SUSE-SU-2025:1102-1
Security update for docker, docker-stable
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for docker, docker-stable fixes the following issues: - CVE-2025-22868: Fixed unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239185). - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239322). - CVE-2024-29018: Fixed external DNS requests from 'internal' networks leading to data exfiltration (bsc#1234089). - CVE-2024-23650: Fixed BuildKit daemon crash via malicious BuildKit client or frontend request (bsc#1219437). Other fixes: - Make container-selinux requirement conditional on selinux-policy (bsc#1237367). - Updated docker-buildx to 0.19.3.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12.5 | docker, docker-bash-completion, docker-stable y 1 más | 27.5.1_ce-98.126.1 y 1 más |
Mostrar las 4 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12.5 | docker | 27.5.1_ce-98.126.1 |
| SUSE Linux Enterprise 12.5 | docker-bash-completion | 27.5.1_ce-98.126.1 |
| SUSE Linux Enterprise 12.5 | docker-stable | 24.0.9_ce-1.11.1 |
| SUSE Linux Enterprise 12.5 | docker-stable-bash-completion | 24.0.9_ce-1.11.1 |
Referencias
- https://bugzilla.suse.com/1219437
- https://bugzilla.suse.com/1234089
- https://bugzilla.suse.com/1237367
- https://bugzilla.suse.com/1239185
- https://bugzilla.suse.com/1239322
- https://lists.suse.com/pipermail/sle-updates/2025-April/038883.html
- https://www.suse.com/security/cve/CVE-2024-23650/
- https://www.suse.com/security/cve/CVE-2024-23653/
Las 14 referencias
- https://www.suse.com/security/cve/CVE-2024-29018/
- https://www.suse.com/security/cve/CVE-2024-41110/
- https://www.suse.com/security/cve/CVE-2025-22868/
- https://www.suse.com/security/cve/CVE-2025-22869/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2025/suse-su-20251102-1/