SUSE-SU-2024:4204-1
Security update for docker-stable
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for docker-stable fixes the following issues: - CVE-2024-41110: Fixed Authz zero length regression (bsc#1228324). Bug fixes: - Allow users to disable SUSE secrets support by setting DOCKER_SUSE_SECRETS_ENABLE=0 in /etc/sysconfig/docker (bsc#1231348). - Import specfile changes for docker-buildx as well as the changes to help reduce specfile differences between docker-stable and docker (bsc#1230331, bsc#1230333). - Fix BuildKit's symlink resolution logic to correctly handle non-lexical symlinks (bsc#1221916). - Write volume options atomically so sudden system crashes won't result in future Docker starts failing due to empty files (bsc#1214855).
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| openSUSE Leap 15.5 | docker-stable, docker-stable-bash-completion, docker-stable-fish-completion and 2 more | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.6 | docker-stable, docker-stable-bash-completion, docker-stable-fish-completion and 2 more | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.3 | docker-stable, docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.4 | docker-stable, docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.5 | docker-stable, docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.6 | docker-stable, docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
Show all 18 entries from 6 sources
| Source | Package | Fixed in |
|---|---|---|
| openSUSE Leap 15.5 | docker-stable | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.5 | docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.5 | docker-stable-fish-completion | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.5 | docker-stable-rootless-extras | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.5 | docker-stable-zsh-completion | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.6 | docker-stable | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.6 | docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.6 | docker-stable-fish-completion | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.6 | docker-stable-rootless-extras | 24.0.9_ce-150000.1.5.1 |
| openSUSE Leap 15.6 | docker-stable-zsh-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.3 | docker-stable | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.3 | docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.4 | docker-stable | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.4 | docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.5 | docker-stable | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.5 | docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.6 | docker-stable | 24.0.9_ce-150000.1.5.1 |
| SUSE Linux Enterprise 15.6 | docker-stable-bash-completion | 24.0.9_ce-150000.1.5.1 |
References
- https://bugzilla.suse.com/1214855
- https://bugzilla.suse.com/1221916
- https://bugzilla.suse.com/1228324
- https://bugzilla.suse.com/1230331
- https://bugzilla.suse.com/1230333
- https://bugzilla.suse.com/1231348
- https://lists.suse.com/pipermail/sle-security-updates/2024-December/019930.html
- https://www.suse.com/security/cve/CVE-2024-41110/