Описание
Security update for docker-distribution
This update for docker-distribution fixes the following issues:
Security issues fixed:
- CVE-2017-11468: Fixed a denial of service (memory consumption) via the manifest endpoint (bsc#1049850).
Bug fixes:
- bsc#1083474: docker-distirbution-registry overwrites configuration file with update.
- bsc#1033172: Garbage collector needed - or kindly release docker-distribution-registry in Version 2.4.
- Add SuSEfirewall2 service file for TCP port 5000.
Список пакетов
SUSE Linux Enterprise Module for Containers 12
docker-distribution-registry-2.6.2-13.6.1
Ссылки
- Link for SUSE-SU-2018:0865-1
- E-Mail link for SUSE-SU-2018:0865-1
- SUSE Security Ratings
- SUSE Bug 1033172
- SUSE Bug 1049850
- SUSE Bug 1083474
- SUSE CVE CVE-2017-11468 page
Описание
Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a user, which allows remote attackers to cause a denial of service (memory consumption) via the manifest endpoint.
Затронутые продукты
SUSE Linux Enterprise Module for Containers 12:docker-distribution-registry-2.6.2-13.6.1
Ссылки
- CVE-2017-11468
- SUSE Bug 1049850