SUSE-SU-2024:4204-1
Security update for docker-stable
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for docker-stable fixes the following issues: - CVE-2024-41110: Fixed Authz zero length regression (bsc#1228324). Bug fixes: - Allow users to disable SUSE secrets support by setting DOCKER_SUSE_SECRETS_ENABLE=0 in /etc/sysconfig/docker (bsc#1231348). - Import specfile changes for docker-buildx as well as the changes to help reduce specfile differences between docker-stable and docker (bsc#1230331, bsc#1230333). - Fix BuildKit's symlink resolution logic to correctly handle non-lexical symlinks (bsc#1221916). - Write volume options atomically so sudden system crashes won't result in future Docker starts failing due to empty files (bsc#1214855).
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.5 | docker-stable, docker-stable-bash-completion, docker-stable-fish-completion y 2 más | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.6 | docker-stable, docker-stable-bash-completion, docker-stable-fish-completion y 2 más | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.3 | docker-stable, docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.4 | docker-stable, docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.5 | docker-stable, docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.6 | docker-stable, docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
Mostrar las 18 entradas de 6 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.5 | docker-stable | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.5 | docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.5 | docker-stable-fish-completion | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.5 | docker-stable-rootless-extras | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.5 | docker-stable-zsh-completion | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.6 | docker-stable | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.6 | docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.6 | docker-stable-fish-completion | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.6 | docker-stable-rootless-extras | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.6 | docker-stable-zsh-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.3 | docker-stable | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.3 | docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.4 | docker-stable | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.4 | docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.5 | docker-stable | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.5 | docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.6 | docker-stable | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.6 | docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
Referencias
- https://bugzilla.suse.com/1214855
- https://bugzilla.suse.com/1221916
- https://bugzilla.suse.com/1228324
- https://bugzilla.suse.com/1230331
- https://bugzilla.suse.com/1230333
- https://bugzilla.suse.com/1231348
- https://lists.suse.com/pipermail/sle-security-updates/2024-December/019930.html
- https://www.suse.com/security/cve/CVE-2024-41110/