SUSE-SU-2025:1062-1
Security update for docker, docker-stable
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for docker, docker-stable fixes the following issues: - CVE-2025-22868: Fixed unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239185). - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239322). Other fixes: - Make container-selinux requirement conditional on selinux-policy (bsc#1237367)
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.6 | docker, docker-bash-completion, docker-fish-completion und 7 weitere | 27.5.1_ce-150000.218.1 und 1 weitere |
| SUSE Linux Enterprise 15.3 | docker, docker-bash-completion, docker-fish-completion und 2 weitere | 27.5.1_ce-150000.218.1 und 1 weitere |
| SUSE Linux Enterprise 15.4 | docker, docker-bash-completion, docker-rootless-extras und 2 weitere | 27.5.1_ce-150000.218.1 und 1 weitere |
| SUSE Linux Enterprise 15.5 | docker, docker-bash-completion, docker-rootless-extras und 2 weitere | 27.5.1_ce-150000.218.1 und 1 weitere |
| SUSE Linux Enterprise 15.6 | docker, docker-bash-completion, docker-rootless-extras und 2 weitere | 27.5.1_ce-150000.218.1 und 1 weitere |
| SUSE Linux Enterprise Micro 5.1 | docker | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise Micro 5.2 | docker | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise Micro 5.3 | docker | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise Micro 5.4 | docker | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise Micro 5.5 | docker | 27.5.1_ce-150000.218.1 |
Alle 35 Einträge aus 10 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.6 | docker | 27.5.1_ce-150000.218.1 |
| openSUSE Leap 15.6 | docker-bash-completion | 27.5.1_ce-150000.218.1 |
| openSUSE Leap 15.6 | docker-fish-completion | 27.5.1_ce-150000.218.1 |
| openSUSE Leap 15.6 | docker-rootless-extras | 27.5.1_ce-150000.218.1 |
| openSUSE Leap 15.6 | docker-stable | 24.0.9_ce-150000.1.15.1 |
| openSUSE Leap 15.6 | docker-stable-bash-completion | 24.0.9_ce-150000.1.15.1 |
| openSUSE Leap 15.6 | docker-stable-fish-completion | 24.0.9_ce-150000.1.15.1 |
| openSUSE Leap 15.6 | docker-stable-rootless-extras | 24.0.9_ce-150000.1.15.1 |
| openSUSE Leap 15.6 | docker-stable-zsh-completion | 24.0.9_ce-150000.1.15.1 |
| openSUSE Leap 15.6 | docker-zsh-completion | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise 15.3 | docker | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise 15.3 | docker-bash-completion | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise 15.3 | docker-fish-completion | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise 15.3 | docker-stable | 24.0.9_ce-150000.1.15.1 |
| SUSE Linux Enterprise 15.3 | docker-stable-bash-completion | 24.0.9_ce-150000.1.15.1 |
| SUSE Linux Enterprise 15.4 | docker | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise 15.4 | docker-bash-completion | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise 15.4 | docker-rootless-extras | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise 15.4 | docker-stable | 24.0.9_ce-150000.1.15.1 |
| SUSE Linux Enterprise 15.4 | docker-stable-bash-completion | 24.0.9_ce-150000.1.15.1 |
| SUSE Linux Enterprise 15.5 | docker | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise 15.5 | docker-bash-completion | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise 15.5 | docker-rootless-extras | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise 15.5 | docker-stable | 24.0.9_ce-150000.1.15.1 |
| SUSE Linux Enterprise 15.5 | docker-stable-bash-completion | 24.0.9_ce-150000.1.15.1 |
| SUSE Linux Enterprise 15.6 | docker | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise 15.6 | docker-bash-completion | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise 15.6 | docker-rootless-extras | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise 15.6 | docker-stable | 24.0.9_ce-150000.1.15.1 |
| SUSE Linux Enterprise 15.6 | docker-stable-bash-completion | 24.0.9_ce-150000.1.15.1 |
| SUSE Linux Enterprise Micro 5.1 | docker | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise Micro 5.2 | docker | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise Micro 5.3 | docker | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise Micro 5.4 | docker | 27.5.1_ce-150000.218.1 |
| SUSE Linux Enterprise Micro 5.5 | docker | 27.5.1_ce-150000.218.1 |
Referenzen
- https://bugzilla.suse.com/1237367
- https://bugzilla.suse.com/1239185
- https://bugzilla.suse.com/1239322
- https://lists.suse.com/pipermail/sle-updates/2025-March/038860.html
- https://www.suse.com/security/cve/CVE-2024-23650/
- https://www.suse.com/security/cve/CVE-2024-29018/
- https://www.suse.com/security/cve/CVE-2024-41110/
- https://www.suse.com/security/cve/CVE-2025-22868/