SUSE-SU-2024:0587-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2024:0587-1

Related

Published

2024-02-22T08:55:20Z

Modified

2024-02-22T08:55:20Z

Summary

Security update for docker

Details

This update for docker fixes the following issues:

Vendor latest buildkit v0.11 including bugfixes for the following:

CVE-2024-23653: BuildKit API doesn't validate entitlement on container creation (bsc#1219438).
CVE-2024-23652: Fixed arbitrary deletion of files (bsc#1219268).
CVE-2024-23651: Fixed race condition in mount (bsc#1219267).

References

Affected packages

Name: docker
Purl: pkg:rpm/suse/docker&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2012

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

24.0.7_ce-98.106.1

{
    "binaries": [
        {
            "docker": "24.0.7_ce-98.106.1"
        }
    ]
}