Security update for docker-stable

Announcement ID:	SUSE-SU-2026:0972-1
Release Date:	2026-03-23T15:21:50Z
Rating:	important
References:	bsc#1253904
Cross-References:	CVE-2024-2365 CVE-2024-29018 CVE-2024-41110 CVE-2025-22868 CVE-2025-22869 CVE-2025-30204 CVE-2025-58181
CVSS scores:	CVE-2024-29018 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVE-2024-29018 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2024-29018 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2024-29018 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2024-41110 ( SUSE ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2025-22868 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVE-2025-22868 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-22868 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-22869 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVE-2025-22869 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-22869 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-30204 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVE-2025-30204 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-30204 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-58181 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N CVE-2025-58181 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-58181 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Products:	Containers Module 15-SP7 openSUSE Leap 15.6 SUSE Linux Enterprise Real Time 15 SP7 SUSE Linux Enterprise Server 15 SP7 SUSE Linux Enterprise Server for SAP Applications 15 SP7

An update that solves seven vulnerabilities can now be installed.

Description:

This update for docker-stable fixes the following issues:

• CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption (bsc#1253904).

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• openSUSE Leap 15.6
  zypper in -t patch openSUSE-SLE-15.6-2026-972=1
• Containers Module 15-SP7
  zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-972=1

Package List:

• openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64)
  • docker-stable-debuginfo-24.0.9_ce-150000.1.39.1
  • docker-stable-24.0.9_ce-150000.1.39.1
• openSUSE Leap 15.6 (noarch)
  • docker-stable-zsh-completion-24.0.9_ce-150000.1.39.1
  • docker-stable-fish-completion-24.0.9_ce-150000.1.39.1
  • docker-stable-bash-completion-24.0.9_ce-150000.1.39.1
  • docker-stable-rootless-extras-24.0.9_ce-150000.1.39.1
• Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64)
  • docker-stable-debuginfo-24.0.9_ce-150000.1.39.1
  • docker-stable-24.0.9_ce-150000.1.39.1
• Containers Module 15-SP7 (noarch)
  • docker-stable-bash-completion-24.0.9_ce-150000.1.39.1
  • docker-stable-zsh-completion-24.0.9_ce-150000.1.39.1

References:

• https://www.suse.com/security/cve/CVE-2024-2365.html
• https://www.suse.com/security/cve/CVE-2024-29018.html
• https://www.suse.com/security/cve/CVE-2024-41110.html
• https://www.suse.com/security/cve/CVE-2025-22868.html
• https://www.suse.com/security/cve/CVE-2025-22869.html
• https://www.suse.com/security/cve/CVE-2025-30204.html
• https://www.suse.com/security/cve/CVE-2025-58181.html
• https://bugzilla.suse.com/show_bug.cgi?id=1253904