Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Debian 11.1 Docker Vulnerability Fix Released for Patch 2029-98765-4

suse
Calendar Grey January 28, 2026
Dist Suse Esm H88
Critical security update for buildah addressing five important issues across SUSE Linux. Boost security now!
An update that solves five vulnerabilities can now be installed.

Summary

## This update for buildah fixes the following issues: * CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed non validated message size causing a panic due to an out of bounds read (bsc#1254054) * CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253598) * CVE-2025-31133,CVE-2025-52565,CVE-2025-52881: Fixed container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1253096) Other fixes: * Updated to version 1.39.5. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product:

Topics%20covered

Topics Covered

security advisory SuSE important buildah container breakout message type

References

* bsc#1253096

* bsc#1253598

* bsc#1254054

Cross-

* CVE-2025-31133

* CVE-2025-47913

* CVE-2025-47914

* CVE-2025-52565

* CVE-2025-52881

CVSS scores:

* CVE-2025-31133 ( SUSE ): 7.3

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

* CVE-2025-31133 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

* CVE-2025-31133 ( NVD ): 7.3

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* CVE-2025-31133 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

* CVE-2025-47913 ( SUSE ): 8.7

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:20123-1
Release Date: 2026-01-22T13:00:13Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE important buildah container breakout message type

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here