< back to search

shield Security update for skopeo

SUSE-SLE-Micro-5.5-2025-420

This update for skopeo fixes the following issues: - CVE-2024-6104: possible sensitive data exposure due to hashicorp/go-retryablehttp not sanitizing URLs when writing them to log files. (bsc#1227056) - CVE-2023-45288: possible excessive CPU consumption due to no limit being set on the number of CONTINUATION frames read for an HTTP/2 request in golang.org/x/net/http2. (bsc#1236483)

Release Date

Feb 11 2025
References

Bugzilla: 1227056, 1236483
CVEs: CVE-2024-6104, CVE-2023-45288
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Micro 5.5 s390x

Packages

skopeo
Container image repository tool

1.14.4-150300.11.16.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.5 aarch64

Packages

skopeo
Container image repository tool

1.14.4-150300.11.16.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.5 x86_64

Packages

skopeo
Container image repository tool

1.14.4-150300.11.16.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.5 ppc64le

Packages

skopeo
Container image repository tool

1.14.4-150300.11.16.1 lock rpm lock src