Security update for docker SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:0795-2 Final 1 1 2023-04-27T14:06:40Z current 2023-04-27T14:06:40Z 2023-04-27T14:06:40Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for docker This update for docker fixes the following issues: Docker was updated to 20.10.23-ce. See upstream changelog at https://docs.docker.com/engine/release-notes/#201023 Docker was updated to 20.10.21-ce (bsc#1206065) See upstream changelog at https://docs.docker.com/engine/release-notes/#201021 Security issues fixed: - CVE-2022-36109: Fixed supplementary group permissions bypass (bsc#1205375) - Fix wrong After: in docker.service, fixes bsc#1188447 - Add apparmor-parser as a Recommends to make sure that most users will end up with it installed even if they are primarily running SELinux. - Allow to install container-selinux instead of apparmor-parser. - Change to using systemd-sysusers The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP3-CHOST-BYOS-Aliyun-2023-795,Image SLES15-SP3-CHOST-BYOS-Azure-2023-795,Image SLES15-SP3-CHOST-BYOS-EC2-2023-795,Image SLES15-SP3-CHOST-BYOS-GCE-2023-795,Image SLES15-SP3-CHOST-BYOS-SAP-CCloud-2023-795,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure-2023-795,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM-2023-795,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE-2023-795,Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure-2023-795,Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM-2023-795,Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE-2023-795,Image SLES15-SP3-Micro-5-1-BYOS-Azure-2023-795,Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM-2023-795,Image SLES15-SP3-Micro-5-1-BYOS-GCE-2023-795,Image SLES15-SP3-Micro-5-2-BYOS-Azure-2023-795,Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM-2023-795,Image SLES15-SP3-Micro-5-2-BYOS-GCE-2023-795,Image SLES15-SP4-2023-795,Image SLES15-SP4-Azure-Basic-2023-795,Image SLES15-SP4-Azure-Standard-2023-795,Image SLES15-SP4-BYOS-2023-795,Image SLES15-SP4-BYOS-Azure-2023-795,Image SLES15-SP4-BYOS-EC2-2023-795,Image SLES15-SP4-BYOS-GCE-2023-795,Image SLES15-SP4-CHOST-BYOS-2023-795,Image SLES15-SP4-CHOST-BYOS-Aliyun-2023-795,Image SLES15-SP4-CHOST-BYOS-Azure-2023-795,Image SLES15-SP4-CHOST-BYOS-EC2-2023-795,Image SLES15-SP4-CHOST-BYOS-GCE-2023-795,Image SLES15-SP4-CHOST-BYOS-SAP-CCloud-2023-795,Image SLES15-SP4-EC2-2023-795,Image SLES15-SP4-EC2-ECS-HVM-2023-795,Image SLES15-SP4-GCE-2023-795,Image SLES15-SP4-HPC-2023-795,Image SLES15-SP4-HPC-Azure-2023-795,Image SLES15-SP4-HPC-BYOS-2023-795,Image SLES15-SP4-HPC-BYOS-Azure-2023-795,Image SLES15-SP4-HPC-BYOS-EC2-2023-795,Image SLES15-SP4-HPC-BYOS-GCE-2023-795,Image SLES15-SP4-HPC-EC2-2023-795,Image SLES15-SP4-HPC-GCE-2023-795,Image SLES15-SP4-Hardened-BYOS-2023-795,Image SLES15-SP4-Hardened-BYOS-Azure-2023-795,Image SLES15-SP4-Hardened-BYOS-EC2-2023-795,Image SLES15-SP4-Hardened-BYOS-GCE-2023-795,Image SLES15-SP4-Manager-Proxy-4-3-BYOS-2023-795,Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure-2023-795,Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2-2023-795,Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE-2023-795,Image SLES15-SP4-Manager-Server-4-3-BYOS-2023-795,Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure-2023-795,Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2-2023-795,Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE-2023-795,Image SLES15-SP4-Micro-5-3-2023-795,Image SLES15-SP4-Micro-5-3-Azure-2023-795,Image SLES15-SP4-Micro-5-3-BYOS-2023-795,Image SLES15-SP4-Micro-5-3-BYOS-Azure-2023-795,Image SLES15-SP4-Micro-5-3-BYOS-EC2-2023-795,Image SLES15-SP4-Micro-5-3-BYOS-GCE-2023-795,Image SLES15-SP4-Micro-5-3-EC2-2023-795,Image SLES15-SP4-Micro-5-3-GCE-2023-795,Image SLES15-SP4-Micro-5-4-2023-795,Image SLES15-SP4-Micro-5-4-Azure-2023-795,Image SLES15-SP4-Micro-5-4-BYOS-2023-795,Image SLES15-SP4-Micro-5-4-BYOS-Azure-2023-795,Image SLES15-SP4-Micro-5-4-BYOS-EC2-2023-795,Image SLES15-SP4-Micro-5-4-BYOS-GCE-2023-795,Image SLES15-SP4-Micro-5-4-EC2-2023-795,Image SLES15-SP4-Micro-5-4-GCE-2023-795,Image SLES15-SP4-SAP-2023-795,Image SLES15-SP4-SAP-Azure-2023-795,Image SLES15-SP4-SAP-BYOS-2023-795,Image SLES15-SP4-SAP-BYOS-Azure-2023-795,Image SLES15-SP4-SAP-BYOS-EC2-2023-795,Image SLES15-SP4-SAP-BYOS-GCE-2023-795,Image SLES15-SP4-SAP-EC2-2023-795,Image SLES15-SP4-SAP-GCE-2023-795,Image SLES15-SP4-SAP-Hardened-2023-795,Image SLES15-SP4-SAP-Hardened-Azure-2023-795,Image SLES15-SP4-SAP-Hardened-BYOS-2023-795,Image SLES15-SP4-SAP-Hardened-BYOS-Azure-2023-795,Image SLES15-SP4-SAP-Hardened-BYOS-EC2-2023-795,Image SLES15-SP4-SAP-Hardened-BYOS-GCE-2023-795,Image SLES15-SP4-SAP-Hardened-EC2-2023-795,Image SLES15-SP4-SAP-Hardened-GCE-2023-795,Image SLES15-SP4-SAPCAL-2023-795,Image SLES15-SP4-SAPCAL-Azure-2023-795,Image SLES15-SP4-SAPCAL-EC2-2023-795,Image SLES15-SP4-SAPCAL-GCE-2023-795,Image SLES15-SP5-Azure-Basic-2023-795,Image SLES15-SP5-Azure-Standard-2023-795,Image SLES15-SP5-BYOS-Azure-2023-795,Image SLES15-SP5-BYOS-EC2-2023-795,Image SLES15-SP5-BYOS-GCE-2023-795,Image SLES15-SP5-CHOST-BYOS-Aliyun-2023-795,Image SLES15-SP5-CHOST-BYOS-Azure-2023-795,Image SLES15-SP5-CHOST-BYOS-EC2-2023-795,Image SLES15-SP5-CHOST-BYOS-GCE-2023-795,Image SLES15-SP5-CHOST-BYOS-SAP-CCloud-2023-795,Image SLES15-SP5-EC2-2023-795,Image SLES15-SP5-EC2-ECS-HVM-2023-795,Image SLES15-SP5-GCE-2023-795,Image SLES15-SP5-HPC-Azure-2023-795,Image SLES15-SP5-HPC-BYOS-Azure-2023-795,Image SLES15-SP5-HPC-BYOS-EC2-2023-795,Image SLES15-SP5-HPC-BYOS-GCE-2023-795,Image SLES15-SP5-HPC-EC2-2023-795,Image SLES15-SP5-HPC-GCE-2023-795,Image SLES15-SP5-Hardened-BYOS-Azure-2023-795,Image SLES15-SP5-Hardened-BYOS-EC2-2023-795,Image SLES15-SP5-Hardened-BYOS-GCE-2023-795,Image SLES15-SP5-Micro-5-5-2023-795,Image SLES15-SP5-Micro-5-5-Azure-2023-795,Image SLES15-SP5-Micro-5-5-BYOS-2023-795,Image SLES15-SP5-Micro-5-5-BYOS-Azure-2023-795,Image SLES15-SP5-Micro-5-5-BYOS-EC2-2023-795,Image SLES15-SP5-Micro-5-5-BYOS-GCE-2023-795,Image SLES15-SP5-Micro-5-5-EC2-2023-795,Image SLES15-SP5-Micro-5-5-GCE-2023-795,Image SLES15-SP5-SAP-Azure-2023-795,Image SLES15-SP5-SAP-BYOS-Azure-2023-795,Image SLES15-SP5-SAP-BYOS-EC2-2023-795,Image SLES15-SP5-SAP-BYOS-GCE-2023-795,Image SLES15-SP5-SAP-EC2-2023-795,Image SLES15-SP5-SAP-GCE-2023-795,Image SLES15-SP5-SAP-Hardened-Azure-2023-795,Image SLES15-SP5-SAP-Hardened-BYOS-Azure-2023-795,Image SLES15-SP5-SAP-Hardened-BYOS-EC2-2023-795,Image SLES15-SP5-SAP-Hardened-BYOS-GCE-2023-795,Image SLES15-SP5-SAP-Hardened-EC2-2023-795,Image SLES15-SP5-SAP-Hardened-GCE-2023-795,Image SLES15-SP5-SAPCAL-Azure-2023-795,Image SLES15-SP5-SAPCAL-EC2-2023-795,Image SLES15-SP5-SAPCAL-GCE-2023-795,SUSE-2023-795,SUSE-SLE-Micro-5.4-2023-795 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20230795-2/ Link for SUSE-SU-2023:0795-2 https://lists.suse.com/pipermail/sle-updates/2023-April/029040.html E-Mail link for SUSE-SU-2023:0795-2 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1205375 SUSE Bug 1205375 https://bugzilla.suse.com/1206065 SUSE Bug 1206065 https://www.suse.com/security/cve/CVE-2022-36109/ SUSE CVE CVE-2022-36109 page Image SLES15-SP3-CHOST-BYOS-Aliyun Image SLES15-SP3-CHOST-BYOS-Azure Image SLES15-SP3-CHOST-BYOS-EC2 Image SLES15-SP3-CHOST-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-SAP-CCloud Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE Image SLES15-SP3-Micro-5-1-BYOS-Azure Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-1-BYOS-GCE Image SLES15-SP3-Micro-5-2-BYOS-Azure Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-2-BYOS-GCE Image SLES15-SP4 Image SLES15-SP4-Azure-Basic Image SLES15-SP4-Azure-Standard Image SLES15-SP4-BYOS Image SLES15-SP4-BYOS-Azure Image SLES15-SP4-BYOS-EC2 Image SLES15-SP4-BYOS-GCE Image SLES15-SP4-CHOST-BYOS Image SLES15-SP4-CHOST-BYOS-Aliyun Image SLES15-SP4-CHOST-BYOS-Azure Image SLES15-SP4-CHOST-BYOS-EC2 Image SLES15-SP4-CHOST-BYOS-GCE Image SLES15-SP4-CHOST-BYOS-SAP-CCloud Image SLES15-SP4-EC2 Image SLES15-SP4-EC2-ECS-HVM Image SLES15-SP4-GCE Image SLES15-SP4-HPC Image SLES15-SP4-HPC-Azure Image SLES15-SP4-HPC-BYOS Image SLES15-SP4-HPC-BYOS-Azure Image SLES15-SP4-HPC-BYOS-EC2 Image SLES15-SP4-HPC-BYOS-GCE Image SLES15-SP4-HPC-EC2 Image SLES15-SP4-HPC-GCE Image SLES15-SP4-Hardened-BYOS Image SLES15-SP4-Hardened-BYOS-Azure Image SLES15-SP4-Hardened-BYOS-EC2 Image SLES15-SP4-Hardened-BYOS-GCE Image SLES15-SP4-Manager-Proxy-4-3-BYOS Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE Image SLES15-SP4-Micro-5-3 Image SLES15-SP4-Micro-5-3-Azure Image SLES15-SP4-Micro-5-3-BYOS Image SLES15-SP4-Micro-5-3-BYOS-Azure Image SLES15-SP4-Micro-5-3-BYOS-EC2 Image SLES15-SP4-Micro-5-3-BYOS-GCE Image SLES15-SP4-Micro-5-3-EC2 Image SLES15-SP4-Micro-5-3-GCE Image SLES15-SP4-Micro-5-4 Image SLES15-SP4-Micro-5-4-Azure Image SLES15-SP4-Micro-5-4-BYOS Image SLES15-SP4-Micro-5-4-BYOS-Azure Image SLES15-SP4-Micro-5-4-BYOS-EC2 Image SLES15-SP4-Micro-5-4-BYOS-GCE Image SLES15-SP4-Micro-5-4-EC2 Image SLES15-SP4-Micro-5-4-GCE Image SLES15-SP4-SAP Image SLES15-SP4-SAP-Azure Image SLES15-SP4-SAP-BYOS Image SLES15-SP4-SAP-BYOS-Azure Image SLES15-SP4-SAP-BYOS-EC2 Image SLES15-SP4-SAP-BYOS-GCE Image SLES15-SP4-SAP-EC2 Image SLES15-SP4-SAP-GCE Image SLES15-SP4-SAP-Hardened Image SLES15-SP4-SAP-Hardened-Azure Image SLES15-SP4-SAP-Hardened-BYOS Image SLES15-SP4-SAP-Hardened-BYOS-Azure Image SLES15-SP4-SAP-Hardened-BYOS-EC2 Image SLES15-SP4-SAP-Hardened-BYOS-GCE Image SLES15-SP4-SAP-Hardened-EC2 Image SLES15-SP4-SAP-Hardened-GCE Image SLES15-SP4-SAPCAL Image SLES15-SP4-SAPCAL-Azure Image SLES15-SP4-SAPCAL-EC2 Image SLES15-SP4-SAPCAL-GCE Image SLES15-SP5-Azure-Basic Image SLES15-SP5-Azure-Standard Image SLES15-SP5-BYOS-Azure Image SLES15-SP5-BYOS-EC2 Image SLES15-SP5-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-Aliyun Image SLES15-SP5-CHOST-BYOS-Azure Image SLES15-SP5-CHOST-BYOS-EC2 Image SLES15-SP5-CHOST-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-SAP-CCloud Image SLES15-SP5-EC2 Image SLES15-SP5-EC2-ECS-HVM Image SLES15-SP5-GCE Image SLES15-SP5-HPC-Azure Image SLES15-SP5-HPC-BYOS-Azure Image SLES15-SP5-HPC-BYOS-EC2 Image SLES15-SP5-HPC-BYOS-GCE Image SLES15-SP5-HPC-EC2 Image SLES15-SP5-HPC-GCE Image SLES15-SP5-Hardened-BYOS-Azure Image SLES15-SP5-Hardened-BYOS-EC2 Image SLES15-SP5-Hardened-BYOS-GCE Image SLES15-SP5-Micro-5-5 Image SLES15-SP5-Micro-5-5-Azure Image SLES15-SP5-Micro-5-5-BYOS Image SLES15-SP5-Micro-5-5-BYOS-Azure Image SLES15-SP5-Micro-5-5-BYOS-EC2 Image SLES15-SP5-Micro-5-5-BYOS-GCE Image SLES15-SP5-Micro-5-5-EC2 Image SLES15-SP5-Micro-5-5-GCE Image SLES15-SP5-SAP-Azure Image SLES15-SP5-SAP-BYOS-Azure Image SLES15-SP5-SAP-BYOS-EC2 Image SLES15-SP5-SAP-BYOS-GCE Image SLES15-SP5-SAP-EC2 Image SLES15-SP5-SAP-GCE Image SLES15-SP5-SAP-Hardened-Azure Image SLES15-SP5-SAP-Hardened-BYOS-Azure Image SLES15-SP5-SAP-Hardened-BYOS-EC2 Image SLES15-SP5-SAP-Hardened-BYOS-GCE Image SLES15-SP5-SAP-Hardened-EC2 Image SLES15-SP5-SAP-Hardened-GCE Image SLES15-SP5-SAPCAL-Azure Image SLES15-SP5-SAPCAL-EC2 Image SLES15-SP5-SAPCAL-GCE SUSE Linux Enterprise Micro 5.4 docker-20.10.23_ce-150000.175.1 docker-bash-completion-20.10.23_ce-150000.175.1 docker-fish-completion-20.10.23_ce-150000.175.1 docker-zsh-completion-20.10.23_ce-150000.175.1 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP3-CHOST-BYOS-Aliyun docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP3-CHOST-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP3-CHOST-BYOS-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP3-CHOST-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP3-CHOST-BYOS-SAP-CCloud docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Azure-Basic docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Azure-Standard docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-BYOS docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-BYOS-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-CHOST-BYOS docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-CHOST-BYOS-Aliyun docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-CHOST-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-CHOST-BYOS-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-CHOST-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-CHOST-BYOS-SAP-CCloud docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-EC2-ECS-HVM docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-HPC docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-HPC-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-HPC-BYOS docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-HPC-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-HPC-BYOS-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-HPC-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-HPC-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-HPC-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Hardened-BYOS docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Hardened-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Hardened-BYOS-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Hardened-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Manager-Proxy-4-3-BYOS docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Micro-5-3 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Micro-5-3-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Micro-5-3-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Micro-5-3-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Micro-5-4 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Micro-5-4-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Micro-5-4-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-Micro-5-4-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAP docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAP-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAP-BYOS docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAP-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAP-BYOS-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAP-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAP-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAP-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAP-Hardened docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAP-Hardened-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAP-Hardened-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAP-Hardened-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAPCAL docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAPCAL-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAPCAL-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP4-SAPCAL-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-Azure-Basic docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-Azure-Standard docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-BYOS-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-CHOST-BYOS-Aliyun docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-CHOST-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-CHOST-BYOS-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-CHOST-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-CHOST-BYOS-SAP-CCloud docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-EC2-ECS-HVM docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-HPC-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-HPC-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-HPC-BYOS-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-HPC-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-HPC-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-HPC-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-Hardened-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-Hardened-BYOS-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-Hardened-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-Micro-5-5 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-Micro-5-5-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-Micro-5-5-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-Micro-5-5-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-SAP-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-SAP-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-SAP-BYOS-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-SAP-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-SAP-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-SAP-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-SAP-Hardened-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-SAP-Hardened-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-SAP-Hardened-GCE docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-SAPCAL-Azure docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-SAPCAL-EC2 docker-20.10.23_ce-150000.175.1 as a component of Image SLES15-SP5-SAPCAL-GCE docker-20.10.23_ce-150000.175.1 as a component of SUSE Linux Enterprise Micro 5.4 Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where supplementary groups are not set up properly. If an attacker has direct access to a container and manipulates their supplementary group access, they may be able to use supplementary group access to bypass primary group restrictions in some cases, potentially gaining access to sensitive information or gaining the ability to execute code in that container. This bug is fixed in Moby (Docker Engine) 20.10.18. Running containers should be stopped and restarted for the permissions to be fixed. For users unable to upgrade, this problem can be worked around by not using the `"USER $USERNAME"` Dockerfile instruction. Instead by calling `ENTRYPOINT ["su", "-", "user"]` the supplementary groups will be set up properly. CVE-2022-36109 Image SLES15-SP3-CHOST-BYOS-Aliyun:docker-20.10.23_ce-150000.175.1 Image SLES15-SP3-CHOST-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP3-CHOST-BYOS-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP3-CHOST-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:docker-20.10.23_ce-150000.175.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:docker-20.10.23_ce-150000.175.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:docker-20.10.23_ce-150000.175.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:docker-20.10.23_ce-150000.175.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:docker-20.10.23_ce-150000.175.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Azure-Basic:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Azure-Standard:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-BYOS-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-BYOS:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-CHOST-BYOS-Aliyun:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-CHOST-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-CHOST-BYOS-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-CHOST-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-CHOST-BYOS-SAP-CCloud:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-CHOST-BYOS:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-EC2-ECS-HVM:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-HPC-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-HPC-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-HPC-BYOS-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-HPC-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-HPC-BYOS:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-HPC-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-HPC-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-HPC:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Hardened-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Hardened-BYOS-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Hardened-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Hardened-BYOS:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Micro-5-3-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Micro-5-3-BYOS:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Micro-5-3-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Micro-5-3-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Micro-5-3:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Micro-5-4-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Micro-5-4-BYOS:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Micro-5-4-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Micro-5-4-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-Micro-5-4:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAP-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAP-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAP-BYOS-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAP-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAP-BYOS:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAP-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAP-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAP-Hardened-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAP-Hardened-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAP-Hardened-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAP-Hardened-BYOS:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAP-Hardened-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAP-Hardened-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAP-Hardened:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAP:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAPCAL-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAPCAL-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAPCAL-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4-SAPCAL:docker-20.10.23_ce-150000.175.1 Image SLES15-SP4:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-Azure-Basic:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-Azure-Standard:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-BYOS-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-CHOST-BYOS-Aliyun:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-CHOST-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-CHOST-BYOS-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-CHOST-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-CHOST-BYOS-SAP-CCloud:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-EC2-ECS-HVM:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-HPC-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-HPC-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-HPC-BYOS-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-HPC-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-HPC-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-HPC-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-Hardened-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-Hardened-BYOS-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-Hardened-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-Micro-5-5-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-Micro-5-5-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-Micro-5-5-BYOS-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-Micro-5-5-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-Micro-5-5-BYOS:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-Micro-5-5-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-Micro-5-5-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-Micro-5-5:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-SAP-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-SAP-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-SAP-BYOS-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-SAP-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-SAP-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-SAP-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-SAP-Hardened-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-SAP-Hardened-BYOS-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-SAP-Hardened-BYOS-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-SAP-Hardened-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-SAP-Hardened-GCE:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-SAPCAL-Azure:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-SAPCAL-EC2:docker-20.10.23_ce-150000.175.1 Image SLES15-SP5-SAPCAL-GCE:docker-20.10.23_ce-150000.175.1 SUSE Linux Enterprise Micro 5.4:docker-20.10.23_ce-150000.175.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230795-2/ https://www.suse.com/security/cve/CVE-2022-36109.html CVE-2022-36109 https://bugzilla.suse.com/1205375 SUSE Bug 1205375