p PatchFirst

SUSE-SU-2025:02289-1

SUSE-SU-2025:02289-1 · Security update for docker

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for docker fixes the following issues: Update to Docker 28.2.2-ce (bsc#1243833, bsc#1242114): - CVE-2025-0495: Fixed credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration.(bsc#1239765) - CVE-2025-22872: golang.org/x/net/html: incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction (bsc#1241830). Other fixes: - Update to docker-buildx v0.22.0. - Always clear SUSEConnect suse_* secrets when starting containers (bsc#1244035). - Disable transparent SUSEConnect support for SLE-16. (jsc#PED-12534) - Now that the only blocker for docker-buildx support was removed for SLE-16, enable docker-buildx for SLE-16 as well. (jsc#PED-8905) - SUSEConnect secrets fails in SLES rootless docker containers (bsc#1240150).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • docker SUSE:Linux Enterprise Micro 5.3

    Affected ranges
    • ECOSYSTEM: < 28.2.2_ce-150000.227.1

    Update to 28.2.2_ce-150000.227.1

  • docker SUSE:Linux Enterprise Micro 5.4

    Affected ranges
    • ECOSYSTEM: < 28.2.2_ce-150000.227.1

    Update to 28.2.2_ce-150000.227.1

  • docker SUSE:Linux Enterprise Micro 5.5

    Affected ranges
    • ECOSYSTEM: < 28.2.2_ce-150000.227.1

    Update to 28.2.2_ce-150000.227.1

  • docker SUSE:Linux Enterprise Module for Basesystem 15 SP7

    Affected ranges
    • ECOSYSTEM: < 28.2.2_ce-150000.227.1

    Update to 28.2.2_ce-150000.227.1

  • docker SUSE:Linux Enterprise Module for Containers 15 SP6

    Affected ranges
    • ECOSYSTEM: < 28.2.2_ce-150000.227.1

    Update to 28.2.2_ce-150000.227.1

  • docker-stable SUSE:Linux Enterprise Module for Containers 15 SP6

    Affected ranges
    • ECOSYSTEM: < 24.0.9_ce-150000.1.22.1

    Update to 24.0.9_ce-150000.1.22.1

  • docker SUSE:Linux Enterprise Module for Containers 15 SP7

    Affected ranges
    • ECOSYSTEM: < 28.2.2_ce-150000.227.1

    Update to 28.2.2_ce-150000.227.1

  • docker-stable SUSE:Linux Enterprise Module for Containers 15 SP7

    Affected ranges
    • ECOSYSTEM: < 24.0.9_ce-150000.1.22.1

    Update to 24.0.9_ce-150000.1.22.1

  • docker SUSE:Linux Enterprise Micro 5.1

    Affected ranges
    • ECOSYSTEM: < 28.2.2_ce-150000.227.1

    Update to 28.2.2_ce-150000.227.1

  • docker SUSE:Linux Enterprise Micro 5.2

    Affected ranges
    • ECOSYSTEM: < 28.2.2_ce-150000.227.1

    Update to 28.2.2_ce-150000.227.1

  • docker openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 28.2.2_ce-150000.227.1

    Update to 28.2.2_ce-150000.227.1

  • docker-stable openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 24.0.9_ce-150000.1.22.1

    Update to 24.0.9_ce-150000.1.22.1

Original sources

Check your server →