gpp_maybe Security update for docker

SUSE-SLE-Micro-6.0-301

This update for docker fixes the following issues: - Updated to docker-buildx v0.22.0. - Updated to Docker 27.5.1-ce. - CVE-2025-0495: buildx: Fixed credential leakage to telemetry endpoints (bsc#1239765) - CVE-2025-22868: Fixed golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239185) - CVE-2025-22869: Fixed golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239322). - CVE-2024-29018:moby: external DNS requests from 'internal' networks could lead to data exfiltration (bsc#1234089) - Make container-selinux requirement conditional on selinux-policy (bsc#1237367)

• Release Date
  Apr 24 2025
• References
  Bugzilla: 1223409, 1234089, 1237335, 1237367, 1239185, 1239322, 1239765
  CVEs: CVE-2024-29018, CVE-2025-0495, CVE-2025-22868, CVE-2025-22869
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Micro 6.0 s390x

• Packages
  docker
  The Moby-project Linux container runtime

  27.5.1_ce-2.1 lock rpm

  docker-buildx
  Docker CLI plugin for extended build capabilities with BuildKit

  0.22.0-2.1 lock rpm

SUSE Linux Micro 6.0 aarch64

• Packages
  docker
  The Moby-project Linux container runtime

  27.5.1_ce-2.1 lock rpm

  docker-buildx
  Docker CLI plugin for extended build capabilities with BuildKit

  0.22.0-2.1 lock rpm

SUSE Linux Micro 6.0 x86_64

• Packages
  docker
  The Moby-project Linux container runtime

  27.5.1_ce-2.1 lock rpm

  docker-buildx
  Docker CLI plugin for extended build capabilities with BuildKit

  0.22.0-2.1 lock rpm