SUSE-SU-2023:4936-1
SUSE-SU-2023:4936-1 · Security update for docker, rootlesskit
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
This update for docker, rootlesskit fixes the following issues: docker: - Update to Docker 24.0.7-ce. See upstream changelong online at https://docs.docker.com/engine/release-notes/24.0/#2407>. bsc#1217513 * Deny containers access to /sys/devices/virtual/powercap by default. - CVE-2020-8694 bsc#1170415 - CVE-2020-8695 bsc#1170446 - CVE-2020-12912 bsc#1178760 - Update to Docker 24.0.6-ce. See upstream changelong online at https://docs.docker.com/engine/release-notes/24.0/#2406 . bsc#1215323 - Add a docker.socket unit file, but with socket activation effectively disabled to ensure that Docker will always run even if you start the socket individually. Users should probably just ignore this unit file. bsc#1210141 - Update to Docker 24.0.5-ce. See upstream changelong online at https://docs.docker.com/engine/release-notes/24.0/#2405 . bsc#1213229 This update ships docker-rootless support in the docker-rootless-extra package. (jsc#PED-6180) rootlesskit: - new package, for docker rootless support. (jsc#PED-6180)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
docker SUSE:Linux Enterprise Micro 5.3
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
docker SUSE:Linux Enterprise Micro 5.4
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
docker SUSE:Linux Enterprise Micro 5.5
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
docker SUSE:Linux Enterprise Module for Containers 15 SP4
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
rootlesskit SUSE:Linux Enterprise Module for Containers 15 SP4
- Affected ranges
- ECOSYSTEM: < 1.1.1-150000.1.3.3
Update to 1.1.1-150000.1.3.3
docker SUSE:Linux Enterprise Module for Containers 15 SP5
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
rootlesskit SUSE:Linux Enterprise Module for Containers 15 SP5
- Affected ranges
- ECOSYSTEM: < 1.1.1-150000.1.3.3
Update to 1.1.1-150000.1.3.3
docker SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
docker SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
docker SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
docker SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
docker SUSE:Linux Enterprise Server 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
docker SUSE:Linux Enterprise Server 15 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
docker SUSE:Linux Enterprise Server 15 SP3-LTSS
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
docker SUSE:Linux Enterprise Server for SAP Applications 15 SP1
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
docker SUSE:Linux Enterprise Server for SAP Applications 15 SP2
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
docker SUSE:Linux Enterprise Server for SAP Applications 15 SP3
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
docker SUSE:Linux Enterprise Micro 5.1
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
docker SUSE:Linux Enterprise Micro 5.2
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
docker SUSE:Enterprise Storage 7.1
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
docker openSUSE:Leap Micro 5.3
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
docker openSUSE:Leap Micro 5.4
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
docker openSUSE:Leap 15.4
- Affected ranges
- ECOSYSTEM: < 24.0.7_ce-150000.190.4
Update to 24.0.7_ce-150000.190.4
rootlesskit openSUSE:Leap 15.4
- Affected ranges
- ECOSYSTEM: < 1.1.1-150000.1.3.3
Update to 1.1.1-150000.1.3.3
Original sources
- https://www.suse.com/support/update/announcement/2023/suse-su-20234936-1/
- https://bugzilla.suse.com/1170415
- https://bugzilla.suse.com/1170446
- https://bugzilla.suse.com/1178760
- https://bugzilla.suse.com/1210141
- https://bugzilla.suse.com/1213229
- https://bugzilla.suse.com/1213500
- https://bugzilla.suse.com/1215323
- https://bugzilla.suse.com/1217513
- https://www.suse.com/security/cve/CVE-2020-12912
- https://www.suse.com/security/cve/CVE-2020-8694
- https://www.suse.com/security/cve/CVE-2020-8695
- https://osv.dev/vulnerability/SUSE-SU-2023:4936-1