Bug 1228324 (CVE-2024-41110) - VUL-0: CVE-2024-41110: docker: Authz zero length regression
Summary: VUL-0: CVE-2024-41110: docker: Authz zero length regression
Status: RESOLVED FIXED
Alias: CVE-2024-41110
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P1 - Urgent : Critical
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/415071/
Whiteboard: CVSSv3.1:SUSE:CVE-2024-41110:9.9:(AV:...
Keywords:
Depends on:
Blocks:
 
Reported: 2024-07-25 09:37 UTC by Gianluca Gabrielli
Modified: 2025-11-27 01:11 UTC (History)
9 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Gianluca Gabrielli 2024-07-25 09:37:50 UTC 
Description

A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low. This advisory outlines the issue, identifies the affected versions, and provides remediation steps for impacted users.

Impact

Using a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.

A security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.

Docker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable.

Vulnerability details

AuthZ bypass and privilege escalation: An attacker could exploit a bypass using an API request with Content-Length set to 0, causing the Docker daemon to forward the request without the body to the AuthZ plugin, which might approve the request incorrectly.
Initial fix: The issue was fixed in Docker Engine v18.09.1 January 2019..
Regression: The fix was not included in Docker Engine v19.03 or newer versions. This was identified in April 2024 and patches were released for the affected versions on July 23, 2024. The issue was assigned CVE-2024-41110.

Patches

docker-ce v27.1.1 containes patches to fix the vulnerability.
Patches have also been merged into the master, 19.0, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches.

Remediation steps

If you are running an affected version, update to the most recent patched version.
Mitigation if unable to update immediately:
        Avoid using AuthZ plugins.
        Restrict access to the Docker API to trusted parties, following the principle of least privilege.

References
https://github.com/moby/moby/commit/fc274cd2ff4cf3b48c91697fb327dd1fb95588fb
https://github.com/moby/moby/commit/a79fabbfe84117696a19671f4aa88b82d0f64fc1
https://www.docker.com/blog/docker-security-advisory-docker-engine-authz-plugin/
Comment 5 Maintenance Automation 2024-08-02 12:30:02 UTC 
SUSE-SU-2024:2709-1: An update that solves one vulnerability and has two security fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2024/suse-su-20242709-1
Category: security (critical)
Bug References: 1214855, 1221916, 1228324
CVE References: CVE-2024-41110
Maintenance Incident: [SUSE:Maintenance:34933](https://smelt.suse.de/incident/34933/)
Sources used:
Containers Module 12 (src):
 docker-25.0.6_ce-98.115.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 6 Maintenance Automation 2024-08-07 08:32:23 UTC 
SUSE-SU-2024:2801-1: An update that solves four vulnerabilities and has three security fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2024/suse-su-20242801-1
Category: security (critical)
Bug References: 1214855, 1219267, 1219268, 1219438, 1221916, 1223409, 1228324
CVE References: CVE-2024-23651, CVE-2024-23652, CVE-2024-23653, CVE-2024-41110
Maintenance Incident: [SUSE:Maintenance:33585](https://smelt.suse.de/incident/33585/)
Sources used:
openSUSE Leap Micro 5.5 (src):
 docker-25.0.6_ce-150000.203.1
openSUSE Leap 15.5 (src):
 docker-25.0.6_ce-150000.203.1
openSUSE Leap 15.6 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Micro for Rancher 5.3 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Micro 5.3 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Micro for Rancher 5.4 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Micro 5.4 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Micro 5.5 (src):
 docker-25.0.6_ce-150000.203.1
Containers Module 15-SP5 (src):
 docker-25.0.6_ce-150000.203.1
Containers Module 15-SP6 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Enterprise Storage 7.1 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Micro 5.1 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Micro 5.2 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Micro for Rancher 5.2 (src):
 docker-25.0.6_ce-150000.203.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 7 Maintenance Automation 2024-08-07 12:30:16 UTC 
SUSE-SU-2024:2801-2: An update that solves four vulnerabilities and has three security fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2024/suse-su-20242801-2
Category: security (critical)
Bug References: 1214855, 1219267, 1219268, 1219438, 1221916, 1223409, 1228324
CVE References: CVE-2024-23651, CVE-2024-23652, CVE-2024-23653, CVE-2024-41110
Maintenance Incident: [SUSE:Maintenance:33585](https://smelt.suse.de/incident/33585/)
Sources used:
openSUSE Leap Micro 5.5 (src):
 docker-25.0.6_ce-150000.203.1
openSUSE Leap 15.5 (src):
 docker-25.0.6_ce-150000.203.1
openSUSE Leap 15.6 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Micro for Rancher 5.3 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Micro 5.3 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Micro for Rancher 5.4 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Micro 5.4 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Micro 5.5 (src):
 docker-25.0.6_ce-150000.203.1
Containers Module 15-SP5 (src):
 docker-25.0.6_ce-150000.203.1
Containers Module 15-SP6 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Enterprise Storage 7.1 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Micro 5.1 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Micro 5.2 (src):
 docker-25.0.6_ce-150000.203.1
SUSE Linux Enterprise Micro for Rancher 5.2 (src):
 docker-25.0.6_ce-150000.203.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 9 Maintenance Automation 2024-09-03 16:30:47 UTC 
SUSE-SU-2024:3120-1: An update that solves eight vulnerabilities and has two security fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2024/suse-su-20243120-1
Category: security (critical)
Bug References: 1214855, 1219267, 1219268, 1219438, 1221243, 1221677, 1221916, 1223409, 1224117, 1228324
CVE References: CVE-2024-1753, CVE-2024-23651, CVE-2024-23652, CVE-2024-23653, CVE-2024-24786, CVE-2024-28180, CVE-2024-3727, CVE-2024-41110
Maintenance Incident: [SUSE:Maintenance:35144](https://smelt.suse.de/incident/35144/)
Sources used:
openSUSE Leap 15.3 (src):
 buildah-1.35.4-150300.8.25.1
openSUSE Leap Micro 5.5 (src):
 docker-25.0.6_ce-150000.207.1
openSUSE Leap 15.5 (src):
 docker-25.0.6_ce-150000.207.1
openSUSE Leap 15.6 (src):
 docker-25.0.6_ce-150000.207.1
SUSE Linux Enterprise Micro for Rancher 5.3 (src):
 docker-25.0.6_ce-150000.207.1
SUSE Linux Enterprise Micro 5.3 (src):
 docker-25.0.6_ce-150000.207.1
SUSE Linux Enterprise Micro for Rancher 5.4 (src):
 docker-25.0.6_ce-150000.207.1
SUSE Linux Enterprise Micro 5.4 (src):
 docker-25.0.6_ce-150000.207.1
SUSE Linux Enterprise Micro 5.5 (src):
 docker-25.0.6_ce-150000.207.1
Containers Module 15-SP5 (src):
 docker-25.0.6_ce-150000.207.1
Containers Module 15-SP6 (src):
 docker-25.0.6_ce-150000.207.1
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (src):
 docker-25.0.6_ce-150000.207.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (src):
 docker-25.0.6_ce-150000.207.1, buildah-1.35.4-150300.8.25.1
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (src):
 docker-25.0.6_ce-150000.207.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (src):
 docker-25.0.6_ce-150000.207.1
SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (src):
 docker-25.0.6_ce-150000.207.1
SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (src):
 docker-25.0.6_ce-150000.207.1, buildah-1.35.4-150300.8.25.1
SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (src):
 docker-25.0.6_ce-150000.207.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2 (src):
 docker-25.0.6_ce-150000.207.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3 (src):
 docker-25.0.6_ce-150000.207.1, buildah-1.35.4-150300.8.25.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (src):
 docker-25.0.6_ce-150000.207.1
SUSE Enterprise Storage 7.1 (src):
 docker-25.0.6_ce-150000.207.1, buildah-1.35.4-150300.8.25.1
SUSE Linux Enterprise Micro 5.1 (src):
 docker-25.0.6_ce-150000.207.1
SUSE Linux Enterprise Micro 5.2 (src):
 docker-25.0.6_ce-150000.207.1
SUSE Linux Enterprise Micro for Rancher 5.2 (src):
 docker-25.0.6_ce-150000.207.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 12 Aleksa Sarai 2024-11-16 08:27:10 UTC 
This should've been fixed with the above updates from a few months ago.
Comment 15 Maintenance Automation 2024-12-05 16:31:03 UTC 
SUSE-SU-2024:4205-1: An update that solves one vulnerability, contains two features and has five security fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2024/suse-su-20244205-1
Category: security (moderate)
Bug References: 1214855, 1221916, 1228324, 1230331, 1230333, 1231348
CVE References: CVE-2024-41110
Jira References: PED-11185, PED-8585
Maintenance Incident: [SUSE:Maintenance:36509](https://smelt.suse.de/incident/36509/)
Sources used:
SUSE Linux Enterprise Server 12 SP5 LTSS (src):
 docker-stable-24.0.9_ce-1.5.1
SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (src):
 docker-stable-24.0.9_ce-1.5.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 16 Maintenance Automation 2024-12-05 16:31:08 UTC 
SUSE-SU-2024:4204-1: An update that solves one vulnerability and has five security fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2024/suse-su-20244204-1
Category: security (important)
Bug References: 1214855, 1221916, 1228324, 1230331, 1230333, 1231348
CVE References: CVE-2024-41110
Maintenance Incident: [SUSE:Maintenance:36514](https://smelt.suse.de/incident/36514/)
Sources used:
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (src):
 docker-stable-24.0.9_ce-150000.1.5.1
SUSE Enterprise Storage 7.1 (src):
 docker-stable-24.0.9_ce-150000.1.5.1
openSUSE Leap 15.5 (src):
 docker-stable-24.0.9_ce-150000.1.5.1
openSUSE Leap 15.6 (src):
 docker-stable-24.0.9_ce-150000.1.5.1
Containers Module 15-SP5 (src):
 docker-stable-24.0.9_ce-150000.1.5.1
Containers Module 15-SP6 (src):
 docker-stable-24.0.9_ce-150000.1.5.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (src):
 docker-stable-24.0.9_ce-150000.1.5.1
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (src):
 docker-stable-24.0.9_ce-150000.1.5.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (src):
 docker-stable-24.0.9_ce-150000.1.5.1
SUSE Linux Enterprise Server 15 SP3 LTSS (src):
 docker-stable-24.0.9_ce-150000.1.5.1
SUSE Linux Enterprise Server 15 SP4 LTSS (src):
 docker-stable-24.0.9_ce-150000.1.5.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3 (src):
 docker-stable-24.0.9_ce-150000.1.5.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 18 Maintenance Automation 2024-12-16 08:30:18 UTC 
SUSE-SU-2024:4319-1: An update that solves three vulnerabilities and has seven security fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2024/suse-su-20244319-1
Category: security (important)
Bug References: 1217070, 1228324, 1228553, 1229806, 1230294, 1230331, 1230333, 1231348, 1232999, 1233819
CVE References: CVE-2023-45142, CVE-2023-47108, CVE-2024-41110
Maintenance Incident: [SUSE:Maintenance:36508](https://smelt.suse.de/incident/36508/)
Sources used:
SUSE Linux Enterprise Server 12 SP5 LTSS (src):
 docker-26.1.5_ce-98.120.1
SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (src):
 docker-26.1.5_ce-98.120.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 19 Maintenance Automation 2024-12-17 16:36:00 UTC 
SUSE-SU-2024:4360-1: An update that solves three vulnerabilities and has seven security fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2024/suse-su-20244360-1
Category: security (important)
Bug References: 1217070, 1228324, 1228553, 1229806, 1230294, 1230331, 1230333, 1231348, 1232999, 1233819
CVE References: CVE-2023-45142, CVE-2023-47108, CVE-2024-41110
Maintenance Incident: [SUSE:Maintenance:36472](https://smelt.suse.de/incident/36472/)
Sources used:
openSUSE Leap Micro 5.5 (src):
 docker-26.1.5_ce-150000.212.1
openSUSE Leap 15.5 (src):
 docker-26.1.5_ce-150000.212.1
openSUSE Leap 15.6 (src):
 docker-26.1.5_ce-150000.212.1
SUSE Linux Enterprise Micro for Rancher 5.3 (src):
 docker-26.1.5_ce-150000.212.1
SUSE Linux Enterprise Micro 5.3 (src):
 docker-26.1.5_ce-150000.212.1
SUSE Linux Enterprise Micro for Rancher 5.4 (src):
 docker-26.1.5_ce-150000.212.1
SUSE Linux Enterprise Micro 5.4 (src):
 docker-26.1.5_ce-150000.212.1
SUSE Linux Enterprise Micro 5.5 (src):
 docker-26.1.5_ce-150000.212.1
Containers Module 15-SP5 (src):
 docker-26.1.5_ce-150000.212.1
Containers Module 15-SP6 (src):
 docker-26.1.5_ce-150000.212.1
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS (src):
 docker-26.1.5_ce-150000.212.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (src):
 docker-26.1.5_ce-150000.212.1
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (src):
 docker-26.1.5_ce-150000.212.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (src):
 docker-26.1.5_ce-150000.212.1
SUSE Linux Enterprise Server 15 SP2 LTSS (src):
 docker-26.1.5_ce-150000.212.1
SUSE Linux Enterprise Server 15 SP3 LTSS (src):
 docker-26.1.5_ce-150000.212.1
SUSE Linux Enterprise Server 15 SP4 LTSS (src):
 docker-26.1.5_ce-150000.212.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2 (src):
 docker-26.1.5_ce-150000.212.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3 (src):
 docker-26.1.5_ce-150000.212.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (src):
 docker-26.1.5_ce-150000.212.1
SUSE Enterprise Storage 7.1 (src):
 docker-26.1.5_ce-150000.212.1
SUSE Linux Enterprise Micro 5.1 (src):
 docker-26.1.5_ce-150000.212.1
SUSE Linux Enterprise Micro 5.2 (src):
 docker-26.1.5_ce-150000.212.1
SUSE Linux Enterprise Micro for Rancher 5.2 (src):
 docker-26.1.5_ce-150000.212.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 22 Maintenance Automation 2025-03-21 16:32:49 UTC 
SUSE-SU-2025:0980-1: An update that solves six vulnerabilities can now be installed.

URL: https://www.suse.com/support/update/announcement/2025/suse-su-20250980-1
Category: security (critical)
Bug References: 1228324, 1234595, 1234794, 1237679, 1238611, 1239341
CVE References: CVE-2024-41110, CVE-2024-45337, CVE-2024-45338, CVE-2025-22869, CVE-2025-22870, CVE-2025-27144
Maintenance Incident: [SUSE:Maintenance:38011](https://smelt.suse.de/incident/38011/)
Sources used:
openSUSE Leap 15.6 (src):
 apptainer-1.3.6-150600.4.9.1
HPC Module 15-SP6 (src):
 apptainer-1.3.6-150600.4.9.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 25 Maintenance Automation 2025-06-04 07:39:48 UTC 
SUSE-SU-2025:20259-1: An update that solves four vulnerabilities and has nine fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2025/suse-su-202520259-1
Category: security (critical)
Bug References: 1217070, 1223409, 1228324, 1228553, 1229806, 1230294, 1230331, 1230333, 1231348, 1232999, 1233819, 1234089, 1237335
CVE References: CVE-2023-45142, CVE-2023-47108, CVE-2024-29018, CVE-2024-41110
Sources used:
SUSE Linux Micro 6.1 (src):
 docker-27.5.1_ce-slfo.1.1_1.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 26 Maintenance Automation 2025-06-04 07:40:58 UTC 
SUSE-SU-2025:20259-1: An update that solves four vulnerabilities and has nine fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2025/suse-su-202520259-1
Category: security (critical)
Bug References: 1217070, 1223409, 1228324, 1228553, 1229806, 1230294, 1230331, 1230333, 1231348, 1232999, 1233819, 1234089, 1237335
CVE References: CVE-2023-45142, CVE-2023-47108, CVE-2024-29018, CVE-2024-41110
Sources used:
SUSE Linux Micro 6.1 (src):
 docker-27.5.1_ce-slfo.1.1_1.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 27 Maintenance Automation 2025-06-04 08:49:14 UTC 
SUSE-SU-2025:20110-1: An update that solves three vulnerabilities and has seven fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2025/suse-su-202520110-1
Category: security (critical)
Bug References: 1217070, 1228324, 1228553, 1229806, 1230294, 1230331, 1230333, 1231348, 1232999, 1233819
CVE References: CVE-2023-45142, CVE-2023-47108, CVE-2024-41110
Sources used:
SUSE Linux Micro 6.0 (src):
 docker-26.1.5_ce-1.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 28 Maintenance Automation 2025-06-04 08:54:37 UTC 
SUSE-SU-2025:20110-1: An update that solves three vulnerabilities and has seven fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2025/suse-su-202520110-1
Category: security (critical)
Bug References: 1217070, 1228324, 1228553, 1229806, 1230294, 1230331, 1230333, 1231348, 1232999, 1233819
CVE References: CVE-2023-45142, CVE-2023-47108, CVE-2024-41110
Sources used:
SUSE Linux Micro 6.0 (src):
 docker-26.1.5_ce-1.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 29 Maintenance Automation 2025-06-04 08:55:08 UTC 
SUSE-SU-2025:20056-1: An update that solves four vulnerabilities and has seven fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2025/suse-su-202520056-1
Category: security (critical)
Bug References: 1210141, 1214855, 1215323, 1217513, 1219267, 1219268, 1219438, 1220339, 1221916, 1223409, 1228324
CVE References: CVE-2024-23651, CVE-2024-23652, CVE-2024-23653, CVE-2024-41110
Sources used:
SUSE Linux Micro 6.0 (src):
 docker-25.0.6_ce-1.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 30 Maintenance Automation 2025-06-04 09:01:28 UTC 
SUSE-SU-2025:20056-1: An update that solves four vulnerabilities and has seven fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2025/suse-su-202520056-1
Category: security (critical)
Bug References: 1210141, 1214855, 1215323, 1217513, 1219267, 1219268, 1219438, 1220339, 1221916, 1223409, 1228324
CVE References: CVE-2024-23651, CVE-2024-23652, CVE-2024-23653, CVE-2024-41110
Sources used:
SUSE Linux Micro 6.0 (src):
 docker-25.0.6_ce-1.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.