Medium openSUSE-SU-2026:20249-1 1 CVE

Security update for docker

Published Feb 18, 2026 · Updated Mar 23, 2026

Ecosystem: openSUSE

Summary

This update for docker fixes the following issues:

- CVE-2025-58181: not validating the number of mechanisms can cause unlimited memory consumption (bsc#1253904).

Fixed packages 1

Release	Package	Fixed in
openSUSE · Leap 16.0	docker	28.5.1_ce-160000.5.1

Vulnerabilities 1

Medium 5.3

CVE-2025-58181

Unbounded memory consumption in golang.org/x/crypto/ssh

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

golang.org/x/crypto golang.org/x/crypto/ssh katib-earlystopping katib-suggestion-pbt-enas Debian Ubuntu Alpine Wolfi Go

Nov 19, 2025

References

report
https://bugzilla.suse.com/1253904
web
https://www.suse.com/security/cve/CVE-2025-58181