SUSE-SU-2026:22367-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-202622367-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22367-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:22367-1
- Upstream
- Related
- Published
- 2026-06-25T12:44:31Z
- Modified
- 2026-07-02T18:24:12Z
- Summary
- Security update for docker
- Details
-
This update for docker fixes the following issues
- CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782).
- CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266625).
- CVE-2026-39984: github.com/sigstore/timestamp-authority/v2/pkg/verification: improper certificate validation can be used to bypass some authorization controls (bsc#1262346).
- CVE-2026-41567: arbitrary code execution with full daemon privileges when a user uploads a compressed archive into that container (bsc#1267827).
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-202622367-1/
- https://bugzilla.suse.com/1262346
- https://bugzilla.suse.com/1265782
- https://bugzilla.suse.com/1266625
- https://bugzilla.suse.com/1267827
- https://www.suse.com/security/cve/CVE-2026-33814
- https://www.suse.com/security/cve/CVE-2026-39821
- https://www.suse.com/security/cve/CVE-2026-39984
- https://www.suse.com/security/cve/CVE-2026-41567
Affected packages
SUSE:Linux Enterprise Server 16.0 / docker
Package
- Name
- docker
- Purl
- pkg:rpm/suse/docker&distro=SUSE%20Linux%20Enterprise%20Server%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed29.4.0_ce-160000.7.1
Ecosystem specific
{
"binaries": [
{
"docker": "29.4.0_ce-160000.7.1",
"docker-bash-completion": "29.4.0_ce-160000.7.1",
"docker-buildx": "0.33.0-160000.7.1",
"docker-fish-completion": "29.4.0_ce-160000.7.1",
"docker-rootless-extras": "29.4.0_ce-160000.7.1",
"docker-zsh-completion": "29.4.0_ce-160000.7.1"
}
]
}
SUSE:Linux Enterprise Server for SAP applications 16.0 / docker
Package
- Name
- docker
- Purl
- pkg:rpm/suse/docker&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed29.4.0_ce-160000.7.1
Ecosystem specific
{
"binaries": [
{
"docker": "29.4.0_ce-160000.7.1",
"docker-bash-completion": "29.4.0_ce-160000.7.1",
"docker-buildx": "0.33.0-160000.7.1",
"docker-fish-completion": "29.4.0_ce-160000.7.1",
"docker-rootless-extras": "29.4.0_ce-160000.7.1",
"docker-zsh-completion": "29.4.0_ce-160000.7.1"
}
]
}