SUSE-SU-2026:0972-1
Security update for docker-stable
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for docker-stable fixes the following issues: - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption (bsc#1253904).
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.6 | docker-stable, docker-stable-bash-completion, docker-stable-fish-completion y 2 más | 24.0.9_ce-150000.1.39.1 |
| SUSE Linux Enterprise 15.7 | docker-stable, docker-stable-bash-completion, docker-stable-zsh-completion | 24.0.9_ce-150000.1.39.1 |
Mostrar las 8 entradas de 2 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.6 | docker-stable | 24.0.9_ce-150000.1.39.1 |
| openSUSE Leap 15.6 | docker-stable-bash-completion | 24.0.9_ce-150000.1.39.1 |
| openSUSE Leap 15.6 | docker-stable-fish-completion | 24.0.9_ce-150000.1.39.1 |
| openSUSE Leap 15.6 | docker-stable-rootless-extras | 24.0.9_ce-150000.1.39.1 |
| openSUSE Leap 15.6 | docker-stable-zsh-completion | 24.0.9_ce-150000.1.39.1 |
| SUSE Linux Enterprise 15.7 | docker-stable | 24.0.9_ce-150000.1.39.1 |
| SUSE Linux Enterprise 15.7 | docker-stable-bash-completion | 24.0.9_ce-150000.1.39.1 |
| SUSE Linux Enterprise 15.7 | docker-stable-zsh-completion | 24.0.9_ce-150000.1.39.1 |
Referencias
- https://bugzilla.suse.com/1253904
- https://lists.suse.com/pipermail/sle-security-updates/2026-March/024810.html
- https://www.suse.com/security/cve/CVE-2024-23650/
- https://www.suse.com/security/cve/CVE-2024-29018/
- https://www.suse.com/security/cve/CVE-2024-41110/
- https://www.suse.com/security/cve/CVE-2025-22868/
- https://www.suse.com/security/cve/CVE-2025-22869/
- https://www.suse.com/security/cve/CVE-2025-30204/