{"id":"CVE-2024-41110","aliases":["ALPINE-CVE-2024-41110","AZL-47017","AZL-47042","BELL-CVE-2024-41110","DEBIAN-CVE-2024-41110","DLA-3918-1","EUVD-2024-2415","GHSA-v23v-6jw2-98fq","GO-2024-3005","OESA-2024-1959","OESA-2024-2074","SUSE-RU-2024:4391-1","SUSE-SU-2024:2709-1","SUSE-SU-2024:3120-1","SUSE-SU-2024:4204-1","SUSE-SU-2024:4205-1","SUSE-SU-2024:4319-1","SUSE-SU-2024:4360-1","SUSE-SU-2025:0226-1","SUSE-SU-2025:03540-1","SUSE-SU-2025:03545-1","SUSE-SU-2025:0980-1","SUSE-SU-2025:1062-1","SUSE-SU-2025:1102-1","SUSE-SU-2025:20056-1","SUSE-SU-2025:20110-1","SUSE-SU-2025:20259-1","SUSE-SU-2026:0972-1","SUSE-SU-2026:1118-1","UBUNTU-CVE-2024-41110","USN-7161-1","USN-7161-2","USN-7161-3","openSUSE-SU-2024:14229-1","openSUSE-SU-2024:14235-1","openSUSE-SU-2024:14446-1","openSUSE-SU-2025:14909-1","openSUSE-SU-2026:20730-1"],"status":"published","title":"Moby authz zero length regression","description":"Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low.\n\nUsing a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.\n\nA security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.\n\nDocker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable.\n\ndocker-ce v27.1.1 containes patches to fix the vulnerability. Patches have also been merged into the master, 19.03, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege.","severity":{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.16496,"percentile":0.9703,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-187","CWE-444","CWE-863"],"published":"2024-07-24T16:49:53Z","modified":"2026-11-03T06:32:49Z","exploits":[{"source":"pocgithub","id":"vvpoglazov/cve-2024-41110-checker","title":"vvpoglazov/cve-2024-41110-checker","date":"2024-07-25","url":"https://github.com/vvpoglazov/cve-2024-41110-checker"},{"source":"pocgithub","id":"PauloParoPP/CVE-2024-41110-SCAN","title":"PauloParoPP/CVE-2024-41110-SCAN","date":"2024-07-26","url":"https://github.com/PauloParoPP/CVE-2024-41110-SCAN"}],"fixes":[{"ecosystem":"Go","package":"github.com/docker/docker","fixed_in":["25.0.6","23.0.15","26.1.5","27.1.1","25.0.6+incompatible","26.1.5+incompatible","27.1.1+incompatible"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.20","package":"docker","fixed_in":["26.1.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"docker","fixed_in":["27.1.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"docker","fixed_in":["27.1.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"docker","fixed_in":["27.1.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"docker","fixed_in":["27.1.1-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"moby-engine","fixed_in":["25.0.3-5"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"moby-engine","fixed_in":["24.0.9-7"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"docker","fixed_in":["20.10.24-r8"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"docker","fixed_in":["27.1.1-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"docker.io","fixed_in":["20.10.24+dfsg1-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"docker.io","fixed_in":["26.1.5+dfsg1-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"docker.io","fixed_in":["26.1.5+dfsg1-2"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"docker.io","fixed_in":["20.10.5+dfsg1-1+deb11u3"],"sources":["osv"]},{"ecosystem":"Go","package":"github.com/moby/moby","fixed_in":["25.0.6+incompatible","26.1.5+incompatible","27.1.1+incompatible"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"docker","fixed_in":["engine-18.09.0-340.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"docker","fixed_in":["engine-18.09.0-340.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"docker","fixed_in":["engine-18.09.0-268.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"docker","fixed_in":["engine-18.09.0-340.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"docker","fixed_in":["engine-18.09.0-340.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"moby","fixed_in":["docker-25.0.3-10.oe2403"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 12","package":"docker","fixed_in":["25.0.6_ce-98.115.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"docker-stable","fixed_in":["24.0.9_ce-1.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"docker-stable","fixed_in":["24.0.9_ce-1.5.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"docker.io","fixed_in":["20.10.21-0ubuntu1~18.04.3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"docker.io","fixed_in":["20.10.21-0ubuntu1~20.04.6+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"docker.io-app","fixed_in":["26.1.3-0ubuntu1~20.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"docker.io-app","fixed_in":["27.5.1-0ubuntu3~22.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"docker.io","fixed_in":["20.10.21-0ubuntu1~22.04.7+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"docker.io-app","fixed_in":["26.1.3-0ubuntu1~22.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"docker.io-app","fixed_in":["27.5.1-0ubuntu3~24.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"docker.io","fixed_in":["20.10.25+dfsg1-2ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"docker.io-app","fixed_in":["26.1.3-0ubuntu1~24.04.1+esm1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"docker","fixed_in":["26.1.5_ce-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"nova","fixed_in":["3.10.0-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"docker-stable","fixed_in":["24.0.9_ce-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/docker/docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.0"},{"fixed":"25.0.6"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/docker/docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.03.0"},{"fixed":"23.0.15"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/docker/docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26.0.0"},{"fixed":"26.1.5"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/docker/docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27.0.0"},{"fixed":"27.1.1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.1.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.1.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.1.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.1.1-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"moby-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.3-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"moby-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9-7"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20.10.21-r1"},{"fixed":"20.10.24-r8"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.2-r0"},{"fixed":"27.1.1-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.10.24+dfsg1-1+deb12u1"}]}],"versions":["20.10.24+dfsg1-1"]},{"source":"osv","ecosystem":"Debian:13","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5+dfsg1-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5+dfsg1-2"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.10.5+dfsg1-1+deb11u3"}]}],"versions":["20.10.5+dfsg1-1","20.10.5+dfsg1-1+deb11u1","20.10.5+dfsg1-1+deb11u2"]},{"source":"osv","ecosystem":"Go","package":"github.com/docker/docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.03.0"},{"fixed":"23.0.15"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/docker/docker","ranges":[{"type":"SEMVER","events":[{"introduced":"26.0.0"},{"fixed":"26.1.5"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/docker/docker","ranges":[{"type":"SEMVER","events":[{"introduced":"27.0.0"},{"fixed":"27.1.1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/docker/docker","ranges":[{"type":"SEMVER","events":[{"introduced":"24.0.0"},{"fixed":"25.0.6"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/moby/moby","ranges":[{"type":"SEMVER","events":[{"introduced":"20.10.0+incompatible"},{"fixed":"25.0.6+incompatible"},{"introduced":"26.0.0+incompatible"},{"fixed":"26.1.5+incompatible"},{"introduced":"27.0.0+incompatible"},{"fixed":"27.1.1+incompatible"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/docker/docker","ranges":[{"type":"SEMVER","events":[{"introduced":"20.10.0+incompatible"},{"fixed":"25.0.6+incompatible"},{"introduced":"26.0.0+incompatible"},{"fixed":"26.1.5+incompatible"},{"introduced":"27.0.0+incompatible"},{"fixed":"27.1.1+incompatible"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"engine-18.09.0-340.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"engine-18.09.0-340.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"engine-18.09.0-268.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"engine-18.09.0-340.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"engine-18.09.0-340.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"moby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"docker-25.0.3-10.oe2403"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 12","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-98.115.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.4-150300.8.25.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.4-150300.8.25.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.4-150300.8.25.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.4-150300.8.25.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.5","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-1.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-1.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-98.120.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-98.120.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.5","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-150000.212.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-1.20.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-1.20.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP6","package":"apptainer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-150600.4.9.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"apptainer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-150600.4.9.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-98.126.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-1.11.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-98.126.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-1.11.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-slfo.1.1_1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.39.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.39.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-1.32.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.10.21-0ubuntu1~18.04.3+esm1"}]}],"versions":["1.13.1-0ubuntu6","17.03.2-0ubuntu1","17.03.2-0ubuntu3","17.03.2-0ubuntu5","17.12.1-0ubuntu1","18.06.1-0ubuntu1~18.04.1","18.06.1-0ubuntu1.2~18.04.1","18.09.2-0ubuntu1~18.04.1","18.09.5-0ubuntu1~18.04.2","18.09.7-0ubuntu1~18.04.1","18.09.7-0ubuntu1~18.04.3","18.09.7-0ubuntu1~18.04.4","19.03.6-0ubuntu1~18.04.1","19.03.6-0ubuntu1~18.04.2","19.03.6-0ubuntu1~18.04.3","20.10.2-0ubuntu1~18.04.2","20.10.2-0ubuntu1~18.04.3","20.10.7-0ubuntu1~18.04.1","20.10.7-0ubuntu1~18.04.2","20.10.7-0ubuntu5~18.04.2","20.10.7-0ubuntu5~18.04.3","20.10.12-0ubuntu2~18.04.1","20.10.21-0ubuntu1~18.04.2","20.10.21-0ubuntu1~18.04.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.10.21-0ubuntu1~20.04.6+esm1"}]}],"versions":["19.03.2-0ubuntu1","19.03.6-0ubuntu1","19.03.8-0ubuntu1","19.03.8-0ubuntu1.20.04","19.03.8-0ubuntu1.20.04.1","19.03.8-0ubuntu1.20.04.2","20.10.2-0ubuntu1~20.04.2","20.10.2-0ubuntu1~20.04.3","20.10.7-0ubuntu1~20.04.1","20.10.7-0ubuntu1~20.04.2","20.10.7-0ubuntu5~20.04.1","20.10.7-0ubuntu5~20.04.2","20.10.12-0ubuntu2~20.04.1","20.10.21-0ubuntu1~20.04.1","20.10.21-0ubuntu1~20.04.2","20.10.21-0ubuntu1~20.04.4","20.10.21-0ubuntu1~20.04.5","20.10.21-0ubuntu1~20.04.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"docker.io-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.3-0ubuntu1~20.04.1+esm1"}]}],"versions":["20.10.25-0ubuntu1~20.04.1","20.10.25-0ubuntu1~20.04.2","24.0.5-0ubuntu1~20.04.1","24.0.7-0ubuntu2~20.04.1","26.1.3-0ubuntu1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"docker.io-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1-0ubuntu3~22.04.2"}]}],"versions":["20.10.25-0ubuntu1~22.04.1","20.10.25-0ubuntu1~22.04.2","24.0.5-0ubuntu1~22.04.1","24.0.7-0ubuntu2~22.04.1","26.1.3-0ubuntu1~22.04.1","27.5.1-0ubuntu3~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.10.21-0ubuntu1~22.04.7+esm1"}]}],"versions":["20.10.7-0ubuntu5","20.10.7-0ubuntu7","20.10.12-0ubuntu1","20.10.12-0ubuntu2","20.10.12-0ubuntu3","20.10.12-0ubuntu3+gke1.24.1","20.10.12-0ubuntu4","20.10.21-0ubuntu1~22.04.2","20.10.21-0ubuntu1~22.04.3","20.10.21-0ubuntu1~22.04.5","20.10.21-0ubuntu1~22.04.6","20.10.21-0ubuntu1~22.04.7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"docker.io-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.3-0ubuntu1~22.04.1+esm1"}]}],"versions":["20.10.25-0ubuntu1~22.04.1","20.10.25-0ubuntu1~22.04.2","24.0.5-0ubuntu1~22.04.1","24.0.7-0ubuntu2~22.04.1","26.1.3-0ubuntu1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"docker.io-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1-0ubuntu3~24.04.2"}]}],"versions":["24.0.5-0ubuntu1","24.0.7-0ubuntu1","24.0.7-0ubuntu2","24.0.7-0ubuntu3","24.0.7-0ubuntu4","24.0.7-0ubuntu4.1","26.1.3-0ubuntu1~24.04.1","27.5.1-0ubuntu3~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.10.25+dfsg1-2ubuntu1+esm1"}]}],"versions":["20.10.24+dfsg1-1ubuntu2","20.10.25+dfsg1-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"docker.io-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.3-0ubuntu1~24.04.1+esm1"}]}],"versions":["24.0.5-0ubuntu1","24.0.7-0ubuntu1","24.0.7-0ubuntu2","24.0.7-0ubuntu3","24.0.7-0ubuntu4","24.0.7-0ubuntu4.1","26.1.3-0ubuntu1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.10.21-0ubuntu1~18.04.3+esm1"}]}],"versions":["1.13.1-0ubuntu6","17.03.2-0ubuntu1","17.03.2-0ubuntu3","17.03.2-0ubuntu5","17.12.1-0ubuntu1","18.06.1-0ubuntu1~18.04.1","18.06.1-0ubuntu1.2~18.04.1","18.09.2-0ubuntu1~18.04.1","18.09.5-0ubuntu1~18.04.2","18.09.7-0ubuntu1~18.04.1","18.09.7-0ubuntu1~18.04.3","18.09.7-0ubuntu1~18.04.4","19.03.6-0ubuntu1~18.04.1","19.03.6-0ubuntu1~18.04.2","19.03.6-0ubuntu1~18.04.3","20.10.2-0ubuntu1~18.04.2","20.10.2-0ubuntu1~18.04.3","20.10.7-0ubuntu1~18.04.1","20.10.7-0ubuntu1~18.04.2","20.10.7-0ubuntu5~18.04.2","20.10.7-0ubuntu5~18.04.3","20.10.12-0ubuntu2~18.04.1","20.10.21-0ubuntu1~18.04.2","20.10.21-0ubuntu1~18.04.3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"docker.io-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.3-0ubuntu1~24.04.1+esm1"}]}],"versions":["24.0.5-0ubuntu1","24.0.7-0ubuntu1","24.0.7-0ubuntu2","24.0.7-0ubuntu3","24.0.7-0ubuntu4","24.0.7-0ubuntu4.1","26.1.3-0ubuntu1~24.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.09.7-0ubuntu1~16.04.9+esm2"}]}],"versions":["1.6.2~dfsg1-1ubuntu4","1.10.2-0ubuntu3","1.10.2-0ubuntu4","1.10.3-0ubuntu1","1.10.3-0ubuntu4","1.10.3-0ubuntu5","1.10.3-0ubuntu6","1.11.2-0ubuntu5~16.04","1.12.1-0ubuntu13~16.04.1","1.12.3-0ubuntu4~16.04.2","1.12.6-0ubuntu1~16.04.1","1.13.1-0ubuntu1~16.04.2","17.03.2-0ubuntu2~16.04.1","18.06.1-0ubuntu1~16.04.2","18.06.1-0ubuntu1.2~16.04.1","18.09.2-0ubuntu1~16.04.1","18.09.5-0ubuntu1~16.04.2","18.09.7-0ubuntu1~16.04.1","18.09.7-0ubuntu1~16.04.4","18.09.7-0ubuntu1~16.04.5","18.09.7-0ubuntu1~16.04.6","18.09.7-0ubuntu1~16.04.7","18.09.7-0ubuntu1~16.04.9+esm1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.10.21-0ubuntu1~18.04.3+esm2"}]}],"versions":["1.13.1-0ubuntu6","17.03.2-0ubuntu1","17.03.2-0ubuntu3","17.03.2-0ubuntu5","17.12.1-0ubuntu1","18.06.1-0ubuntu1~18.04.1","18.06.1-0ubuntu1.2~18.04.1","18.09.2-0ubuntu1~18.04.1","18.09.5-0ubuntu1~18.04.2","18.09.7-0ubuntu1~18.04.1","18.09.7-0ubuntu1~18.04.3","18.09.7-0ubuntu1~18.04.4","19.03.6-0ubuntu1~18.04.1","19.03.6-0ubuntu1~18.04.2","19.03.6-0ubuntu1~18.04.3","20.10.2-0ubuntu1~18.04.2","20.10.2-0ubuntu1~18.04.3","20.10.7-0ubuntu1~18.04.1","20.10.7-0ubuntu1~18.04.2","20.10.7-0ubuntu5~18.04.2","20.10.7-0ubuntu5~18.04.3","20.10.12-0ubuntu2~18.04.1","20.10.21-0ubuntu1~18.04.2","20.10.21-0ubuntu1~18.04.3","20.10.21-0ubuntu1~18.04.3+esm1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"docker.io-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.3-0ubuntu1~20.04.1+esm1"}]}],"versions":["20.10.25-0ubuntu1~20.04.1","20.10.25-0ubuntu1~20.04.2","24.0.5-0ubuntu1~20.04.1","24.0.7-0ubuntu2~20.04.1","26.1.3-0ubuntu1~20.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"docker.io-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.3-0ubuntu1~22.04.1+esm1"}]}],"versions":["20.10.25-0ubuntu1~22.04.1","20.10.25-0ubuntu1~22.04.2","24.0.5-0ubuntu1~22.04.1","24.0.7-0ubuntu2~22.04.1","26.1.3-0ubuntu1~22.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.10.21-0ubuntu1~20.04.6+esm1"}]}],"versions":["19.03.2-0ubuntu1","19.03.6-0ubuntu1","19.03.8-0ubuntu1","19.03.8-0ubuntu1.20.04","19.03.8-0ubuntu1.20.04.1","19.03.8-0ubuntu1.20.04.2","20.10.2-0ubuntu1~20.04.2","20.10.2-0ubuntu1~20.04.3","20.10.7-0ubuntu1~20.04.1","20.10.7-0ubuntu1~20.04.2","20.10.7-0ubuntu5~20.04.1","20.10.7-0ubuntu5~20.04.2","20.10.12-0ubuntu2~20.04.1","20.10.21-0ubuntu1~20.04.1","20.10.21-0ubuntu1~20.04.2","20.10.21-0ubuntu1~20.04.4","20.10.21-0ubuntu1~20.04.5","20.10.21-0ubuntu1~20.04.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.10.21-0ubuntu1~22.04.7+esm1"}]}],"versions":["20.10.7-0ubuntu5","20.10.7-0ubuntu7","20.10.12-0ubuntu1","20.10.12-0ubuntu2","20.10.12-0ubuntu3","20.10.12-0ubuntu3+gke1.24.1","20.10.12-0ubuntu4","20.10.21-0ubuntu1~22.04.2","20.10.21-0ubuntu1~22.04.3","20.10.21-0ubuntu1~22.04.5","20.10.21-0ubuntu1~22.04.6","20.10.21-0ubuntu1~22.04.7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.10.25+dfsg1-2ubuntu1+esm1"}]}],"versions":["20.10.24+dfsg1-1ubuntu2","20.10.25+dfsg1-2ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.1.5_ce-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"apptainer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-5.1"}]}],"bundled":6}],"products":[{"vendor":"docker","product":"moby"},{"vendor":"moby","product":"moby"}],"references":[{"url":"https://github.com/moby/moby/security/advisories/GHSA-v23v-6jw2-98fq","tags":["x_refsource_CONFIRM","x_transferred","advisory","web","report"]},{"url":"https://github.com/moby/moby/commit/411e817ddf710ff8e08fa193da80cb78af708191","tags":["x_refsource_MISC","x_transferred","fix","web"]},{"url":"https://github.com/moby/moby/commit/42f40b1d6dd7562342f832b9cd2adf9e668eeb76","tags":["x_refsource_MISC","x_transferred","fix","web"]},{"url":"https://github.com/moby/moby/commit/65cc597cea28cdc25bea3b8a86384b4251872919","tags":["x_refsource_MISC","x_transferred","fix","web"]},{"url":"https://github.com/moby/moby/commit/852759a7df454cbf88db4e954c919becd48faa9b","tags":["x_refsource_MISC","x_transferred","fix","web"]},{"url":"https://github.com/moby/moby/commit/a31260625655cff9ae226b51757915e275e304b0","tags":["x_refsource_MISC","x_transferred","fix","web"]},{"url":"https://github.com/moby/moby/commit/a79fabbfe84117696a19671f4aa88b82d0f64fc1","tags":["x_refsource_MISC","x_transferred","fix","web"]},{"url":"https://github.com/moby/moby/commit/ae160b4edddb72ef4bd71f66b975a1a1cc434f00","tags":["x_refsource_MISC","x_transferred","fix","web"]},{"url":"https://github.com/moby/moby/commit/ae2b3666c517c96cbc2adf1af5591a6b00d4ec0f","tags":["x_refsource_MISC","x_transferred","fix","web"]},{"url":"https://github.com/moby/moby/commit/cc13f952511154a2866bddbb7dddebfe9e83b801","tags":["x_refsource_MISC","x_transferred","fix","web"]},{"url":"https://github.com/moby/moby/commit/fc274cd2ff4cf3b48c91697fb327dd1fb95588fb","tags":["x_refsource_MISC","x_transferred","fix","web"]},{"url":"https://www.docker.com/blog/docker-security-advisory-docker-engine-authz-plugin","tags":["x_refsource_MISC","x_transferred","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20240802-0001/","tags":["advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/10/msg00009.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-41110","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-v23v-6jw2-98fq"},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-41110","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-41110","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41110.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-41110","tags":["advisory"]},{"url":"https://github.com/moby/moby","tags":["package"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1959","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2074","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/-2024-4391/suse-ru-20244391-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1231348","tags":["report"]},{"url":"https://bugzilla.suse.com/1232999","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23653","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41110","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242709-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1214855","tags":["report"]},{"url":"https://bugzilla.suse.com/1221916","tags":["report"]},{"url":"https://bugzilla.suse.com/1228324","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243120-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1219267","tags":["report"]},{"url":"https://bugzilla.suse.com/1219268","tags":["report"]},{"url":"https://bugzilla.suse.com/1219438","tags":["report"]},{"url":"https://bugzilla.suse.com/1221243","tags":["report"]},{"url":"https://bugzilla.suse.com/1221677","tags":["report"]},{"url":"https://bugzilla.suse.com/1223409","tags":["report"]},{"url":"https://bugzilla.suse.com/1224117","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-24786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-28180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3727","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244204-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1230331","tags":["report"]},{"url":"https://bugzilla.suse.com/1230333","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244205-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244319-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1217070","tags":["report"]},{"url":"https://bugzilla.suse.com/1228553","tags":["report"]},{"url":"https://bugzilla.suse.com/1229806","tags":["report"]},{"url":"https://bugzilla.suse.com/1230294","tags":["report"]},{"url":"https://bugzilla.suse.com/1233819","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-47108","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244360-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250226-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1219437","tags":["report"]},{"url":"https://bugzilla.suse.com/1234089","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-29018","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503540-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1001161","tags":["report"]},{"url":"https://bugzilla.suse.com/1004490","tags":["report"]},{"url":"https://bugzilla.suse.com/1007249","tags":["report"]},{"url":"https://bugzilla.suse.com/1009961","tags":["report"]},{"url":"https://bugzilla.suse.com/1012568","tags":["report"]},{"url":"https://bugzilla.suse.com/1015661","tags":["report"]},{"url":"https://bugzilla.suse.com/1016307","tags":["report"]},{"url":"https://bugzilla.suse.com/1016992","tags":["report"]},{"url":"https://bugzilla.suse.com/1019251","tags":["report"]},{"url":"https://bugzilla.suse.com/1020806","tags":["report"]},{"url":"https://bugzilla.suse.com/1021227","tags":["report"]},{"url":"https://bugzilla.suse.com/1026827","tags":["report"]},{"url":"https://bugzilla.suse.com/1028638","tags":["report"]},{"url":"https://bugzilla.suse.com/1028639","tags":["report"]},{"url":"https://bugzilla.suse.com/1029320","tags":["report"]},{"url":"https://bugzilla.suse.com/1029630","tags":["report"]},{"url":"https://bugzilla.suse.com/1030702","tags":["report"]},{"url":"https://bugzilla.suse.com/1032287","tags":["report"]},{"url":"https://bugzilla.suse.com/1032644","tags":["report"]},{"url":"https://bugzilla.suse.com/1034053","tags":["report"]},{"url":"https://bugzilla.suse.com/1034063","tags":["report"]},{"url":"https://bugzilla.suse.com/1037436","tags":["report"]},{"url":"https://bugzilla.suse.com/1037607","tags":["report"]},{"url":"https://bugzilla.suse.com/1038476","tags":["report"]},{"url":"https://bugzilla.suse.com/1038493","tags":["report"]},{"url":"https://bugzilla.suse.com/1045628","tags":["report"]},{"url":"https://bugzilla.suse.com/1046024","tags":["report"]},{"url":"https://bugzilla.suse.com/1047218","tags":["report"]},{"url":"https://bugzilla.suse.com/1048046","tags":["report"]},{"url":"https://bugzilla.suse.com/1051429","tags":["report"]},{"url":"https://bugzilla.suse.com/1055676","tags":["report"]},{"url":"https://bugzilla.suse.com/1057743","tags":["report"]},{"url":"https://bugzilla.suse.com/1058173","tags":["report"]},{"url":"https://bugzilla.suse.com/1059011","tags":["report"]},{"url":"https://bugzilla.suse.com/1064781","tags":["report"]},{"url":"https://bugzilla.suse.com/1065609","tags":["report"]},{"url":"https://bugzilla.suse.com/1066210","tags":["report"]},{"url":"https://bugzilla.suse.com/1066801","tags":["report"]},{"url":"https://bugzilla.suse.com/1069468","tags":["report"]},{"url":"https://bugzilla.suse.com/1069758","tags":["report"]},{"url":"https://bugzilla.suse.com/1072798","tags":["report"]},{"url":"https://bugzilla.suse.com/1073877","tags":["report"]},{"url":"https://bugzilla.suse.com/1074971","tags":["report"]},{"url":"https://bugzilla.suse.com/1080978","tags":["report"]},{"url":"https://bugzilla.suse.com/1084533","tags":["report"]},{"url":"https://bugzilla.suse.com/1085117","tags":["report"]},{"url":"https://bugzilla.suse.com/1085380","tags":["report"]},{"url":"https://bugzilla.suse.com/1086185","tags":["report"]},{"url":"https://bugzilla.suse.com/1089732","tags":["report"]},{"url":"https://bugzilla.suse.com/1095817","tags":["report"]},{"url":"https://bugzilla.suse.com/1096726","tags":["report"]},{"url":"https://bugzilla.suse.com/1099277","tags":["report"]},{"url":"https://bugzilla.suse.com/1100331","tags":["report"]},{"url":"https://bugzilla.suse.com/1100727","tags":["report"]},{"url":"https://bugzilla.suse.com/1102522","tags":["report"]},{"url":"https://bugzilla.suse.com/1104821","tags":["report"]},{"url":"https://bugzilla.suse.com/1105000","tags":["report"]},{"url":"https://bugzilla.suse.com/1108038","tags":["report"]},{"url":"https://bugzilla.suse.com/1112980","tags":["report"]},{"url":"https://bugzilla.suse.com/1113313","tags":["report"]},{"url":"https://bugzilla.suse.com/1114832","tags":["report"]},{"url":"https://bugzilla.suse.com/1115464","tags":["report"]},{"url":"https://bugzilla.suse.com/1118897","tags":["report"]},{"url":"https://bugzilla.suse.com/1118898","tags":["report"]},{"url":"https://bugzilla.suse.com/1118899","tags":["report"]},{"url":"https://bugzilla.suse.com/1118990","tags":["report"]},{"url":"https://bugzilla.suse.com/1119634","tags":["report"]},{"url":"https://bugzilla.suse.com/1121412","tags":["report"]},{"url":"https://bugzilla.suse.com/1121768","tags":["report"]},{"url":"https://bugzilla.suse.com/1122469","tags":["report"]},{"url":"https://bugzilla.suse.com/1124308","tags":["report"]},{"url":"https://bugzilla.suse.com/1128376","tags":["report"]},{"url":"https://bugzilla.suse.com/1128746","tags":["report"]},{"url":"https://bugzilla.suse.com/1134068","tags":["report"]},{"url":"https://bugzilla.suse.com/1138920","tags":["report"]},{"url":"https://bugzilla.suse.com/1139649","tags":["report"]},{"url":"https://bugzilla.suse.com/1142160","tags":["report"]},{"url":"https://bugzilla.suse.com/1142413","tags":["report"]},{"url":"https://bugzilla.suse.com/1143349","tags":["report"]},{"url":"https://bugzilla.suse.com/1150397","tags":["report"]},{"url":"https://bugzilla.suse.com/1153367","tags":["report"]},{"url":"https://bugzilla.suse.com/1157330","tags":["report"]},{"url":"https://bugzilla.suse.com/1158590","tags":["report"]},{"url":"https://bugzilla.suse.com/1170415","tags":["report"]},{"url":"https://bugzilla.suse.com/1170446","tags":["report"]},{"url":"https://bugzilla.suse.com/1172377","tags":["report"]},{"url":"https://bugzilla.suse.com/1174075","tags":["report"]},{"url":"https://bugzilla.suse.com/1175081","tags":["report"]},{"url":"https://bugzilla.suse.com/1176708","tags":["report"]},{"url":"https://bugzilla.suse.com/1178760","tags":["report"]},{"url":"https://bugzilla.suse.com/1178801","tags":["report"]},{"url":"https://bugzilla.suse.com/1180243","tags":["report"]},{"url":"https://bugzilla.suse.com/1180401","tags":["report"]},{"url":"https://bugzilla.suse.com/1181594","tags":["report"]},{"url":"https://bugzilla.suse.com/1181641","tags":["report"]},{"url":"https://bugzilla.suse.com/1181677","tags":["report"]},{"url":"https://bugzilla.suse.com/1181730","tags":["report"]},{"url":"https://bugzilla.suse.com/1181732","tags":["report"]},{"url":"https://bugzilla.suse.com/1182168","tags":["report"]},{"url":"https://bugzilla.suse.com/1182476","tags":["report"]},{"url":"https://bugzilla.suse.com/1182947","tags":["report"]},{"url":"https://bugzilla.suse.com/1183855","tags":["report"]},{"url":"https://bugzilla.suse.com/1184768","tags":["report"]},{"url":"https://bugzilla.suse.com/1188447","tags":["report"]},{"url":"https://bugzilla.suse.com/1190670","tags":["report"]},{"url":"https://bugzilla.suse.com/1191015","tags":["report"]},{"url":"https://bugzilla.suse.com/1191121","tags":["report"]},{"url":"https://bugzilla.suse.com/1191334","tags":["report"]},{"url":"https://bugzilla.suse.com/1191355","tags":["report"]},{"url":"https://bugzilla.suse.com/1191434","tags":["report"]},{"url":"https://bugzilla.suse.com/1192814","tags":["report"]},{"url":"https://bugzilla.suse.com/1193273","tags":["report"]},{"url":"https://bugzilla.suse.com/1193930","tags":["report"]},{"url":"https://bugzilla.suse.com/1197284","tags":["report"]},{"url":"https://bugzilla.suse.com/1197517","tags":["report"]},{"url":"https://bugzilla.suse.com/1200022","tags":["report"]},{"url":"https://bugzilla.suse.com/1200145","tags":["report"]},{"url":"https://bugzilla.suse.com/1205375","tags":["report"]},{"url":"https://bugzilla.suse.com/1206065","tags":["report"]},{"url":"https://bugzilla.suse.com/1208074","tags":["report"]},{"url":"https://bugzilla.suse.com/1210141","tags":["report"]},{"url":"https://bugzilla.suse.com/1210797","tags":["report"]},{"url":"https://bugzilla.suse.com/1211578","tags":["report"]},{"url":"https://bugzilla.suse.com/1212368","tags":["report"]},{"url":"https://bugzilla.suse.com/1213120","tags":["report"]},{"url":"https://bugzilla.suse.com/1213229","tags":["report"]},{"url":"https://bugzilla.suse.com/1213500","tags":["report"]},{"url":"https://bugzilla.suse.com/1214107","tags":["report"]},{"url":"https://bugzilla.suse.com/1214108","tags":["report"]},{"url":"https://bugzilla.suse.com/1214109","tags":["report"]},{"url":"https://bugzilla.suse.com/1215323","tags":["report"]},{"url":"https://bugzilla.suse.com/1217513","tags":["report"]},{"url":"https://bugzilla.suse.com/1240150","tags":["report"]},{"url":"https://bugzilla.suse.com/1247362","tags":["report"]},{"url":"https://bugzilla.suse.com/1250508","tags":["report"]},{"url":"https://bugzilla.suse.com/1250596","tags":["report"]},{"url":"https://bugzilla.suse.com/885209","tags":["report"]},{"url":"https://bugzilla.suse.com/907012","tags":["report"]},{"url":"https://bugzilla.suse.com/907014","tags":["report"]},{"url":"https://bugzilla.suse.com/908033","tags":["report"]},{"url":"https://bugzilla.suse.com/909709","tags":["report"]},{"url":"https://bugzilla.suse.com/909710","tags":["report"]},{"url":"https://bugzilla.suse.com/909712","tags":["report"]},{"url":"https://bugzilla.suse.com/913211","tags":["report"]},{"url":"https://bugzilla.suse.com/913213","tags":["report"]},{"url":"https://bugzilla.suse.com/920645","tags":["report"]},{"url":"https://bugzilla.suse.com/930235","tags":["report"]},{"url":"https://bugzilla.suse.com/931301","tags":["report"]},{"url":"https://bugzilla.suse.com/935570","tags":["report"]},{"url":"https://bugzilla.suse.com/938156","tags":["report"]},{"url":"https://bugzilla.suse.com/942369","tags":["report"]},{"url":"https://bugzilla.suse.com/942370","tags":["report"]},{"url":"https://bugzilla.suse.com/946653","tags":["report"]},{"url":"https://bugzilla.suse.com/949660","tags":["report"]},{"url":"https://bugzilla.suse.com/950931","tags":["report"]},{"url":"https://bugzilla.suse.com/953182","tags":["report"]},{"url":"https://bugzilla.suse.com/954737","tags":["report"]},{"url":"https://bugzilla.suse.com/954797","tags":["report"]},{"url":"https://bugzilla.suse.com/954812","tags":["report"]},{"url":"https://bugzilla.suse.com/956434","tags":["report"]},{"url":"https://bugzilla.suse.com/958255","tags":["report"]},{"url":"https://bugzilla.suse.com/959405","tags":["report"]},{"url":"https://bugzilla.suse.com/963142","tags":["report"]},{"url":"https://bugzilla.suse.com/964468","tags":["report"]},{"url":"https://bugzilla.suse.com/964673","tags":["report"]},{"url":"https://bugzilla.suse.com/965600","tags":["report"]},{"url":"https://bugzilla.suse.com/965918","tags":["report"]},{"url":"https://bugzilla.suse.com/968933","tags":["report"]},{"url":"https://bugzilla.suse.com/968972","tags":["report"]},{"url":"https://bugzilla.suse.com/970637","tags":["report"]},{"url":"https://bugzilla.suse.com/974208","tags":["report"]},{"url":"https://bugzilla.suse.com/976777","tags":["report"]},{"url":"https://bugzilla.suse.com/977394","tags":["report"]},{"url":"https://bugzilla.suse.com/978260","tags":["report"]},{"url":"https://bugzilla.suse.com/980555","tags":["report"]},{"url":"https://bugzilla.suse.com/983015","tags":["report"]},{"url":"https://bugzilla.suse.com/984942","tags":["report"]},{"url":"https://bugzilla.suse.com/987198","tags":["report"]},{"url":"https://bugzilla.suse.com/988408","tags":["report"]},{"url":"https://bugzilla.suse.com/988707","tags":["report"]},{"url":"https://bugzilla.suse.com/989566","tags":["report"]},{"url":"https://bugzilla.suse.com/993847","tags":["report"]},{"url":"https://bugzilla.suse.com/995058","tags":["report"]},{"url":"https://bugzilla.suse.com/995102","tags":["report"]},{"url":"https://bugzilla.suse.com/995620","tags":["report"]},{"url":"https://bugzilla.suse.com/996015","tags":["report"]},{"url":"https://bugzilla.suse.com/999582","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22869","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503545-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250980-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1234595","tags":["report"]},{"url":"https://bugzilla.suse.com/1234794","tags":["report"]},{"url":"https://bugzilla.suse.com/1237679","tags":["report"]},{"url":"https://bugzilla.suse.com/1238611","tags":["report"]},{"url":"https://bugzilla.suse.com/1239341","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27144","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251062-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1237367","tags":["report"]},{"url":"https://bugzilla.suse.com/1239185","tags":["report"]},{"url":"https://bugzilla.suse.com/1239322","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251102-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520056-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1220339","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520110-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520259-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1237335","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260972-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1253904","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58181","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261118-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-41110","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-41110","tags":["report"]},{"url":"https://www.docker.com/blog/docker-security-advisory-docker-engine-authz-plugin/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7161-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7161-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7161-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-29018","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4IY5X4DAH24CGCGTMMLFUPNY6HNUSGO4/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BIPGSRATX6BG2ZXWE7566EGQCKXLC4RV/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1235211","tags":["report"]},{"url":"https://bugzilla.suse.com/1236528","tags":["report"]},{"url":"https://bugzilla.suse.com/1253924","tags":["report"]},{"url":"https://bugzilla.suse.com/1255462","tags":["report"]},{"url":"https://bugzilla.suse.com/1258047","tags":["report"]},{"url":"https://bugzilla.suse.com/1258048","tags":["report"]},{"url":"https://bugzilla.suse.com/1260311","tags":["report"]},{"url":"https://bugzilla.suse.com/1262956","tags":["report"]},{"url":"https://bugzilla.suse.com/1264177","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34986","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-41110","title":"Moby authz zero length regression","description":"Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low.\n\nUsing a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.\n\nA security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.\n\nDocker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable.\n\ndocker-ce v27.1.1 containes patches to fix the vulnerability. Patches have also been merged into the master, 19.03, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege.","status":"published","published":"2024-07-24T16:49:53.068Z","modified":"2024-10-13T21:03:34.392Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-187","CWE-444","CWE-863"],"updated_at":"2026-11-02T14:34:04.00829Z"}],"euvd":[{"id":"EUVD-2024-2415","description":"Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low.\n\nUsing a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.\n\nA security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.\n\nDocker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable.\n\ndocker-ce v27.1.1 containes patches to fix the vulnerability. Patches have also been merged into the master, 19.03, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege.","status":"published","published":"2024-07-24T16:49:53Z","modified":"2024-10-13T21:03:34Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:27:37.685207Z"}],"ghsa":[{"id":"GHSA-v23v-6jw2-98fq","title":"Authz zero length regression","description":"A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass [authorization plugins (AuthZ)](https://docs.docker.com/engine/extend/plugins_authorization/) under specific circumstances. The base likelihood of this being exploited is low. This advisory outlines the issue, identifies the affected versions, and provides remediation steps for impacted users.\n\n### Impact\n\nUsing a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an [authorization plugin](https://docs.docker.com/engine/extend/plugins_authorization/) without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.\n\n\nA security issue was discovered In 2018,  where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine [v18.09.1](https://docs.docker.com/engine/release-notes/18.09/#security-fixes-1) in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.\n\nDocker EE v19.03.x and all versions of Mirantis Container Runtime **are not vulnerable.**\n\n### Vulnerability details\n\n- **AuthZ bypass and privilege escalation:** An attacker could exploit a bypass using an API request with Content-Length set to 0, causing the Docker daemon to forward the request without the body to the AuthZ plugin, which might approve the request incorrectly.\n- **Initial fix:** The issue was fixed in Docker Engine [v18.09.1](https://docs.docker.com/engine/release-notes/18.09/#security-fixes-1) January 2019..\n- **Regression:** The fix was not included in Docker Engine v19.03 or newer versions. This was identified in April 2024 and patches were released for the affected versions on July 23, 2024. The issue was assigned [CVE-2024-41110](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41110).\n\n### Patches\n\n- docker-ce v27.1.1 containes patches to fix the vulnerability.\n- Patches have also been merged into the master, 19.0, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches.\n\n### Remediation steps\n\n- If you are running an affected version, update to the most recent patched version.\n- Mitigation if unable to update immediately:\n    - Avoid using AuthZ plugins.\n    - Restrict access to the Docker API to trusted parties, following the principle of least privilege.\n\n\n### References\n\n- https://github.com/moby/moby/commit/fc274cd2ff4cf3b48c91697fb327dd1fb95588fb\n- https://github.com/moby/moby/commit/a79fabbfe84117696a19671f4aa88b82d0f64fc1\n- https://www.docker.com/blog/docker-security-advisory-docker-engine-authz-plugin/","status":"published","published":"2024-07-30T10:18:57Z","modified":"2024-08-09T19:07:48Z","cvss":[{"version":"4.0","score":9.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","level":"critical"},{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-187"],"updated_at":"2026-11-02T14:37:59.336921Z"}],"nvd":[{"id":"CVE-2024-41110","description":"Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low.\n\nUsing a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.\n\nA security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.\n\nDocker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable.\n\ndocker-ce v27.1.1 containes patches to fix the vulnerability. Patches have also been merged into the master, 19.03, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege.","status":"published","published":"2024-07-24T17:15:11.053Z","modified":"2026-06-17T07:47:17.503Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-187","CWE-444","CWE-863"],"updated_at":"2026-11-02T14:10:14.437386Z"}],"osv":[{"id":"ALPINE-CVE-2024-41110","description":"Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low.\n\nUsing a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.\n\nA security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.\n\nDocker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable.\n\ndocker-ce v27.1.1 containes patches to fix the vulnerability. Patches have also been merged into the master, 19.03, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege.","status":"published","published":"2024-07-24T17:15:11.053Z","modified":"2026-11-03T06:32:49.736688046Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:16:46.202932Z"},{"id":"BELL-CVE-2024-41110","status":"published","published":"2024-07-26T05:57:38.482892Z","modified":"2026-01-26T09:35:04.17328Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:20.200735Z"},{"id":"CVE-2024-41110","title":"Moby authz zero length regression","description":"Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low.\n\nUsing a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.\n\nA security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.\n\nDocker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable.\n\ndocker-ce v27.1.1 containes patches to fix the vulnerability. Patches have also been merged into the master, 19.03, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege.","status":"published","published":"2024-07-24T16:49:53.068Z","modified":"2026-11-11T10:47:02.414273705Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-187","CWE-444","CWE-863"],"updated_at":"2026-11-11T03:22:28.447808Z"},{"id":"DEBIAN-CVE-2024-41110","description":"Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low.  Using a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.  A security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.  Docker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable.  docker-ce v27.1.1 containes patches to fix the vulnerability. Patches have also been merged into the master, 19.03, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege.","status":"published","published":"2024-07-24T17:15:11.053Z","modified":"2026-11-02T12:02:45.8787276Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:43.156294Z"},{"id":"GHSA-v23v-6jw2-98fq","title":"Authz zero length regression","description":"A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass [authorization plugins (AuthZ)](https://docs.docker.com/engine/extend/plugins_authorization/) under specific circumstances. The base likelihood of this being exploited is low. This advisory outlines the issue, identifies the affected versions, and provides remediation steps for impacted users.\n\n### Impact\n\nUsing a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an [authorization plugin](https://docs.docker.com/engine/extend/plugins_authorization/) without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.\n\n\nA security issue was discovered In 2018,  where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine [v18.09.1](https://docs.docker.com/engine/release-notes/18.09/#security-fixes-1) in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.\n\nDocker EE v19.03.x and all versions of Mirantis Container Runtime **are not vulnerable.**\n\n### Vulnerability details\n\n- **AuthZ bypass and privilege escalation:** An attacker could exploit a bypass using an API request with Content-Length set to 0, causing the Docker daemon to forward the request without the body to the AuthZ plugin, which might approve the request incorrectly.\n- **Initial fix:** The issue was fixed in Docker Engine [v18.09.1](https://docs.docker.com/engine/release-notes/18.09/#security-fixes-1) January 2019..\n- **Regression:** The fix was not included in Docker Engine v19.03 or newer versions. This was identified in April 2024 and patches were released for the affected versions on July 23, 2024. The issue was assigned [CVE-2024-41110](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41110).\n\n### Patches\n\n- docker-ce v27.1.1 containes patches to fix the vulnerability.\n- Patches have also been merged into the master, 19.0, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches.\n\n### Remediation steps\n\n- If you are running an affected version, update to the most recent patched version.\n- Mitigation if unable to update immediately:\n    - Avoid using AuthZ plugins.\n    - Restrict access to the Docker API to trusted parties, following the principle of least privilege.\n\n\n### References\n\n- https://github.com/moby/moby/commit/fc274cd2ff4cf3b48c91697fb327dd1fb95588fb\n- https://github.com/moby/moby/commit/a79fabbfe84117696a19671f4aa88b82d0f64fc1\n- https://www.docker.com/blog/docker-security-advisory-docker-engine-authz-plugin/","status":"published","published":"2024-07-30T10:18:57Z","modified":"2026-09-10T03:50:16.900418046Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"},{"version":"4.0","score":9.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","level":"critical"}],"cwes":["CWE-187"],"updated_at":"2026-11-02T15:46:56.639206Z"},{"id":"OESA-2024-1959","title":"docker security update","description":"Docker is an open source project to build, ship and run any application as a lightweight container.\n\nSecurity Fix(es):\n\nMoby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low.\n\nUsing a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.\n\nA security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.\n\nDocker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable.\n\ndocker-ce v27.1.1 containes patches to fix the vulnerability. Patches have also been merged into the master, 19.03, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege.(CVE-2024-41110)","status":"published","published":"2024-08-09T11:07:25Z","modified":"2026-08-18T01:18:32.824524343Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"OESA-2024-2074","title":"moby security update","description":"Docker is a product for you to build, ship and run any application as a lightweight container.\r\n\r\nSecurity Fix(es):\r\n\r\nMoby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low.\r\n\r\nUsing a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.\r\n\r\nA security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.\r\n\r\nDocker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable.\r\n\r\ndocker-ce v27.1.1 containes patches to fix the vulnerability. Patches have also been merged into the master, 19.03, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege.(CVE-2024-41110)","status":"published","published":"2024-08-30T11:07:32Z","modified":"2026-08-18T01:18:35.787823158Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"UBUNTU-CVE-2024-41110","description":"Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low. Using a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it. A security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted. Docker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable. docker-ce v27.1.1 containes patches to fix the vulnerability. Patches have also been merged into the master, 19.03, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege.","status":"published","published":"2024-07-24T17:15:00Z","modified":"2026-04-07T11:38:50.426063Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:54:58.679387Z"},{"id":"AZL-47017","title":"CVE-2024-41110 affecting package moby-engine for versions less than 25.0.3-5","description":"Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low.\n\nUsing a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.\n\nA security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.\n\nDocker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable.\n\ndocker-ce v27.1.1 containes patches to fix the vulnerability. Patches have also been merged into the master, 19.03, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege.","status":"published","published":"2024-07-24T17:15:11Z","modified":"2026-10-31T15:02:25Z","updated_at":"2026-11-02T15:28:05.694722Z"},{"id":"AZL-47042","title":"CVE-2024-41110 affecting package moby-engine for versions less than 24.0.9-7","description":"Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low.\n\nUsing a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.\n\nA security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.\n\nDocker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable.\n\ndocker-ce v27.1.1 containes patches to fix the vulnerability. Patches have also been merged into the master, 19.03, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege.","status":"published","published":"2024-07-24T17:15:11Z","modified":"2026-04-21T04:32:48.020916Z","updated_at":"2026-11-02T15:28:05.694722Z"},{"id":"DLA-3918-1","title":"docker.io - security update","status":"published","published":"2024-10-13T00:00:00Z","modified":"2026-03-09T01:21:01.368787Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"GO-2024-3005","title":"Moby authz zero length regression in github.com/moby/moby","description":"Moby authz zero length regression in github.com/moby/moby","status":"published","published":"2024-07-29T18:08:44Z","modified":"2026-02-04T02:35:10.162215Z","updated_at":"2026-11-02T15:47:01.453823Z"},{"id":"openSUSE-SU-2024:14229-1","title":"docker-26.1.5_ce-1.1 on GA media","description":"These are all security issues fixed in the docker-26.1.5_ce-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-08-01T00:00:00Z","modified":"2026-02-04T03:38:30.091686Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2024:14235-1","title":"nova-3.10.0-1.1 on GA media","description":"These are all security issues fixed in the nova-3.10.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-08-01T00:00:00Z","modified":"2026-02-04T03:56:47.810322Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2024:14446-1","title":"docker-stable-24.0.9_ce-1.1 on GA media","description":"These are all security issues fixed in the docker-stable-24.0.9_ce-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-11-01T00:00:00Z","modified":"2026-02-04T03:06:45.18339Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:14909-1","title":"apptainer-1.3.6-5.1 on GA media","description":"These are all security issues fixed in the apptainer-1.3.6-5.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-19T00:00:00Z","modified":"2026-02-04T02:18:32.951912Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2026:20730-1","title":"Security update for apptainer","description":"This update for apptainer fixes the following issues:\n\nChanges in apptainer:\n\n- Fix CVE-2026-34986 (bsc#1262956)\n      * github.com/go-jose/go-jose/v4@v4.1.4\n      CVE-2026-33186 GO-2026-4762 (bsc#1260311)\n      * google.golang.org/grpc@v1.79.3\n      CVE-2026-24137 GO-2026-4358 (bsc#1264177)\n      * github.com/sigstore/sigstore@v1.10.4\n        Fix fallout:\n\tgithub.com/moby/go-archive@v0.1.0\n\tgithub.com/containers/image/v5=github.com/containers/image/v5@v5.36.0\n\n- Fix HTML parser misimplementation of a part of the HTML\n  specification for table related tags (CVE-2025-58190,\n  GO-2026-4441, bsc#1258048).\n- Fix issue where the HTML parser takes a very long time or\n  even never returns (CVE-2025-47911, GO-2026-4440, bsc#1258047).\n\n- Update ot 1.4.5\n  * Fix for moderate severity GO-2025-4176 / CVE-2025-65105 /\n    GHSA-j3rw-fx6g-q46j (bsc#1255462):\n    Ineffective application of selinux / apparmor --security option.\n    Updates of a few dependent go libraries for related security fixes.\n  * Other fix\n    Run FUSE processes in a separate process group. This detaches them\n    from the main process so they don't receive signals such as interrupts\n    sent to a terminal there. This was not a problem with interactive\n    shells because they start their own group, but was a problem with\n    some programs with interactive Read/Eval/Print/Loops such as python.\n    An interrupt there would kill the FUSE processes.\n- From 1.4.4\n  * By applying patches to the bundled fuse2fs, allow again the possibility\n    of using a non-writable ext3 image file as an overlay. Fixes regression\n    introduced in 1.4.3.\n  * If an overlay or bound data image is asked to be mounted writable but\n    the user has no write access to the image, show a warning message\n    instead of silently switching to readonly.\n  * Avoid a fatal error when starting fakeroot from suid mode while\n    in an NFS directory.\n  * Fix 32-bit builds which were accidentally broken by a library\n    upgrade that was done for a minor security issue.\n- Fix CVEs:\n  * GO-2025-4135 - CVE-2025-47914\n    Malformed constraint may cause denial of service in\n    golang.org/x/crypto/ssh/agent.\n  * GO-2025-4134 - CVE-2025-58181 - bsc#1253924\n    Unbounded memory consumption in golang.org/x/crypto/ssh.\n  * GO-2025-4116 - CVE-2025-47913\n    Potential denial of service in golang.org/x/crypto/ssh/agent.\n  * GO-2025-3595 - CVE-2025-22872\n   Incorrect Neutralization of Input During Web Page Generation\n   in x/net.\n  * GO-2025-3503 - CVE-2025-22870\n    HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net.\n  * GO-2025-3487 - CVE-2025-22869\n    Potential denial of service in golang.org/x/crypto.\n  * GO-2025-3485 - CVE-2025-27144\n    DoS in go-jose Parsing in github.com/go-jose/go-jose.\n  * GO-2025-3754 - CVE-2025-8556\n    CIRCL-Fourq: Missing and wrong validation can lead to\n    incorrect results in github.com/cloudflare/circl.\n\n- No need for binutils-gold for aarch64\n\n- Update to 1.4.3\n  * Corrected the mconfig -s option for statically building apptainer\n    and starter binaries.\n  * Resolved an issue where the Makefile generated by mconfig -b\n    failed when the build directory was not a subdirectory of the\n    Apptainer source code.\n  * Fixed %files in definition files to correctly copy symlinks\n    pointing above the destination directory but within the\n    destination stage root filesystem.\n  * Addressed a typo in nvliblist.conf ( libnvoptix.so.1 was\n    corrected to libnvoptix.so).\n  * Prevented timeouts during cleanup after building\n    gocryptfs-encrypted SIF files.\n  * Fixed a bug that prevented build with --passphrase or --pem-path\n    (without --encrypt) from implying fakeroot.\n  * Resolved a hang when copying files between build stages while\n    using suid mode without user namespaces.\n  * Fixed issues with running and building containers of different\n    architectures than the host via binfmt_misc when using rootless\n    fakeroot.\n  * Corrected \"target: no such file or directory\" errors when\n    extracting layers from certain OCI images that manipulate hard\n    links across layers.\n  * Fixed a crash when executing a privilege-encrypted container as\n    root.\n  * Improved documentation for the remote list command.\n  * Removed the fakerootcallback functionality.\n  * Updated the default pacman confURL for Bootstrap: arch container\n    builds.\n  * Updated bundled fuse programs to their latest releases.\n  * Changed the default message level from silent to normal in\n    nested apptainer executions of a build's %post section, and\n    suppressed an unnecessary warning.\n  * Invalid environment variables are now ignored when pulling\n    oci/docker containers.\n- Add definition file for SLE 16 (SLE-16.def).\n- Remove definition files for SLE15 SP5 (SLE-15SP5.def) and\n  SP6 (SLE-15SP6.def).\n\n- Update to 1.4.2\n  * Restore looking for registry mirrors in /etc/containers/registry.conf\n    and related files. This had been inadvertently dropped beginning in 1.4.0.\n  * Fix use of the image cache when the home directory contains @ characters.\n    Previously it would assume that it was the start of a digest in the oci-dir.\n  * Fix signature verification failures on unsigned images.\n  * Add additional .deb packages to the release assets that include the label\n    trixie+ to indicate that they are for installing on Debian 13 or later.\n    Those packages are necessary to work with the new libfuse3 library in\n    Debian13. They also support libsubid, unlike the default packages because\n    they are built on Debian 11 which doesn't have that library.\n  * Add automatic triggering of Ubuntu PPA builds whenever there's a new\n    apptainer release.\n\n- Update to 1.4.1\n  * Fix the use of libsubid which had been broken by the revision\n    applied in 1.4.0-rc.2.\n  * Fix a bug introduced in 1.4.0 that caused arm64 to be\n    mis-converted to arm64v8 and resulted in a failure when pulling\n    OCI containers.\n  * Fix user database lookup in master process preventing instance\n    from starting correctly on systems using winbind.\n  * Check for existence of `/run/systemd/system` when verifying\n    cgroups can be used via systemd manager.\n  * Add a clear error message if someone tries to use privileged\n    network options while not using setuid mode.\n  * Allow multi-arch oci-archive files that have a nested index\n    with the manifest. This is the default format (both for Docker\n    and OCI) when using `nerdctl save`.\n  * Test if docker-archive is actually an oci-archive (since Docker\n    version 25), and if it is oci then use the OCI parser to avoid\n    bugs in the Docker parser. Save the daemon-daemon references\n    to a temporary docker-archive, to benefit from the same\n    improvements also for those references. Parse as oci-archive.\n\n- New Features \u0026 Functionality in from ineherited 1.4.0\n  * Add new build option `--mksquashfs-args` to pass additional\n    arguments to the `mksquashfs` command when building SIF files.\n    If a compression method other than gzip is selected, the SIF\n    file might not work with older installations of Apptainer\n    or Singularity, so an INFO message about that is printed. On\n    the other hand, an INFO message that was printed (twice) when\n    running an image with non-gzip compression has been removed.\n  * If the `mksquashfs` version is new enough (version 4.6 in\n    Leaep 16.0), then show a percentage progress bar (with ETA)\n    during SIF creation in the default log level. If the `mksquashfs`\n    version is older, then in verbose or debug log level show the\n    output of mksquashfs with its own progress bar.\n  * Statistics are now normally available for instances that are\n    started by non-root users on cgroups v2 systems. The instance\n    will be started in the current cgroup. Information about\n    configuration issues that prevent collection of statistics are\n    displayed as INFO messages by default.\n  * Add a `--sandbox` option to `apptainer pull`.\n  * Add configuration file binding to the `--nv` option. Files\n    that are recognized in the NVIDIA Container Toolkit, including\n    files for EGL ICD, were added to the default `nvliblist.conf`.\n  * It is now possible to use multiple environment variable files\n    using the `--env-file` flag. Files can be specified as a\n    comma-separated list or by using the flag multiple times.\n    Variables defined in later files take precedence over earlier\n    files.\n  * The registry login and registry logout commands now support a\n    `--authfile \u003cpath\u003e` option, which causes OCI credentials to be\n    written to / removed from a custom file located at `\u003cpath\u003e`\n    instead of the default location (`$HOME/.apptainer/docker-config.json`).\n    The commands `pull`, `push`, `run`, `exec`, `shell` and\n    instance start can now also be passed a `--authfile \u003cpath\u003e`\n    option, to read OCI registry credentials from this custom file.\n  * A new `--netns-path` option takes a path to a network\n    namespace to join when starting a container. The root user\n    may join any network namespace. An unprivileged user can only\n    join a network namespace specified in the new `allow netns\n    paths` directive in `apptainer.conf`, if they are also listed\n    in `allow net users` / `allow net groups` and apptainer is\n    installed with setuid privileges. Not supported with\n    `--fakeroot`.\n  * `apptainer.conf` now accepts setting the following options:\n        `allow ipc ns` -- Default value is `yes`; when set to `no`,\n\tit will disable the use of the `--ipc` flag.\n        `allow uts ns` -- Default value is `yes`; when set to `no`,\n\tit will invalidate the use of the `--uts` and `--hostname`\n\tflags.\n        `allow user ns` -- Default value is `yes`; when set to\n\t`no`, it will disable creation of user namespaces. Note\n\tthat this will prevent execution of containers with the\n\t`--userns` or `--fakeroot` flags and with unprivileged\n\tinstallations of Apptainer.\n- Changed defaults / behaviours\n  * Label the starter process seen in `ps` with the image filename,\n    for example: Apptainer runtime parent: `example.sif`.\n  * Remove runtime and compute libraries from `rocmliblist.conf`.\n    They should instead be provided by the container image.\n  * Allow overriding the build architecture with `--arch` and\n    `--arch-variant`, to build images for another architecture\n    than the current host arch. This requires that the host has\n    been set up to support multiple architectures (`binfmt_misc`).\n  * Complete the previously partial support for the riscv64\n    architecture.\n  * Show a warning message if changing directory to the cwd\n    fails, instead of silently switching to the home directory\n    or `/`.\n  * Write starter messages to stderr when an instance fails to\n    start. Previously they were incorrectly written to stdout.\n  * Skip attempting to bind inaccessible mount points when\n    handling the `mount hostfs = yes` configuration option.\n  * Fix storage of credentials for `docker.io` to behave the same\n    as for `index.docker.io`.\n  * Change message log level from warning to debug when environment\n    variables set inside a container or by `APPTAINERENV` have a\n    different value than the environment variable on the host.\n  * Change the default message level from silent to the normal\n    level in the nested apptainer that executes a build's `%post`\n    section, and suppress an unnecessary warning message.\n  * Ignore invalid environment variables when pulling oci/docker\n    containers.\n  * Remove the little-known `fakerootcallback` functionality.\n  * Update the default pacman confURL for `Bootstrap: arch`\n    container builds.\n  * Update the bundled fuse programs to their latest releases.\n- Bug fixes\n  * Fix the `mconfig -s` option to build the apptainer and starter\n    binaries statically as documented.\n  * `%files from` in a definition file will now correctly copy\n    symlinks that `%point` to a target above the destination\n    directory but inside the `%destination` stage root filesystem.\n  * Fixed typo in `nvliblist.conf` (`libnvoptix.so.1` -\u003e `libnvoptix.so`).\n  * Avoid timeouts when cleaning up from building gocryptfs-encrypted\n    SIF files.\n  * Fix bug that prevented build with `--passphrase` or\n    `--pem-path` but without `--encrypt` from implying fakeroot.\n  * Fix hang when copying files between build stages while using\n    suid mode without user namespaces.\n  * Fix running and building containers of different architectures\n    than the host via binfmt_misc when using rootless fakeroot.\n  * Fix `target: no such file or directory` error when extracting\n    layers from certain OCI images that manipulate hard links\n    across layers.\n  * Fix the crash that happened when executing a privilege-encrypted\n    container as root.\n\n- Fix CVE-2024-45338, CVE-2025-22870, CVE-2024-45337, CVE-2025-22869, CVE-2025-27144 CVE-2024-41110\n  * GO-2024-3333 CVE-2024-45338 (bsc#1234794)\n    GO-2025-3503 CVE-2025-22870 (bsc#1238611):\n    Update to: golang.org/x/net@v0.36.0\n  * GO-2024-3321 CVE-2024-45337 (bsc#1234595)\n    GO-2025-3487 CVE-2025-22869 (bsc#1239341):\n    Update to: golang.org/x/crypto@v0.35.0\n  * GO-2025-3485 CVE-2025-27144 (bsc#1237679):\n    Update to: github.com/go-jose/go-jose/v3@v3.0.4\n  * GO-2024-3005 CVE-2024-41110 (bsc#1228324):\n    Update to: github.com/docker/docker@v25.0.6+incompatible\n\n- Update golang.org/x/net to v0.23 to fix CVE-2023-45288 (bnc#1236528).\n\n- Update to version 1.3.6\n  * Avoid using kernel overlayfs when the lower layer is a sandbox\n    on an incompatible filesystem type such as GPFS or Lustre.\n    For those cases use fuse-overlayfs instead. This fixes a\n    regression introduced in 1.3.0. The regression didn't much\n    impact Lustre because kernel overlayfs refused to try to use\n    it and Apptainer proceeded to use fuse-overlayfs anyway, but\n    with GPFS the kernel overlayfs allowed mounting but returned\n    stale file handle errors.\n\n- Version 1.3.5\n  * Fix a regression introduced in 1.3.4 that overwrote existing\n    standard `/.singularity.d` files such as `runscript` in\n    container images even if they had been modified.\n  * Skip attempting to bind inaccessible mount points when\n    handling the `mount hostfs = yes` configuration option.\n  * Support parsing nested variables defined inside `%arguments`\n    section of definition files.\n  * Ignore invalid environment variables when pulling oci/docker\n    containers.\n\n- Version 1.3.4\n  * Fixed sif-embedded overlay partitions for containers that are\n    larger than 2 gigabytes.\n  * Fixed the failure when starting apptainer with\n    `instance --fakeroot`.\n  * `apptainer build -B ...` can now be used to mount custom\n    resolv.conf and hosts files from non-standard outside locations.\n    This can be used to run `apptainer build` in a nix-build sandbox\n    that has no `/etc/resolv.conf`.\n  * Fixed failing builds from local images that have symbolic links\n    for paths that are part of the base container environment (e.g.\n    /var/tmp -\u003e /tmp).\n  * Show info messages suggesting to use\n    `enable underlay = preferred` or the `--underlay` flag when\n    overlay is implied for bind mounts but the kernel is too old\n    to support fuse mounts in user namespaces and so tries to use\n    fusermount.\n  * When someone uses a `yum` bootstrap to build a container\n    without using subuid-based fakeroot or root, warn that it is\n    unlikely to work.\n  * Allow a writable `--overlay` to be used with `--nvccli` instead\n    of `--writable-tmpfs`.\n  * If an error \"no descriptor found for reference\" is seen while\n    getting an oci container, retry the operation up to five times.\n  * Make fakeroot Recommended for SUSE rpms instead of Required.\n  * Allow bind mounts onto existing files on r/o NFS filesystems.\n  * If an error is seen in the %post section when building a\n    container using fakeroot mode 3 (with the fakeroot command)\n    then show a message suggesting using `--ignore-fakeroot-command`\n    and referring to the documentation about how to install and use\n    it inside the container definition file.\n  * Show a more helpful error message when using fakeroot in suid\n    mode and there's an `/etc/subuid` mapping even though user\n    namespaces are not available (user namespaces are required for\n    `/etc/subuid` mapping).\n\n- Version 1.3.3\n  * Added libcudadebugger.so to nvliblist.conf to support cuda-gdb\n    in CUDA 12+.\n  * Ensure opened/kept file descriptors in stage 1 are not closed\n    during the Go garbage collection to avoid \"bad file descriptor\"\n    errors at startup.\n  * Fixed a segmentation violation issue when running Apptainer\n    checkpoint.\n  * Fixed an issue that Apptainer won't read default docker\n    credentials.\n\n- Version 1.3.2\n  * Fix for\n    [CVE-2024-3727](https://bugzilla.suse.com/show_bug.cgi?id=1224114)\n    in a dependent library which describes a flaw that can allow\n    attackers to trigger unexpected authenticated registry accesses\n    due to object digest values not being validated in all cases.\n  * Fixed the issue when nesting `apptainer instance start` inside\n    a container on cgroups-v2 capable host.\n  * Fixed the issue that oras download progress bar gets stuck\n    when downloading large images.\n\n- Version 1.3.1\n  * Make 'apptainer build' work with signed Docker containers.\n  * Fixed regression introduced in 1.3.0 that prevented closing\n    cryptsetup and the corresponding loop device after running\n    an encrypted sif container file in suid mode.\n  * Stopped binding over the default timezone in the container\n    with the host's timezone, which led to unexpected behavior if\n    the application changed timezones.\n  * Added progress bars for `oras://` push and pull.\n  * Hide `Instance stats will not be available` message under\n    `--sharens` mode.\n  * Fix problem where credentials locally stored with\n    `registry login` command were not usable in some execution\n    flows. Run `registry login` again with latest version to ensure\n    credentials are stored correctly.\n  * Make runscript timeout configurable.\n  * Return invalid bind path mount options during bind path\n    parsing.\n  * Make the INFO message more helpful when a running background\n    process at exit time causes a FUSE mount to not shut down\n    cleanly.\n  * Fixed the wrong mediaType in the oras push manifest.\n- Add Apptainer definition template for SLE15-SP7.\n\n- Make sure, build is reproducible by setting the GNU build ID to one\n  derived from the Go one. See https://pkg.go.dev/cmd/link.\n\n- Use go-jose version with fix for CVE-2024-28180 (bsc#1235211).\n","status":"published","published":"2026-05-14T16:09:31Z","modified":"2026-05-16T08:19:17.133144Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-RU-2024:4391-1","title":"Recommended update for docker-stable","description":"This update for docker-stable fixes the following issues:\n\n- Update docker-buildx to v0.19.2. See upstream changelog online at\n  \u003chttps://github.com/docker/buildx/releases/tag/v0.19.2\u003e.\n  Some notable changelogs from the last update:\n    * \u003chttps://github.com/docker/buildx/releases/tag/v0.19.0\u003e\n\t* \u003chttps://github.com/docker/buildx/releases/tag/v0.18.0\u003e\n\n- Add a new toggle file /etc/docker/suse-secrets-enable which allows users to\n  disable the SUSEConnect integration with Docker (which creates special mounts\n  in /run/secrets to allow container-suseconnect to authenticate containers\n  with registries on registered hosts). bsc#1231348 bsc#1232999\n  In order to disable these mounts, just do\n    echo 0 \u003e /etc/docker/suse-secrets-enable\n  and restart Docker. In order to re-enable them, just do\n    echo 1 \u003e /etc/docker/suse-secrets-enable\n  and restart Docker. Docker will output information on startup to tell you\n  whether the SUSE secrets feature is enabled or not.\n","status":"published","published":"2024-12-20T09:13:20Z","modified":"2026-02-04T04:20:51.359647Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2024:2709-1","title":"Security update for docker","description":"This update for docker fixes the following issues:\n\n- Update to Docker 25.0.6-ce. See upstream changelog online at\n  \u003chttps://docs.docker.com/engine/release-notes/25.0/#2506\u003e\n\n- CVE-2024-41110: A Authz zero length regression that could lead to authentication bypass was fixed (bsc#1228324)\n\n- Fix BuildKit's symlink resolution logic to correctly handle non-lexical\n  symlinks. (bsc#1221916)\n- Write volume options atomically so sudden system crashes won't result in\n  future Docker starts failing due to empty files. (bsc#1214855)\n","status":"published","published":"2024-08-02T08:26:40Z","modified":"2026-02-04T04:34:21.387225Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:3120-1","title":"Security update for buildah, docker","description":"This update for buildah, docker fixes the following issues:\n\nChanges in docker:\n- CVE-2024-23651: Fixed arbitrary files write due to race condition on mounts (bsc#1219267)\n- CVE-2024-23652: Fixed insufficient validation of parent directory on mount (bsc#1219268)\n- CVE-2024-23653: Fixed insufficient validation on entitlement on container creation via buildkit (bsc#1219438)\n- CVE-2024-41110: A Authz zero length regression that could lead to authentication bypass was fixed (bsc#1228324)\n\nOther fixes:\n\n- Update to Docker 25.0.6-ce. See upstream changelog online at\n  \u003chttps://docs.docker.com/engine/release-notes/25.0/#2506\u003e\n- Update to Docker 25.0.5-ce (bsc#1223409)\n\n- Fix BuildKit's symlink resolution logic to correctly handle non-lexical\n  symlinks. (bsc#1221916)\n- Write volume options atomically so sudden system crashes won't result in\n  future Docker starts failing due to empty files. (bsc#1214855)\n\nChanges in buildah:\n- Update to version 1.35.4:\n  * [release-1.35] Bump to Buildah v1.35.4\n  * [release-1.35] CVE-2024-3727 updates (bsc#1224117)\n  * integration test: handle new labels in 'bud and test --unsetlabel'\n  * [release-1.35] Bump go-jose CVE-2024-28180\n  * [release-1.35] Bump ocicrypt and go-jose CVE-2024-28180\n\n- Update to version 1.35.3:\n  * [release-1.35] Bump to Buildah v1.35.3\n  * [release-1.35] correctly configure /etc/hosts and resolv.conf\n  * [release-1.35] buildah: refactor resolv/hosts setup.\n  * [release-1.35] rename the hostFile var to reflect\n  * [release-1.35] Bump c/common to v0.58.1\n  * [release-1.35] Bump Buildah to v1.35.2\n  * [release-1.35] CVE-2024-24786 protobuf to 1.33\n  * [release-1.35] Bump to v1.35.2-dev\n\n- Update to version 1.35.1:\n  * [release-1.35] Bump to v1.35.1\n  * [release-1.35] CVE-2024-1753 container escape fix (bsc#1221677)\n\n- Buildah dropped cni support, require netavark instead (bsc#1221243)\n\n- Remove obsolete requires libcontainers-image \u0026 libcontainers-storage\n\n- Require passt for rootless networking (poo#156955)\n  Buildah moved to passt/pasta for rootless networking from slirp4netns\n  (https://github.com/containers/common/pull/1846)\n\n- Update to version 1.35.0:\n  * Bump v1.35.0\n  * Bump c/common v0.58.0, c/image v5.30.0, c/storage v1.53.0\n  * conformance tests: don't break on trailing zeroes in layer blobs\n  * Add a conformance test for copying to a mounted prior stage\n  * fix(deps): update module github.com/stretchr/testify to v1.9.0\n  * cgroups: reuse version check from c/common\n  * Update vendor of containers/(common,image)\n  * fix(deps): update github.com/containers/storage digest to eadc620\n  * fix(deps): update github.com/containers/luksy digest to ceb12d4\n  * fix(deps): update github.com/containers/image/v5 digest to cdc6802\n  * manifest add: complain if we get artifact flags without --artifact\n  * Use retry logic from containers/common\n  * Vendor in containers/(storage,image,common)\n  * Update module golang.org/x/crypto to v0.20.0\n  * Add comment re: Total Success task name\n  * tests: skip_if_no_unshare(): check for --setuid\n  * Properly handle build --pull=false\n  * [skip-ci] Update tim-actions/get-pr-commits action to v1.3.1\n  * Update module go.etcd.io/bbolt to v1.3.9\n  * Revert 'Reduce official image size'\n  * Update module github.com/opencontainers/image-spec to v1.1.0\n  * Reduce official image size\n  * Build with CNI support on FreeBSD\n  * build --all-platforms: skip some base 'image' platforms\n  * Bump main to v1.35.0-dev\n  * Vendor in latest containers/(storage,image,common)\n  * Split up error messages for missing --sbom related flags\n  * `buildah manifest`: add artifact-related options\n  * cmd/buildah/manifest.go: lock lists before adding/annotating/pushing\n  * cmd/buildah/manifest.go: don't make struct declarations aliases\n  * Use golang.org/x/exp/slices.Contains\n  * Disable loong64 again\n  * Fix a couple of typos in one-line comments\n  * egrep is obsolescent; use grep -E\n  * Try Cirrus with a newer VM version\n  * Set CONTAINERS_CONF in the chroot-mount-flags integration test\n  * Update to match dependency API update\n  * Update github.com/openshift/imagebuilder and containers/common\n  * docs: correct default authfile path\n  * fix(deps): update module github.com/containerd/containerd to v1.7.13\n  * tests: retrofit test for heredoc summary\n  * build, heredoc: show heredoc summary in build output\n  * manifest, push: add support for --retry and --retry-delay\n  * fix(deps): update github.com/openshift/imagebuilder digest to b767bc3\n  * imagebuildah: fix crash with empty RUN\n  * fix(deps): update github.com/containers/luksy digest to b62d551\n  * fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security]\n  * fix(deps): update module github.com/moby/buildkit to v0.12.5 [security]\n  * Make buildah match podman for handling of ulimits\n  * docs: move footnotes to where they're applicable\n  * Allow users to specify no-dereference\n  * Run codespell on code\n  * Fix FreeBSD version parsing\n  * Fix a build break on FreeBSD\n  * Remove a bad FROM line\n  * fix(deps): update module github.com/onsi/gomega to v1.31.1\n  * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6\n  * docs: use reversed logo for dark theme in README\n  * build,commit: add --sbom to scan and produce SBOMs when committing\n  * commit: force omitHistory if the parent has layers but no history\n  * docs: fix a couple of typos\n  * internal/mkcw.Archive(): handle extra image content\n  * stage_executor,heredoc: honor interpreter in heredoc\n  * stage_executor,layers: burst cache if heredoc content is changed\n  * fix(deps): update module golang.org/x/crypto to v0.18.0\n  * Replace map[K]bool with map[K]struct{} where it makes sense\n  * fix(deps): update module golang.org/x/sync to v0.6.0\n  * fix(deps): update module golang.org/x/term to v0.16.0\n  * Bump CI VMs\n  * Replace strings.SplitN with strings.Cut\n  * fix(deps): update github.com/containers/storage digest to ef81e9b\n  * fix(deps): update github.com/containers/image/v5 digest to 1b221d4\n  * fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.1\n  * Document use of containers-transports values in buildah\n  * fix(deps): update module golang.org/x/crypto to v0.17.0 [security]\n  * chore(deps): update dependency containers/automation_images to v20231208\n  * manifest: addCompression use default from containers.conf\n  * commit: add a --add-file flag\n  * mkcw: populate the rootfs using an overlay\n  * chore(deps): update dependency containers/automation_images to v20230517\n  * [skip-ci] Update actions/stale action to v9\n  * fix(deps): update module github.com/containernetworking/plugins to v1.4.0\n  * fix(deps): update github.com/containers/image/v5 digest to 7a40fee\n  * Bump to v1.34.1-dev\n  * Ignore errors if label.Relabel returns ENOSUP\n","status":"published","published":"2024-09-03T15:13:23Z","modified":"2026-02-04T02:59:49.722872Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:4204-1","title":"Security update for docker-stable","description":"This update for docker-stable fixes the following issues:\n\n- CVE-2024-41110: Fixed Authz zero length regression (bsc#1228324).\n\nBug fixes:\n\n- Allow users to disable SUSE secrets support by setting DOCKER_SUSE_SECRETS_ENABLE=0 in /etc/sysconfig/docker (bsc#1231348).\n- Import specfile changes for docker-buildx as well as the changes to help reduce specfile differences between docker-stable and docker (bsc#1230331, bsc#1230333).\n- Fix BuildKit's symlink resolution logic to correctly handle non-lexical symlinks (bsc#1221916).\n- Write volume options atomically so sudden system crashes won't result in future Docker starts failing due to empty files (bsc#1214855).\n","status":"published","published":"2024-12-05T14:57:37Z","modified":"2026-02-04T02:54:52.008863Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2024:4205-1","title":"Security update for docker-stable","description":"This update for docker-stable fixes the following issues:\n\n- Remove DOCKER_NETWORK_OPTS from docker.service. This was removed from\n  sysconfig a long time ago, and apparently this causes issues with systemd in\n  some cases.\n- Update --add-runtime to point to correct binary path.\n\n- Further merge docker and docker-stable specfiles to minimise the differences.\n  The main thing is that we now include both halves of the\n  Conflicts/Provides/Obsoletes dance in both specfiles.\n\n- Update to docker-buildx v0.17.1 to match standalone docker-buildx package we\n  are replacing. See upstream changelog online at\n  \u003chttps://github.com/docker/buildx/releases/tag/v0.17.1\u003e\n\n- Allow users to disable SUSE secrets support by setting\n  DOCKER_SUSE_SECRETS_ENABLE=0 in /etc/sysconfig/docker. bsc#1231348\n\n- Import specfile changes for docker-buildx as well as the changes to help\n  reduce specfile differences between docker-stable and docker. bsc#1230331\n  bsc#1230333\n\n- Backport patch for CVE-2024-41110. bsc#1228324\n\n- Initial docker-stable release, forked from Docker 24.0.6-ce release\n  (packaged on 2023-10-11).\n\n- Update to Docker 24.0.9-ce, which is the latest version of the 24.0.x branch.\n  It seems likely this will be the last upstream version of the 24.0.x branch\n  (it seems Mirantis is going to do LTS for 23.0.x, not 24.0.x).\n  \u003chttps://docs.docker.com/engine/release-notes/24.0/#2409\u003e\n- Fix BuildKit's symlink resolution logic to correctly handle non-lexical\n  symlinks. Backport of \u003chttps://github.com/moby/buildkit/pull/4896\u003e and\n  \u003chttps://github.com/moby/buildkit/pull/5060\u003e. bsc#1221916\n- Write volume options atomically so sudden system crashes won't result in\n  future Docker starts failing due to empty files. Backport of\n  \u003chttps://github.com/moby/moby/pull/48034\u003e. bsc#1214855\n","status":"published","published":"2024-12-05T14:58:02Z","modified":"2026-02-04T03:54:07.073582Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2024:4319-1","title":"Security update for docker","description":"This update for docker fixes the following issues:\n\n- Update docker-buildx to v0.19.2. See upstream changelog online at\n  \u003chttps://github.com/docker/buildx/releases/tag/v0.19.2\u003e.\n\n  Some notable changelogs from the last update:\n    * \u003chttps://github.com/docker/buildx/releases/tag/v0.19.0\u003e\n    * \u003chttps://github.com/docker/buildx/releases/tag/v0.18.0\u003e\n\n- Add a new toggle file /etc/docker/suse-secrets-enable which allows users to\n  disable the SUSEConnect integration with Docker (which creates special mounts\n  in /run/secrets to allow container-suseconnect to authenticate containers\n  with registries on registered hosts). bsc#1231348 bsc#1232999\n\n  In order to disable these mounts, just do\n\n    echo 0 \u003e /etc/docker/suse-secrets-enable\n\n  and restart Docker. In order to re-enable them, just do\n\n    echo 1 \u003e /etc/docker/suse-secrets-enable\n\n  and restart Docker. Docker will output information on startup to tell you\n  whether the SUSE secrets feature is enabled or not.\n\n- Disable docker-buildx builds for SLES. It turns out that build containers\n  with docker-buildx don't currently get the SUSE secrets mounts applied,\n  meaning that container-suseconnect doesn't work when building images.\n  bsc#1233819\n\n- Remove DOCKER_NETWORK_OPTS from docker.service. This was removed from\n  sysconfig a long time ago, and apparently this causes issues with systemd in\n  some cases.\n\n- Allow a parallel docker-stable RPM to exists in repositories.\n\n- Update to docker-buildx v0.17.1 to match standalone docker-buildx package we\n  are replacing. See upstream changelog online at\n  \u003chttps://github.com/docker/buildx/releases/tag/v0.17.1\u003e\n\n- Allow users to disable SUSE secrets support by setting\n  DOCKER_SUSE_SECRETS_ENABLE=0 in /etc/sysconfig/docker. (bsc#1231348)\n\n- Mark docker-buildx as required since classic 'docker build' has been\n  deprecated since Docker 23.0. (bsc#1230331)\n\n- Import docker-buildx v0.16.2 as a subpackage. Previously this was a separate\n  package, but with docker-stable it will be necessary to maintain the packages\n  together and it makes more sense to have them live in the same OBS package.\n  (bsc#1230333)\n\n- Update to Docker 26.1.5-ce. See upstream changelog online at\n  \u003chttps://docs.docker.com/engine/release-notes/26.1/#2615\u003e\n  bsc#1230294\n\n- This update includes fixes for:\n  * CVE-2024-41110. bsc#1228324\n  * CVE-2023-47108. bsc#1217070 bsc#1229806\n  * CVE-2023-45142. bsc#1228553 bsc#1229806\n\n- Update to Docker 26.1.4-ce. See upstream changelog online at\n  \u003chttps://docs.docker.com/engine/release-notes/26.1/#2614\u003e\n\n- Update to Docker 26.1.0-ce. See upstream changelog online at\n  \u003chttps://docs.docker.com/engine/release-notes/26.1/#2610\u003e\n\n- Update --add-runtime to point to correct binary path.","status":"published","published":"2024-12-13T20:16:47Z","modified":"2026-02-04T03:03:32.94551Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2024:4360-1","title":"Security update for docker","description":"This update for docker fixes the following issues:\n\n- Update docker-buildx to v0.19.2. See upstream changelog online at\n  \u003chttps://github.com/docker/buildx/releases/tag/v0.19.2\u003e.\n\n  Some notable changelogs from the last update:\n    * \u003chttps://github.com/docker/buildx/releases/tag/v0.19.0\u003e\n    * \u003chttps://github.com/docker/buildx/releases/tag/v0.18.0\u003e\n\n- Add a new toggle file /etc/docker/suse-secrets-enable which allows users to\n  disable the SUSEConnect integration with Docker (which creates special mounts\n  in /run/secrets to allow container-suseconnect to authenticate containers\n  with registries on registered hosts). bsc#1231348 bsc#1232999\n\n  In order to disable these mounts, just do\n\n    echo 0 \u003e /etc/docker/suse-secrets-enable\n\n  and restart Docker. In order to re-enable them, just do\n\n    echo 1 \u003e /etc/docker/suse-secrets-enable\n\n  and restart Docker. Docker will output information on startup to tell you\n  whether the SUSE secrets feature is enabled or not.\n\n- Disable docker-buildx builds for SLES. It turns out that build containers\n  with docker-buildx don't currently get the SUSE secrets mounts applied,\n  meaning that container-suseconnect doesn't work when building images.\n  bsc#1233819\n\n- Remove DOCKER_NETWORK_OPTS from docker.service. This was removed from\n  sysconfig a long time ago, and apparently this causes issues with systemd in\n  some cases.\n\n- Allow a parallel docker-stable RPM to exists in repositories.\n\n- Update to docker-buildx v0.17.1 to match standalone docker-buildx package we\n  are replacing. See upstream changelog online at\n  \u003chttps://github.com/docker/buildx/releases/tag/v0.17.1\u003e\n\n- Allow users to disable SUSE secrets support by setting\n  DOCKER_SUSE_SECRETS_ENABLE=0 in /etc/sysconfig/docker. (bsc#1231348)\n\n- Mark docker-buildx as required since classic 'docker build' has been\n  deprecated since Docker 23.0. (bsc#1230331)\n\n- Import docker-buildx v0.16.2 as a subpackage. Previously this was a separate\n  package, but with docker-stable it will be necessary to maintain the packages\n  together and it makes more sense to have them live in the same OBS package.\n  (bsc#1230333)\n\n- Update to Docker 26.1.5-ce. See upstream changelog online at\n  \u003chttps://docs.docker.com/engine/release-notes/26.1/#2615\u003e\n  bsc#1230294\n\n- This update includes fixes for:\n  * CVE-2024-41110. bsc#1228324\n  * CVE-2023-47108. bsc#1217070 bsc#1229806\n  * CVE-2023-45142. bsc#1228553 bsc#1229806\n\n- Update to Docker 26.1.4-ce. See upstream changelog online at\n  \u003chttps://docs.docker.com/engine/release-notes/26.1/#2614\u003e\n\n- Update to Docker 26.1.0-ce. See upstream changelog online at\n  \u003chttps://docs.docker.com/engine/release-notes/26.1/#2610\u003e\n\n- Update --add-runtime to point to correct binary path.","status":"published","published":"2024-12-17T14:35:54Z","modified":"2026-02-04T03:14:32.911188Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:0226-1","title":"Security update for docker-stable","description":"This update for docker-stable fixes the following issues:\n\n- CVE-2024-29018: Fixed external DNS request handling from 'internal' networks that could have led to data exfiltration (bsc#1234089).\n- CVE-2024-23650: Fixed possibile BuildKit daemon crash via malicious BuildKit client or frontend request (bsc#1219437).\n","status":"published","published":"2025-01-27T07:26:16Z","modified":"2026-02-04T03:20:21.295383Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:03540-1","title":"Security update for docker-stable","description":"This update for docker-stable fixes the following issues:\n\n- Include historical changelog data from before the docker-stable fork. The\n  initial changelog entry did technically provide all the necessary\n  information, but our CVE tracking tools do not understand how the package is\n  forked and so it seems that this package does not include fixes for ~12 years\n  of updates. So, include a copy of the original package's changelog up until\n  the fork point. (bsc#1250596)\n\n- Remove git-core recommends on SLE. Most SLE systems have\n  installRecommends=yes by default and thus end up installing git with Docker.\n  bsc#1250508\n\n  This feature is mostly intended for developers ('docker build git://') so\n  most users already have the dependency installed, and the error when git is\n  missing is fairly straightforward (so they can easily figure out what they\n  need to install).\n\n- Backport \u003chttps://github.com/moby/moby/pull/48517\u003e. bsc#1247362\n\n- Update to docker-buildx v0.25.0. Upstream changelog:\n  \u003chttps://github.com/docker/buildx/releases/tag/v0.25.0\u003e\n\n- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as\n  Docker does not have permission to access the host zypper credentials in this\n  mode (and unprivileged users cannot disable the feature using\n  /etc/docker/suse-secrets-enable.) bsc#1240150\n\n- Initial docker-stable fork, forked from Docker 24.0.7-ce release\n  (packaged on 2024-02-14). The original changelog is included below for\n  historical reference.\n","status":"published","published":"2025-10-10T19:04:02Z","modified":"2026-02-04T02:38:37.010407Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:03545-1","title":"Security update for docker-stable","description":"This update for docker-stable fixes the following issues:\n\nNote this update contains a already fixed references mostly.\n\n- Remove git-core recommends on SLE to avoid pulling it in unnecessary. (bsc#1250508)\n\n  This feature is mostly intended for developers ('docker build git://') so\n  most users already have the dependency installed, and the error when git is\n  missing is fairly straightforward (so they can easily figure out what they\n  need to install).\n\n- Include historical changelog data from before the docker-stable fork. The\n  initial changelog entry did technically provide all the necessary\n  information, but our CVE tracking tools do not understand how the package is\n  forked and so it seems that this package does not include fixes for ~12 years\n  of updates. So, include a copy of the original package's changelog up until\n  the fork point. bsc#1250596\n\n- Update to docker-buildx v0.25.0. Upstream changelog:\n  \u003chttps://github.com/docker/buildx/releases/tag/v0.25.0\u003e\n\n- Update to Go 1.23 for building now that upstream has switched their 23.0.x\n  LTSS to use Go 1.23.\n\n- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as\n  Docker does not have permission to access the host zypper credentials in this\n  mode (and unprivileged users cannot disable the feature using\n  /etc/docker/suse-secrets-enable.) bsc#1240150\n\n- Initial docker-stable fork, forked from Docker 24.0.7-ce release\n  (packaged on 2024-02-14). The original changelog is included below for\n  historical reference.\n","status":"published","published":"2025-10-11T01:20:50Z","modified":"2026-03-23T04:48:05.17767Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0980-1","title":"Security update for apptainer","description":"This update for apptainer fixes the following issues:\n\n- CVE-2025-27144: Fixed Denial of Service in Go JOSE's Parsing (bsc#1237679).\n- CVE-2024-45338: Fixed denial of service due to non-linear parsing of case-insensitive content (bsc#1234794).\n- CVE-2024-45337: Fixed Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto (bsc#1234595).\n- CVE-2025-22870: Fixed proxy bypass using IPv6 zone IDs (bsc#1238611).\n- CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239341).\n- CVE-2024-41110: Fixed Authz zero length regression (bsc#1228324).\n","status":"published","published":"2025-03-21T14:15:19Z","modified":"2026-02-04T02:51:44.123256Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:1062-1","title":"Security update for docker, docker-stable","description":"This update for docker, docker-stable fixes the following issues:\n\n\n- CVE-2025-22868: Fixed unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239185).\n- CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239322).\n\nOther fixes:\n- Make container-selinux requirement conditional on selinux-policy (bsc#1237367)\n","status":"published","published":"2025-03-31T08:45:25Z","modified":"2026-02-04T02:54:10.914407Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1102-1","title":"Security update for docker, docker-stable","description":"This update for docker, docker-stable fixes the following issues:\n\n- CVE-2025-22868: Fixed unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239185).\n- CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239322).\n- CVE-2024-29018: Fixed external DNS requests from 'internal' networks leading to data exfiltration (bsc#1234089).\n- CVE-2024-23650: Fixed BuildKit daemon crash via malicious BuildKit client or frontend request (bsc#1219437).\n\nOther fixes:\n- Make container-selinux requirement conditional on selinux-policy (bsc#1237367).\n- Updated docker-buildx to 0.19.3.\n","status":"published","published":"2025-04-02T09:39:33Z","modified":"2026-02-04T03:17:16.530364Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20056-1","title":"Security update for docker","description":"This update for docker fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2024-23651: Fixed arbitrary files write due to race condition on mounts (bsc#1219267)\n- CVE-2024-23652: Fixed insufficient validation of parent directory on mount (bsc#1219268)\n- CVE-2024-23653: Fixed insufficient validation on entitlement on container creation via buildkit (bsc#1219438)\n- CVE-2024-41110: A Authz zero length regression that could lead to authentication bypass was fixed (bsc#1228324)\n\nOther changes:\n\n- Update to Docker 25.0.6-ce.\n- Fix BuildKit's symlink resolution logic to correctly handle non-lexical\n  symlinks. (bsc#1221916)\n- Write volume options atomically so sudden system crashes won't result in\n  future Docker starts failing due to empty files. (bsc#1214855)\n- Fixed world writable docker overlay files (bsc#1220339)\n","status":"published","published":"2025-02-03T08:56:52Z","modified":"2026-03-23T04:48:50.980159Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20110-1","title":"Security update for docker","description":"This update for docker fixes the following issues:\n\n- Update docker-buildx to v0.19.2. See upstream changelog online at\n  \u003chttps://github.com/docker/buildx/releases/tag/v0.19.2\u003e.\n\n  Some notable changelogs from the last update:\n    * \u003chttps://github.com/docker/buildx/releases/tag/v0.19.0\u003e\n    * \u003chttps://github.com/docker/buildx/releases/tag/v0.18.0\u003e\n\n- Add a new toggle file /etc/docker/suse-secrets-enable which allows users to\n  disable the SUSEConnect integration with Docker (which creates special mounts\n  in /run/secrets to allow container-suseconnect to authenticate containers\n  with registries on registered hosts). bsc#1231348 bsc#1232999\n\n  In order to disable these mounts, just do\n\n    echo 0 \u003e /etc/docker/suse-secrets-enable\n\n  and restart Docker. In order to re-enable them, just do\n\n    echo 1 \u003e /etc/docker/suse-secrets-enable\n\n  and restart Docker. Docker will output information on startup to tell you\n  whether the SUSE secrets feature is enabled or not.\n\n- Remove DOCKER_NETWORK_OPTS from docker.service. This was removed from\n  sysconfig a long time ago, and apparently this causes issues with systemd in\n  some cases.\n\n- Update to docker-buildx v0.17.1 to match standalone docker-buildx package we\n  are replacing. See upstream changelog online at\n  \u003chttps://github.com/docker/buildx/releases/tag/v0.17.1\u003e\n\n- Add %{_sysconfdir}/audit/rules.d to filelist.\n\n- Update to Docker 26.1.5-ce. See upstream changelog online at\n  \u003chttps://docs.docker.com/engine/release-notes/26.1/#2615\u003e\n  bsc#1230294\n- This update includes fixes for:\n  * CVE-2024-41110. bsc#1228324\n  * CVE-2023-47108. bsc#1217070\n  * CVE-2023-45142. bsc#1228553\n","status":"published","published":"2025-02-03T09:19:38Z","modified":"2026-03-23T04:48:10.100758Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20259-1","title":"Security update for docker","description":"This update for docker fixes the following issues:\n\n- This update includes fixes for:\n\n  * CVE-2024-41110: Fixed Authz zero length regression (bsc#1228324)\n  * CVE-2023-47108: Fixed otelgrpc: DoS vulnerability in otelgrpc\n    (uncontrolled resource consumption) due to unbound cardinality\n    (bsc#1217070 bsc#1229806)\n  * CVE-2023-45142: Fixed otelhttp,otelhttptrace,otelrestful: DoS\n    vulnerability (bsc#1228553 bsc#1229806)\n\n- Update to Docker 27.5.1-ce. See upstream changelog online at\n  \u003chttps://docs.docker.com/engine/release-notes/27/#2741\u003e bsc#1237335\n\n- Update to docker-buildx 0.20.1. See upstream changelog online at\n  \u003chttps://github.com/docker/buildx/releases/tag/v0.20.1\u003e\n\n- Update to Docker 27.4.1-ce. See upstream changelog online at\n  \u003chttps://docs.docker.com/engine/release-notes/27/#2741\u003e\n\n- Update to docker-buildx 0.19.3. See upstream changelog online at\n  \u003chttps://github.com/docker/buildx/releases/tag/v0.19.3\u003e\n\n- Update to Docker 27.4.0-ce. See upstream changelog online at\n  \u003chttps://docs.docker.com/engine/release-notes/27/#274\u003e\n\n  \u003chttps://github.com/docker/buildx/releases/tag/v0.19.2\u003e.\n\n  Some notable changelogs from the last update:\n    * \u003chttps://github.com/docker/buildx/releases/tag/v0.19.0\u003e\n    * \u003chttps://github.com/docker/buildx/releases/tag/v0.18.0\u003e\n\n- Update to Go 1.22.\n\n- Add a new toggle file /etc/docker/suse-secrets-enable which allows users to\n  disable the SUSEConnect integration with Docker (which creates special mounts\n  in /run/secrets to allow container-suseconnect to authenticate containers\n  with registries on registered hosts). bsc#1231348 bsc#1232999\n\n  In order to disable these mounts, just do\n\n    echo 0 \u003e /etc/docker/suse-secrets-enable\n\n  and restart Docker. In order to re-enable them, just do\n\n    echo 1 \u003e /etc/docker/suse-secrets-enable\n\n  and restart Docker. Docker will output information on startup to tell you\n  whether the SUSE secrets feature is enabled or not.\n\n- Disable docker-buildx builds for SLES. It turns out that build containers\n  with docker-buildx don't currently get the SUSE secrets mounts applied,\n  meaning that container-suseconnect doesn't work when building images.\n  bsc#1233819\n\n- Remove DOCKER_NETWORK_OPTS from docker.service. This was removed from\n  sysconfig a long time ago, and apparently this causes issues with systemd in\n  some cases.\n\n- Update to docker-buildx v0.17.1 to match standalone docker-buildx package we\n  are replacing. See upstream changelog online at\n  \u003chttps://github.com/docker/buildx/releases/tag/v0.17.1\u003e\n\n- Mark docker-buildx as required since classic \"docker build\" has been\n  deprecated since Docker 23.0. bsc#1230331\n\n- Import docker-buildx v0.16.2 as a subpackage. Previously this was a separate\n  package, but with docker-stable it will be necessary to maintain the packages\n  together and it makes more sense to have them live in the same OBS package.\n  bsc#1230333\n\n- Update to Docker 26.1.5-ce. See upstream changelog online at\n  \u003chttps://docs.docker.com/engine/release-notes/26.1/#2615\u003e\n  bsc#1230294\n\n","status":"published","published":"2025-03-31T16:54:17Z","modified":"2026-03-23T04:50:06.243016Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2026:0972-1","title":"Security update for docker-stable","description":"This update for docker-stable fixes the following issues:\n\n- CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption\n  (bsc#1253904).\n","status":"published","published":"2026-03-23T15:21:42Z","modified":"2026-03-24T08:45:06.794921Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1118-1","title":"Security update for docker-stable","description":"This update for docker-stable fixes the following issues:\n\n- CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption\n  (bsc#1253904).\n","status":"published","published":"2026-03-27T12:26:18Z","modified":"2026-03-29T10:45:24.83268Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"USN-7161-1","title":"Docker vulnerabilities","description":"Yair Zak discovered that Docker could unexpectedly forward DNS requests\nfrom internal networks in an unexpected manner. An attacker could possibly\nuse this issue to exfiltrate data by encoding information in DNS queries \nto controlled nameservers. This issue was only addressed for the source package\ndocker.io-app in Ubuntu 24.04 LTS. (CVE-2024-29018)\n\nCory Snider discovered that Docker did not properly handle authorization \nplugin request processing. An attacker could possibly use this issue to \nbypass authorization controls by forwarding API requests without their \nfull body, leading to unauthorized actions. This issue was only addressed for \nthe source package docker.io-app in Ubuntu 24.10 and Ubuntu 24.04 LTS, \nand the source package docker.io in Ubuntu 18.04 LTS. (CVE-2024-41110)\n","status":"published","published":"2024-12-16T13:56:40Z","modified":"2026-04-27T17:38:01.152068Z","updated_at":"2026-11-02T16:58:18.876384Z"},{"id":"USN-7161-2","title":"Docker vulnerabilities","description":"USN-7161-1 fixed CVE-2024-29018 in Ubuntu 24.04 LTS. This update fixes it\n for source package docker.io in Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and source\n package docker.io-app for Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.\n\n USN-7161-1 fixed CVE-2024-41110 in Ubuntu 24.10, Ubuntu 24.04 LTS, and \nUbuntu 18.04 LTS. This update fixes it for source package docker.io-app in\n Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.\n\nOriginal advisory details:\n\n Yair Zak discovered that Docker could unexpectedly forward DNS requests\nfrom internal networks in an unexpected manner. An attacker could possibly\nuse this issue to exfiltrate data by encoding information in DNS queries \nto controlled nameservers. This issue was only addressed for the source package\ndocker.io-app in Ubuntu 24.04 LTS. (CVE-2024-29018)\n\nCory Snider discovered that Docker did not properly handle authorization \nplugin request processing. An attacker could possibly use this issue to \nbypass authorization controls by forwarding API requests without their \nfull body, leading to unauthorized actions. This issue was only addressed for \nthe source package docker.io-app in Ubuntu 24.10 and Ubuntu 24.04 LTS, \nand the source package docker.io in Ubuntu 18.04 LTS. (CVE-2024-41110)\n","status":"published","published":"2025-02-18T08:22:46Z","modified":"2026-06-25T13:32:29.861684665Z","updated_at":"2026-11-02T16:58:18.876384Z"},{"id":"USN-7161-3","title":"Docker vulnerability","description":"USN-7161-1 and USN-7161-2 fixed CVE-2024-41110 for source package \ndocker.io in Ubuntu 18.04 LTS and for source package docker.io-app in \nUbuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10. \nThis update fixes it for source package docker.io in Ubuntu 20.04 LTS, \nUbuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10. These updates only \naddress the docker library and not the docker.io application itself, which\nwas already patched in the previous USNs (USN-7161-1 and USN-7161-2).  \n\nOriginal advisory details:\n\n Yair Zak discovered that Docker could unexpectedly forward DNS requests\n from internal networks in an unexpected manner. An attacker could possibly\n use this issue to exfiltrate data by encoding information in DNS queries \n to controlled nameservers. This issue was only addressed for the source \n package docker.io-app in Ubuntu 24.04 LTS. (CVE-2024-29018)\n \n Cory Snider discovered that Docker did not properly handle authorization \n plugin request processing. An attacker could possibly use this issue to \n bypass authorization controls by forwarding API requests without their \n full body, leading to unauthorized actions. This issue was only addressed \n for the source package docker.io-app in Ubuntu 24.10 and \n Ubuntu 24.04 LTS, and the source package docker.io in Ubuntu 18.04 LTS. \n (CVE-2024-41110)\n","status":"published","published":"2025-04-15T14:05:08Z","modified":"2026-04-27T17:38:05.575054Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}