SUSE-SU-2026:0972-1
Security update for docker-stable
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for docker-stable fixes the following issues: - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption (bsc#1253904).
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.6 | docker-stable, docker-stable-bash-completion, docker-stable-fish-completion et 2 autres | 24.0.9_ce-150000.1.39.1 |
| SUSE Linux Enterprise 15.7 | docker-stable, docker-stable-bash-completion, docker-stable-zsh-completion | 24.0.9_ce-150000.1.39.1 |
Afficher les 8 entrées de 2 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.6 | docker-stable | 24.0.9_ce-150000.1.39.1 |
| openSUSE Leap 15.6 | docker-stable-bash-completion | 24.0.9_ce-150000.1.39.1 |
| openSUSE Leap 15.6 | docker-stable-fish-completion | 24.0.9_ce-150000.1.39.1 |
| openSUSE Leap 15.6 | docker-stable-rootless-extras | 24.0.9_ce-150000.1.39.1 |
| openSUSE Leap 15.6 | docker-stable-zsh-completion | 24.0.9_ce-150000.1.39.1 |
| SUSE Linux Enterprise 15.7 | docker-stable | 24.0.9_ce-150000.1.39.1 |
| SUSE Linux Enterprise 15.7 | docker-stable-bash-completion | 24.0.9_ce-150000.1.39.1 |
| SUSE Linux Enterprise 15.7 | docker-stable-zsh-completion | 24.0.9_ce-150000.1.39.1 |
Références
- https://bugzilla.suse.com/1253904
- https://lists.suse.com/pipermail/sle-security-updates/2026-March/024810.html
- https://www.suse.com/security/cve/CVE-2024-23650/
- https://www.suse.com/security/cve/CVE-2024-29018/
- https://www.suse.com/security/cve/CVE-2024-41110/
- https://www.suse.com/security/cve/CVE-2025-22868/
- https://www.suse.com/security/cve/CVE-2025-22869/
- https://www.suse.com/security/cve/CVE-2025-30204/