SUSE-SU-2026:2578-1

Vulnerability from csaf_suse - Published: 2026-06-23 13:12 - Updated: 2026-06-23 13:12
Summary
Security update for docker-stable
Severity
Important
Notes
Title of the patch: Security update for docker-stable
Description of the patch: This update for docker-stable fixes the following issues - CVE-2026-33747: github.com/moby/buildkit: malicious frontends can craft API messages that cause files to be written outside of the BuildKit state directory (bsc#1260967). - CVE-2026-33748: github.com/moby/buildkit: insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository (bsc#1261078). - CVE-2026-33997: Fixed privilege validation bypass during plugin (bsc#1265907). - CVE-2026-34040: Fixed Authz zero length regression (bsc#1265929).
Patchnames: SUSE-2026-2578,SUSE-SLE-SERVER-12-SP5-LTSS-2026-2578,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2578
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2026-33747
8.4 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch —
Vendor Fix
Threats
Impact important
CVE-2026-33748
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch —
Vendor Fix
Threats
Impact important
CVE-2026-33997
8.4 (High)
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch —
Vendor Fix
Threats
Impact important
CVE-2026-34040
8.4 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch —
Vendor Fix
Threats
Impact important
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for docker-stable",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for docker-stable fixes the following issues\n\n- CVE-2026-33747: github.com/moby/buildkit: malicious frontends can craft API messages that cause files to be written\n  outside of the BuildKit state directory (bsc#1260967).\n- CVE-2026-33748: github.com/moby/buildkit: insufficient validation of Git URL fragment subdir components may allow\n  access to files outside the checked-out Git repository (bsc#1261078).\n- CVE-2026-33997: Fixed privilege validation bypass during plugin (bsc#1265907).\n- CVE-2026-34040: Fixed Authz zero length regression (bsc#1265929).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2026-2578,SUSE-SLE-SERVER-12-SP5-LTSS-2026-2578,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2578",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2578-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:2578-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262578-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:2578-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026968.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1260967",
        "url": "https://bugzilla.suse.com/1260967"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261078",
        "url": "https://bugzilla.suse.com/1261078"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1265907",
        "url": "https://bugzilla.suse.com/1265907"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1265929",
        "url": "https://bugzilla.suse.com/1265929"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33747 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33747/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33748 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33748/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33997 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33997/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-34040 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-34040/"
      }
    ],
    "title": "Security update for docker-stable",
    "tracking": {
      "current_release_date": "2026-06-23T13:12:07Z",
      "generator": {
        "date": "2026-06-23T13:12:07Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:2578-1",
      "initial_release_date": "2026-06-23T13:12:07Z",
      "revision_history": [
        {
          "date": "2026-06-23T13:12:07Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-stable-24.0.9_ce-1.37.1.aarch64",
                "product": {
                  "name": "docker-stable-24.0.9_ce-1.37.1.aarch64",
                  "product_id": "docker-stable-24.0.9_ce-1.37.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-stable-24.0.9_ce-1.37.1.i586",
                "product": {
                  "name": "docker-stable-24.0.9_ce-1.37.1.i586",
                  "product_id": "docker-stable-24.0.9_ce-1.37.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
                "product": {
                  "name": "docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
                  "product_id": "docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-fish-completion-24.0.9_ce-1.37.1.noarch",
                "product": {
                  "name": "docker-stable-fish-completion-24.0.9_ce-1.37.1.noarch",
                  "product_id": "docker-stable-fish-completion-24.0.9_ce-1.37.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-rootless-extras-24.0.9_ce-1.37.1.noarch",
                "product": {
                  "name": "docker-stable-rootless-extras-24.0.9_ce-1.37.1.noarch",
                  "product_id": "docker-stable-rootless-extras-24.0.9_ce-1.37.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-zsh-completion-24.0.9_ce-1.37.1.noarch",
                "product": {
                  "name": "docker-stable-zsh-completion-24.0.9_ce-1.37.1.noarch",
                  "product_id": "docker-stable-zsh-completion-24.0.9_ce-1.37.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-stable-24.0.9_ce-1.37.1.ppc64le",
                "product": {
                  "name": "docker-stable-24.0.9_ce-1.37.1.ppc64le",
                  "product_id": "docker-stable-24.0.9_ce-1.37.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-stable-24.0.9_ce-1.37.1.s390x",
                "product": {
                  "name": "docker-stable-24.0.9_ce-1.37.1.s390x",
                  "product_id": "docker-stable-24.0.9_ce-1.37.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-stable-24.0.9_ce-1.37.1.x86_64",
                "product": {
                  "name": "docker-stable-24.0.9_ce-1.37.1.x86_64",
                  "product_id": "docker-stable-24.0.9_ce-1.37.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-24.0.9_ce-1.37.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.aarch64"
        },
        "product_reference": "docker-stable-24.0.9_ce-1.37.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-24.0.9_ce-1.37.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.ppc64le"
        },
        "product_reference": "docker-stable-24.0.9_ce-1.37.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-24.0.9_ce-1.37.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.s390x"
        },
        "product_reference": "docker-stable-24.0.9_ce-1.37.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-24.0.9_ce-1.37.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.x86_64"
        },
        "product_reference": "docker-stable-24.0.9_ce-1.37.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch"
        },
        "product_reference": "docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-24.0.9_ce-1.37.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.aarch64"
        },
        "product_reference": "docker-stable-24.0.9_ce-1.37.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-24.0.9_ce-1.37.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.ppc64le"
        },
        "product_reference": "docker-stable-24.0.9_ce-1.37.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-24.0.9_ce-1.37.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.s390x"
        },
        "product_reference": "docker-stable-24.0.9_ce-1.37.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-24.0.9_ce-1.37.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64"
        },
        "product_reference": "docker-stable-24.0.9_ce-1.37.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch"
        },
        "product_reference": "docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-24.0.9_ce-1.37.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64"
        },
        "product_reference": "docker-stable-24.0.9_ce-1.37.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch"
        },
        "product_reference": "docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-33747",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33747"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, when using a custom BuildKit frontend, the frontend can craft an API message that causes files to be written outside of the BuildKit state directory for the execution context. The issue has been fixed in v0.28.1. The vulnerability requires using an untrusted BuildKit frontend set with `#syntax` or `--build-arg BUILDKIT_SYNTAX`. Using these options with a well-known frontend image like `docker/dockerfile` is not affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33747",
          "url": "https://www.suse.com/security/cve/CVE-2026-33747"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260954 for CVE-2026-33747",
          "url": "https://bugzilla.suse.com/1260954"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-23T13:12:07Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33747"
    },
    {
      "cve": "CVE-2026-33748",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33748"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root. Possible access is limited to files on the same mounted filesystem. The issue has been fixed in version v0.28.1 The issue affects only builds that use Git URLs with a subpath component. As a workaround, avoid building Dockerfiles from untrusted sources or using the subdir component from an untrusted Git repository where the subdir component could point to a symlink.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33748",
          "url": "https://www.suse.com/security/cve/CVE-2026-33748"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261046 for CVE-2026-33748",
          "url": "https://bugzilla.suse.com/1261046"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-23T13:12:07Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33748"
    },
    {
      "cve": "CVE-2026-33997",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33997"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon\u0027s privilege comparison logic, the daemon may incorrectly accept a privilege set that differs from the one approved by the user. Plugins that request exactly one privilege are also affected, because no comparison is performed at all. This issue has been patched in version 29.3.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33997",
          "url": "https://www.suse.com/security/cve/CVE-2026-33997"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1265907 for CVE-2026-33997",
          "url": "https://bugzilla.suse.com/1265907"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-23T13:12:07Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33997"
    },
    {
      "cve": "CVE-2026-34040",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-34040"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This issue has been patched in version 29.3.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-34040",
          "url": "https://www.suse.com/security/cve/CVE-2026-34040"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261378 for CVE-2026-34040",
          "url": "https://bugzilla.suse.com/1261378"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1265929 for CVE-2026-34040",
          "url": "https://bugzilla.suse.com/1265929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.37.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.37.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-23T13:12:07Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-34040"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.