Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE 2025 0226 1 Moderate Docker Stable Security Update for Multiple Issues

suse
Calendar Grey January 23, 2025
Dist Suse Esm H88
SUSE Security Bulletin for docker-stable enhancements addresses six vulnerabilities. Implement patches to enhance your system's safety and efficiency.
* bsc#1219437 * bsc#1234089 Cross-References: * CVE-2024-2365

Summary

## This update for docker-stable fixes the following issues: * CVE-2024-29018: Fixed external DNS request handling from 'internal' networks that could have led to data exfiltration (bsc#1234089). * CVE-2024-23650: Fixed possibile BuildKit daemon crash via malicious BuildKit client or frontend request (bsc#1219437). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-226=1 * Containers Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2025-226=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * docker-stable-24.0.9_ce-150000.1.11.1

Topics%20covered

Topics Covered

security advisory moderate threat data exfiltration openSUSE docker BuildKit

References

* bsc#1219437

* bsc#1234089

Cross-

* CVE-2024-2365

* CVE-2024-23650

* CVE-2024-23653

* CVE-2024-29018

* CVE-2024-41110

CVSS scores:

* CVE-2024-23650 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2024-23650 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

* CVE-2024-23653 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

* CVE-2024-23653 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

* CVE-2024-29018 ( SUSE ): 8.2

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

* CVE-2024-29018 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

* CVE-2024-41110 ( SUSE ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected Products:

* Containers Module 15-SP6

* openSUSE Leap 15.6

Announcement ID: SUSE-SU-2025:0226-1
Release Date: 2025-01-23T13:54:20Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate threat data exfiltration openSUSE docker BuildKit

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here