes for docker-buildx as well as the changes to help reduce specfile differences between docker-stable and docker (bsc#1230331, bsc#1230333). - Fix BuildKit's symlink resolution logic to correctly handle non-lexical symlinks (bsc#1221916). - Write volume options atomically so sudden system crashes won't result in future Docker starts failing due to empty files (bsc#1214855).
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.5 | docker-stable, docker-stable-bash-completion, docker-stable-fish-completion und 2 weitere | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.6 | docker-stable, docker-stable-bash-completion, docker-stable-fish-completion und 2 weitere | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.3 | docker-stable, docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.4 | docker-stable, docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.5 | docker-stable, docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.6 | docker-stable, docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
Alle 18 Einträge aus 6 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.5 | docker-stable | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.5 | docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.5 | docker-stable-fish-completion | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.5 | docker-stable-rootless-extras | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.5 | docker-stable-zsh-completion | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.6 | docker-stable | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.6 | docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.6 | docker-stable-fish-completion | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.6 | docker-stable-rootless-extras | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.6 | docker-stable-zsh-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.3 | docker-stable | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.3 | docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.4 | docker-stable | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.4 | docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.5 | docker-stable | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.5 | docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.6 | docker-stable | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.6 | docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
Referenzen
- https://bugzilla.suse.com/1214855
- https://bugzilla.suse.com/1221916
- https://bugzilla.suse.com/1228324
- https://bugzilla.suse.com/1230331
- https://bugzilla.suse.com/1230333
- https://bugzilla.suse.com/1231348
- https://lists.suse.com/pipermail/sle-security-updates/2024-December/019930.html
- https://www.suse.com/security/cve/CVE-2024-41110/