SUSE-SU-2026:5182-1: Security update for docker

Q: Which systems should be prioritized for this update?

Prioritize SUSE systems running the affected docker package where the host process may handle AWS SDK for Go v2 EventStream responses. A crafted malformed EventStream response can terminate the host process.

Published Nov 10, 2026

Updated

This update for docker fixes the following issue:

- CVE-2026-89090: github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: malformed EventStream response frames containing a crafted header value type byte outside the valid range can cause the host process to terminate (bsc#1280683).

Affected Software

1 affected componentFixes available

suse/docker<28.5.1_ce-98.154.1

28.5.1_ce-98.154.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/docker to a version that resolves this vulnerability.
Fixed in 28.5.1_ce-98.154.1

Event History

Nov 10, 2026

Advisory Published

via OSV·05:40 PM

Data Sourced

via OSV·05:40 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-89090

Frequently Asked Questions

Which systems should be prioritized for this update?

Prioritize SUSE systems running the affected docker package where the host process may handle AWS SDK for Go v2 EventStream responses. A crafted malformed EventStream response can terminate the host process.

SUSE-SU-2026:5182-1: Security update for docker

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which systems should be prioritized for this update?

Company

Resources

Contact

Frequently Asked Questions

Which systems should be prioritized for this update?