gpp_maybe Security update for docker

SUSE-SLE-Micro-6.1-121

This update for docker fixes the following issues: Update to docker-buildx v0.22.0: - CVE-2025-0495: buildx: credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration (bsc#1239765). - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239185). - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239322). Bug fixes: - Fix unconditional container-selinux pull (bsc#1237367).

• Release Date
  May 27 2025
• References
  Bugzilla: 1237367, 1239185, 1239322, 1239765
  CVEs: CVE-2025-0495, CVE-2025-22868, CVE-2025-22869
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Micro 6.1 ppc64le

• Packages
  docker
  The Moby-project Linux container runtime

  27.5.1_ce-slfo.1.1_2.1 lock rpm

  docker-buildx
  Docker CLI plugin for extended build capabilities with BuildKit

  0.22.0-slfo.1.1_2.1 lock rpm

SUSE Linux Micro 6.1 s390x

• Packages
  docker
  The Moby-project Linux container runtime

  27.5.1_ce-slfo.1.1_2.1 lock rpm

  docker-buildx
  Docker CLI plugin for extended build capabilities with BuildKit

  0.22.0-slfo.1.1_2.1 lock rpm

SUSE Linux Micro 6.1 x86_64

• Packages
  docker
  The Moby-project Linux container runtime

  27.5.1_ce-slfo.1.1_2.1 lock rpm

  docker-buildx
  Docker CLI plugin for extended build capabilities with BuildKit

  0.22.0-slfo.1.1_2.1 lock rpm

SUSE Linux Micro 6.1 aarch64

• Packages
  docker
  The Moby-project Linux container runtime

  27.5.1_ce-slfo.1.1_2.1 lock rpm

  docker-buildx
  Docker CLI plugin for extended build capabilities with BuildKit

  0.22.0-slfo.1.1_2.1 lock rpm