Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:2383-1

Опубликовано: 10 июл. 2024
Источник: suse-cvrf

Описание

Security update for skopeo

This update for skopeo fixes the following issues:

  • CVE-2024-3727: Added missing image digest verification (bsc#1224123).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
skopeo-0.1.41-150000.4.23.1
SUSE Linux Enterprise Server 15 SP2-LTSS
skopeo-0.1.41-150000.4.23.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
skopeo-0.1.41-150000.4.23.1

Ссылки

Описание

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:skopeo-0.1.41-150000.4.23.1
SUSE Linux Enterprise Server 15 SP2-LTSS:skopeo-0.1.41-150000.4.23.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2:skopeo-0.1.41-150000.4.23.1
Ссылки