Security update for docker
This update for docker rebuilds it against the current go security release.
- Actualiza a 29.4.0_ce-150000.261.1
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades de docker
Vulnerabilidad publicada para docker en los últimos 30 días: 1. En el catálogo KEV: 0.
Vulnerabilidades: 17
Security update for docker
This update for docker rebuilds it against the current go security release.
- Actualiza a 29.4.0_ce-150000.259.1
Publicación ActualizaciónSecurity update for docker
This update for docker rebuilds it against the current go security release.
- Actualiza a 29.4.0_ce-150000.257.1
Publicación ActualizaciónSecurity update for docker
This update for docker rebuilds it against the current go security release.
- Actualiza a 29.4.0_ce-150000.255.1
Publicación ActualizaciónSecurity update for docker
This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266625). - CVE-2026-39984: github.com/sigstore/timestamp-authority/v2/pkg/verification: improper certificate validation can be used to bypass some authorization controls (bsc#1262346). - CVE-2026-41567: arbitrary code execution with full daemon privileges when a user uploads a compressed archive into that
- Actualiza a 29.4.0_ce-150000.253.1
Publicación ActualizaciónSecurity update for docker
This update for docker fixes the following issues: - Update to Docker 29.4.0. See upstream changelog online at <https://docs.docker.com/engine/release-notes/29/#2940> - Update to buildx 0.33.0. See upstream changelog online at <https://github.com/docker/buildx/releases/tag/v0.33.0>
- Actualiza a 29.4.0_ce-150000.250.1
Publicación ActualizaciónSecurity update for docker
This update for docker rebuilds it against the current go 1.25 security release.
- Actualiza a 28.5.1_ce-150000.245.2
Publicación ActualizaciónSecurity update for docker
This update for docker rebuilds it against the current go 1.25 security release.
- Actualiza a 28.5.1_ce-150000.243.1
Publicación ActualizaciónSecurity update for docker
This update for docker fixes the following issues: - CVE-2025-58181: Fixed a bug in crypto/ssh where invalidated number of mechanisms can cause unbounded memory consumption. (bsc#1253904)
- Actualiza a 28.5.1_ce-150000.241.2
Publicación ActualizaciónSecurity update for docker
This update for docker fixes the following issues: - Update to Docker 28.3.3-ce. - CVE-2025-54388: Fixed a bug where firewalld when reloaded can make published container ports accessible from remote hosts. (bsc#1247367)
- Actualiza a 28.3.3_ce-150000.230.1
Publicación ActualizaciónSecurity update for docker
This update for docker fixes the following issues: Update to Docker 28.2.2-ce (bsc#1243833, bsc#1242114): - CVE-2025-0495: Fixed credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration.(bsc#1239765) - CVE-2025-22872: golang.org/x/net/html: incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction (bsc#1241830). Other fixes: - Update to docker-buildx v0.22.0. - Always clear SUSEConnect suse_* secrets when starting containers (bsc#1244035). - Disable transparent SUSEConnect support for SLE-16. (jsc#PED-12534) - Now tha
- Actualiza a 28.2.2_ce-150000.227.1
Publicación ActualizaciónSecurity update for docker, docker-stable
This update for docker, docker-stable fixes the following issues: - CVE-2025-22868: Fixed unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239185). - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239322). Other fixes: - Make container-selinux requirement conditional on selinux-policy (bsc#1237367)
- Actualiza a 27.5.1_ce-150000.218.1
Publicación ActualizaciónSecurity update for docker
This update for docker fixes the following issues: Update to Docker 27.5.1-ce (bsc#1237335): - CVE-2024-29018: External DNS requests from 'internal' networks could lead to data exfiltration (bsc#1234089).
- Actualiza a 27.5.1_ce-150000.215.3
Publicación ActualizaciónSecurity update for docker
This update for docker fixes the following issues: - Update docker-buildx to v0.19.2. See upstream changelog online at <https://github.com/docker/buildx/releases/tag/v0.19.2>. Some notable changelogs from the last update: * <https://github.com/docker/buildx/releases/tag/v0.19.0> * <https://github.com/docker/buildx/releases/tag/v0.18.0> - Add a new toggle file /etc/docker/suse-secrets-enable which allows users to disable the SUSEConnect integration with Docker (which creates special mounts in /run/secrets to allow container-suseconnect to authenticate containers with registries on registered hosts). bsc#1231348 bsc#1232999
- Actualiza a 26.1.5_ce-150000.212.1
Publicación ActualizaciónSecurity update for buildah, docker
This update for buildah, docker fixes the following issues: Changes in docker: - CVE-2024-23651: Fixed arbitrary files write due to race condition on mounts (bsc#1219267) - CVE-2024-23652: Fixed insufficient validation of parent directory on mount (bsc#1219268) - CVE-2024-23653: Fixed insufficient validation on entitlement on container creation via buildkit (bsc#1219438) - CVE-2024-41110: A Authz zero length regression that could lead to authentication bypass was fixed (bsc#1228324) Other fixes: - Update to Docker 25.0.6-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/25.0/#2506> - Update to Docker 25.0
- Actualiza a 25.0.6_ce-150000.207.1
Publicación ActualizaciónSecurity update for docker
This update for docker fixes the following issues: Vendor latest buildkit v0.11 including bugfixes for the following: * CVE-2024-23653: BuildKit API doesn't validate entitlement on container creation (bsc#1219438). * CVE-2024-23652: Fixed arbitrary deletion of files (bsc#1219268). * CVE-2024-23651: Fixed race condition in mount (bsc#1219267).
- Actualiza a 24.0.7_ce-150000.193.1
Publicación ActualizaciónSecurity update for docker, rootlesskit
This update for docker, rootlesskit fixes the following issues: docker: - Update to Docker 24.0.7-ce. See upstream changelong online at https://docs.docker.com/engine/release-notes/24.0/#2407>. bsc#1217513 * Deny containers access to /sys/devices/virtual/powercap by default. - CVE-2020-8694 bsc#1170415 - CVE-2020-8695 bsc#1170446 - CVE-2020-12912 bsc#1178760 - Update to Docker 24.0.6-ce. See upstream changelong online at https://docs.docker.com/engine/release-notes/24.0/#2406 . bsc#1215323 - Add a docker.socket unit file, but with socket activation effectively disabled to ensure that Docker will always run even if yo
- Actualiza a 24.0.7_ce-150000.190.4
Publicación Actualización
Comprueba tu servidor
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.