shield Security update for docker

SUSE-SLE-Module-Basesystem-15-SP7-2025-2289

This update for docker fixes the following issues: Update to Docker 28.2.2-ce (bsc#1243833, bsc#1242114): - CVE-2025-0495: Fixed credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration.(bsc#1239765) - CVE-2025-22872: golang.org/x/net/html: incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction (bsc#1241830). Other fixes: - Update to docker-buildx v0.22.0. - Always clear SUSEConnect suse_* secrets when starting containers (bsc#1244035). - Disable transparent SUSEConnect support for SLE-16. (jsc#PED-12534) - Now that the only blocker for docker-buildx support was removed for SLE-16, enable docker-buildx for SLE-16 as well. (jsc#PED-8905) - SUSEConnect secrets fails in SLES rootless docker containers (bsc#1240150).

• Release Date
  Jul 11 2025
• References
  Bugzilla: 1239765, 1244035, 1241830, 1240150, 1243833, 1242114
  CVEs: CVE-2025-0495, CVE-2025-22872
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.7 s390x

• Packages
  docker
  The Moby-project Linux container runtime

  28.2.2_ce-150000.227.1 lock rpm lock src

Basesystem Module 15.7 aarch64

• Packages
  docker
  The Moby-project Linux container runtime

  28.2.2_ce-150000.227.1 lock rpm lock src

Basesystem Module 15.7 ppc64le

• Packages
  docker
  The Moby-project Linux container runtime

  28.2.2_ce-150000.227.1 lock rpm lock src

Basesystem Module 15.7 x86_64

• Packages
  docker
  The Moby-project Linux container runtime

  28.2.2_ce-150000.227.1 lock rpm lock src