Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

SUSE Linux Micro 6.1: 2025:20259-1 critical: Docker DoS fix

suse
Calendar Grey June 4, 2025
Dist Suse Esm H88
Important security notification for SUSE Docker enhancement targeting various critical flaws and weaknesses.
* bsc#1217070 * bsc#1223409 * bsc#1228324 * bsc#1228553 * bsc#1229806

Summary

## This update for docker fixes the following issues: * This update includes fixes for: * CVE-2024-41110: Fixed Authz zero length regression (bsc#1228324) * CVE-2023-47108: Fixed otelgrpc: DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality (bsc#1217070 bsc#1229806) * CVE-2023-45142: Fixed otelhttp,otelhttptrace,otelrestful: DoS vulnerability (bsc#1228553 bsc#1229806) * Update to Docker 27.5.1-ce. See upstream changelog online at bsc#1237335 * Update to docker-buildx 0.20.1. See upstream changelog online at * Update to Docker 27.4.1-ce. See upstream changelog online at

Topics%20covered

Topics Covered

security advisory update critical DoS SUSE docker

References

* bsc#1217070

* bsc#1223409

* bsc#1228324

* bsc#1228553

* bsc#1229806

* bsc#1230294

* bsc#1230331

* bsc#1230333

* bsc#1231348

* bsc#1232999

* bsc#1233819

* bsc#1234089

* bsc#1237335

Cross-

* CVE-2023-45142

* CVE-2023-47108

* CVE-2024-29018

* CVE-2024-41110

CVSS scores:

* CVE-2023-45142 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2023-45142 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2023-47108 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2023-47108 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2024-29018 ( SUSE ): 8.2

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

* CVE-2024-29018 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:20259-1
Release Date: 2025-03-31T16:54:11Z
Rating: critical

Topics%20covered

Topics Covered

security advisory update critical DoS SUSE docker

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here