Security update for docker
This update for docker rebuilds it against the current go security release.
- Update to 29.4.0_ce-150000.261.1
PatchFirst · Latest vulnerabilities
Vulnerability published for docker in the last 30 days: 1. Listed in the KEV catalogue: 0.
Vulnerabilities: 11
This update for docker rebuilds it against the current go security release.
This update for docker rebuilds it against the current go security release.
This update for docker rebuilds it against the current go security release.
This update for docker rebuilds it against the current go security release.
This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266625). - CVE-2026-39984: github.com/sigstore/timestamp-authority/v2/pkg/verification: improper certificate validation can be used to bypass some authorization controls (bsc#1262346). - CVE-2026-41567: arbitrary code execution with full daemon privileges when a user uploads a compressed archive into that
This update for docker fixes the following issues: - Update to Docker 29.4.0. See upstream changelog online at <https://docs.docker.com/engine/release-notes/29/#2940> - Update to buildx 0.33.0. See upstream changelog online at <https://github.com/docker/buildx/releases/tag/v0.33.0>
This update for docker rebuilds it against the current go 1.25 security release.
This update for docker rebuilds it against the current go 1.25 security release.
This update for docker fixes the following issues: - CVE-2025-58181: Fixed a bug in crypto/ssh where invalidated number of mechanisms can cause unbounded memory consumption. (bsc#1253904)
This update for docker fixes the following issues: - Update to Docker 28.3.3-ce. - CVE-2025-54388: Fixed a bug where firewalld when reloaded can make published container ports accessible from remote hosts. (bsc#1247367)
This update for docker fixes the following issues: Update to Docker 28.2.2-ce (bsc#1243833, bsc#1242114): - CVE-2025-0495: Fixed credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration.(bsc#1239765) - CVE-2025-22872: golang.org/x/net/html: incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction (bsc#1241830). Other fixes: - Update to docker-buildx v0.22.0. - Always clear SUSEConnect suse_* secrets when starting containers (bsc#1244035). - Disable transparent SUSEConnect support for SLE-16. (jsc#PED-12534) - Now tha
Check your installed stack and versions against the current vulnerability feeds.