gpp_maybe Security update for docker

SUSE-SLE-Micro-6.1-605

This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266625). - CVE-2026-39984: github.com/sigstore/timestamp-authority/v2/pkg/verification: improper certificate validation can be used to bypass some authorization controls (bsc#1262346). - CVE-2026-41567: arbitrary code execution with full daemon privileges when a user uploads a compressed archive into that container (bsc#1267827).

• Release Date
  Jun 30 2026
• References
  Bugzilla: 1262346, 1265782, 1266625, 1267827
  CVEs: CVE-2026-33814, CVE-2026-39821, CVE-2026-39984, CVE-2026-41567
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Micro 6.1 aarch64

• Packages
  docker
  The Moby-project Linux container runtime

  29.4.0_ce-slfo.1.1_10.1 lock rpm

  docker-buildx
  Docker CLI plugin for extended build capabilities with BuildKit

  0.33.0-slfo.1.1_10.1 lock rpm

SUSE Linux Micro 6.1 ppc64le

• Packages
  docker
  The Moby-project Linux container runtime

  29.4.0_ce-slfo.1.1_10.1 lock rpm

  docker-buildx
  Docker CLI plugin for extended build capabilities with BuildKit

  0.33.0-slfo.1.1_10.1 lock rpm

SUSE Linux Micro 6.1 s390x

• Packages
  docker
  The Moby-project Linux container runtime

  29.4.0_ce-slfo.1.1_10.1 lock rpm

  docker-buildx
  Docker CLI plugin for extended build capabilities with BuildKit

  0.33.0-slfo.1.1_10.1 lock rpm

SUSE Linux Micro 6.1 x86_64

• Packages
  docker
  The Moby-project Linux container runtime

  29.4.0_ce-slfo.1.1_10.1 lock rpm

  docker-buildx
  Docker CLI plugin for extended build capabilities with BuildKit

  0.33.0-slfo.1.1_10.1 lock rpm