gpp_maybe Security update for docker

SUSE-SLE-Module-Basesystem-15-SP7-2026-2692

This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266625). - CVE-2026-39984: github.com/sigstore/timestamp-authority/v2/pkg/verification: improper certificate validation can be used to bypass some authorization controls (bsc#1262346). - CVE-2026-41567: arbitrary code execution with full daemon privileges when a user uploads a compressed archive into that container (bsc#1267827).

• Release Date
  Jun 30 2026
• References
  Bugzilla: 1262346, 1265782, 1266625, 1267827
  CVEs: CVE-2026-33814, CVE-2026-39821, CVE-2026-39984, CVE-2026-41567
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 ppc64le

• Packages
  docker
  The Moby-project Linux container runtime

  29.4.0_ce-150000.253.1 lock rpm lock src

  docker-buildx
  Docker CLI plugin for extended build capabilities with BuildKit

  0.33.0-150000.253.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  docker
  The Moby-project Linux container runtime

  29.4.0_ce-150000.253.1 lock rpm lock src

  docker-buildx
  Docker CLI plugin for extended build capabilities with BuildKit

  0.33.0-150000.253.1 lock rpm

Basesystem Module 15.7 s390x

• Packages
  docker
  The Moby-project Linux container runtime

  29.4.0_ce-150000.253.1 lock rpm lock src

  docker-buildx
  Docker CLI plugin for extended build capabilities with BuildKit

  0.33.0-150000.253.1 lock rpm

Basesystem Module 15.7 aarch64

• Packages
  docker
  The Moby-project Linux container runtime

  29.4.0_ce-150000.253.1 lock rpm lock src

  docker-buildx
  Docker CLI plugin for extended build capabilities with BuildKit

  0.33.0-150000.253.1 lock rpm