SUSE-SU-2025:20205-1

Updated to docker-buildx v0.22.0.
Updated to Docker 27.5.1-ce.
CVE-2025-0495: buildx: Fixed credential leakage to telemetry endpoints (bsc#1239765)
CVE-2025-22868: Fixed golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239185)
CVE-2025-22869: Fixed golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239322).
CVE-2024-29018:moby: external DNS requests from 'internal' networks could lead to data exfiltration (bsc#1234089)
Make container-selinux requirement conditional on selinux-policy (bsc#1237367)

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

27.5.1_ce-2.1

{
    "binaries": [
        {
            "docker": "27.5.1_ce-2.1",
            "docker-buildx": "0.22.0-2.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20205-1.json"