Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog
Консоль
Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog

exploitDog

suse-cvrf Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

SUSE-SU-2025:1055-1

ΠžΠΏΡƒΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ: 28 ΠΌΠ°Ρ€. 2025
Π˜ΡΡ‚ΠΎΡ‡Π½ΠΈΠΊ: suse-cvrf

ОписаниС

Security update for skopeo

This update for skopeo fixes the following issues:

  • CVE-2025-22870: Fixed proxy bypass using IPv6 zone IDs (bsc#1238685).

Бписок ΠΏΠ°ΠΊΠ΅Ρ‚ΠΎΠ²

SUSE Linux Enterprise Micro 5.5
skopeo-1.14.4-150300.11.22.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
skopeo-1.14.4-150300.11.22.1
skopeo-bash-completion-1.14.4-150300.11.22.1
skopeo-zsh-completion-1.14.4-150300.11.22.1
openSUSE Leap 15.6
skopeo-1.14.4-150300.11.22.1
skopeo-bash-completion-1.14.4-150300.11.22.1
skopeo-fish-completion-1.14.4-150300.11.22.1
skopeo-zsh-completion-1.14.4-150300.11.22.1

Бсылки

ОписаниС

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Π—Π°Ρ‚Ρ€ΠΎΠ½ΡƒΡ‚Ρ‹Π΅ ΠΏΡ€ΠΎΠ΄ΡƒΠΊΡ‚Ρ‹
SUSE Linux Enterprise Micro 5.5:skopeo-1.14.4-150300.11.22.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:skopeo-1.14.4-150300.11.22.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:skopeo-bash-completion-1.14.4-150300.11.22.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:skopeo-zsh-completion-1.14.4-150300.11.22.1
Бсылки
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ SUSE-SU-2025:1055-1