shield Security update for skopeo

SUSE-SLE-Module-Basesystem-15-SP6-2025-420

This update for skopeo fixes the following issues: - CVE-2024-6104: possible sensitive data exposure due to hashicorp/go-retryablehttp not sanitizing URLs when writing them to log files. (bsc#1227056) - CVE-2023-45288: possible excessive CPU consumption due to no limit being set on the number of CONTINUATION frames read for an HTTP/2 request in golang.org/x/net/http2. (bsc#1236483)

• Release Date
  Feb 11 2025
• References
  Bugzilla: 1227056, 1236483
  CVEs: CVE-2024-6104, CVE-2023-45288
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.6 s390x

• Packages
  skopeo
  Container image repository tool

  1.14.4-150300.11.16.1 lock rpm lock src

  skopeo-bash-completion
  Bash completion for skopeo

  1.14.4-150300.11.16.1 lock rpm

  skopeo-zsh-completion
  Zsh completion for skopeo

  1.14.4-150300.11.16.1 lock rpm

Basesystem Module 15.6 x86_64

• Packages
  skopeo
  Container image repository tool

  1.14.4-150300.11.16.1 lock rpm lock src

  skopeo-bash-completion
  Bash completion for skopeo

  1.14.4-150300.11.16.1 lock rpm

  skopeo-zsh-completion
  Zsh completion for skopeo

  1.14.4-150300.11.16.1 lock rpm

Basesystem Module 15.6 ppc64le

• Packages
  skopeo
  Container image repository tool

  1.14.4-150300.11.16.1 lock rpm lock src

  skopeo-bash-completion
  Bash completion for skopeo

  1.14.4-150300.11.16.1 lock rpm

  skopeo-zsh-completion
  Zsh completion for skopeo

  1.14.4-150300.11.16.1 lock rpm

Basesystem Module 15.6 aarch64

• Packages
  skopeo
  Container image repository tool

  1.14.4-150300.11.16.1 lock rpm lock src

  skopeo-bash-completion
  Bash completion for skopeo

  1.14.4-150300.11.16.1 lock rpm

  skopeo-zsh-completion
  Zsh completion for skopeo

  1.14.4-150300.11.16.1 lock rpm