SUSE-RU-2024:4391-1

Dashboard / Vulnerabilities / SUSE-RU-2024:4391-1

SUSE-RU-2024:4391-1

Summary: Recommended update for docker-stable

Details: This update for docker-stable fixes the following issues: - Update docker-buildx to v0.19.2. See upstream changelog online at <https://github.com/docker/buildx/releases/tag/v0.19.2>. Some notable changelogs from the last update: * <https://github.com/docker/buildx/releases/tag/v0.19.0> * <https://github.com/docker/buildx/releases/tag/v0.18.0> - Add a new toggle file /etc/docker/suse-secrets-enable which allows users to disable the SUSEConnect integration with Docker (which creates special mounts in /run/secrets to allow container-suseconnect to authenticate containers with registries on registered hosts). bsc#1231348 bsc#1232999 In order to disable these mounts, just do echo 0 > /etc/docker/suse-secrets-enable and restart Docker. In order to re-enable them, just do echo 1 > /etc/docker/suse-secrets-enable and restart Docker. Docker will output information on startup to tell you whether the SUSE secrets feature is enabled or not.

References: https://www.suse.com/support/update/announcement/-2024-4391/suse-ru-20244391-1/, https://bugzilla.suse.com/1231348, https://bugzilla.suse.com/1232999, https://www.suse.com/security/cve/CVE-2024-23653, https://www.suse.com/security/cve/CVE-2024-41110