Summary
This update for docker-stable fixes the following issues:
- Update docker-buildx to v0.19.2. See upstream changelog online at
<https://github.com/docker/buildx/releases/tag/v0.19.2>.
Some notable changelogs from the last update:
* <https://github.com/docker/buildx/releases/tag/v0.19.0>
* <https://github.com/docker/buildx/releases/tag/v0.18.0>
- Add a new toggle file /etc/docker/suse-secrets-enable which allows users to
disable the SUSEConnect integration with Docker (which creates special mounts
in /run/secrets to allow container-suseconnect to authenticate containers
with registries on registered hosts). bsc#1231348 bsc#1232999
In order to disable these mounts, just do
echo 0 > /etc/docker/suse-secrets-enable
and restart Docker. In order to re-enable them, just do
echo 1 > /etc/docker/suse-secrets-enable
and restart Docker. Docker will output information on startup to tell you
whether the SUSE secrets feature is enabled or not.
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| SUSE · Enterprise Storage 7.1 | docker-stable | 24.0.9_ce-150000.1.8.1 |
| openSUSE · Leap 15.5 | docker-stable | 24.0.9_ce-150000.1.8.1 |
| openSUSE · Leap 15.6 | docker-stable | 24.0.9_ce-150000.1.8.1 |
| SUSE · SLE HPC 15 SP3 Linux Enterprise High Performance Computing 15 SP3-LTSS | docker-stable | 24.0.9_ce-150000.1.8.1 |
| SUSE · SLE HPC 15 SP4 Linux Enterprise High Performance Computing 15 SP4-ESPOS | docker-stable | 24.0.9_ce-150000.1.8.1 |
| SUSE · SLE HPC 15 SP4 Linux Enterprise High Performance Computing 15 SP4-LTSS | docker-stable | 24.0.9_ce-150000.1.8.1 |
| SUSE · SLES 15 SP5 Linux Enterprise Module for Containers 15 SP5 | docker-stable | 24.0.9_ce-150000.1.8.1 |
| SUSE · SLES 15 SP6 Linux Enterprise Module for Containers 15 SP6 | docker-stable | 24.0.9_ce-150000.1.8.1 |
| SUSE · SLES 15 SP3 Linux Enterprise Server 15 SP3-LTSS | docker-stable | 24.0.9_ce-150000.1.8.1 |
| SUSE · SLES 15 SP4 Linux Enterprise Server 15 SP4-LTSS | docker-stable | 24.0.9_ce-150000.1.8.1 |
| SUSE · SLES for SAP 15 SP3 Linux Enterprise Server for SAP Applications 15 SP3 | docker-stable | 24.0.9_ce-150000.1.8.1 |
| SUSE · SLES for SAP 15 SP4 Linux Enterprise Server for SAP Applications 15 SP4 | docker-stable | 24.0.9_ce-150000.1.8.1 |
Vulnerabilities 2
-
Critical 10.0
Moby authz zero length regression
Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances…
-
Critical 9.8CVE-2024-23653 Public exploit
BuildKit interactive containers API does not validate entitlements check
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It w…