Security update for docker
This update for docker rebuilds it against the current go security release.
- Mettez à jour vers 29.4.0_ce-150000.261.1
PatchFirst · Vulnérabilités récentes
Vulnérabilité publiée pour docker au cours des 30 derniers jours : 1. Dans le catalogue KEV : 0.
Vulnérabilités : 11
This update for docker rebuilds it against the current go security release.
This update for docker rebuilds it against the current go security release.
This update for docker rebuilds it against the current go security release.
This update for docker rebuilds it against the current go security release.
This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266625). - CVE-2026-39984: github.com/sigstore/timestamp-authority/v2/pkg/verification: improper certificate validation can be used to bypass some authorization controls (bsc#1262346). - CVE-2026-41567: arbitrary code execution with full daemon privileges when a user uploads a compressed archive into that
This update for docker fixes the following issues: - Update to Docker 29.4.0. See upstream changelog online at <https://docs.docker.com/engine/release-notes/29/#2940> - Update to buildx 0.33.0. See upstream changelog online at <https://github.com/docker/buildx/releases/tag/v0.33.0>
This update for docker rebuilds it against the current go 1.25 security release.
This update for docker rebuilds it against the current go 1.25 security release.
This update for docker fixes the following issues: - CVE-2025-58181: Fixed a bug in crypto/ssh where invalidated number of mechanisms can cause unbounded memory consumption. (bsc#1253904)
This update for docker fixes the following issues: - Update to Docker 28.3.3-ce. - CVE-2025-54388: Fixed a bug where firewalld when reloaded can make published container ports accessible from remote hosts. (bsc#1247367)
This update for docker fixes the following issues: Update to Docker 28.2.2-ce (bsc#1243833, bsc#1242114): - CVE-2025-0495: Fixed credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration.(bsc#1239765) - CVE-2025-22872: golang.org/x/net/html: incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction (bsc#1241830). Other fixes: - Update to docker-buildx v0.22.0. - Always clear SUSEConnect suse_* secrets when starting containers (bsc#1244035). - Disable transparent SUSEConnect support for SLE-16. (jsc#PED-12534) - Now tha
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.