Alerts This Week
Warning Icon 1 540
Alerts This Week
Warning Icon 1 540

Fedora 36 Skopeo Update: FEDORA-2022-5f253807ce DoS Fix

fedora
Calendar Grey March 28, 2022
Dist Fedora Esm H88
Fedora 36 has announced an update for Skopeo, tackling a significant denial of service vulnerability (CVE-2022-21698). Users are urged to upgrade for better security.
Security fix for CVE-2022-21698, skopeo likely not directly impacted ---- tests subpackage depends on /usr/sbin/unsquashfs

Summary

Command line utility to inspect images and repositories directly on Docker

registries without the need to pull them

Security fix for CVE-2022-21698, skopeo likely not directly impacted ----tests subpackage depends on /usr/sbin/unsquashfs

* Thu Mar 24 2022 Lokesh Mandvekar - 1:1.7.0

- bump to v1.7.0

- autospec misbehaves if the git logs ever used an unescaped rpm macro

[ 1 ] Bug #2045880 - CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter

https://bugzilla.redhat.com/show_bug.cgi?id=2045880

su -c 'dnf upgrade --advisory FEDORA-2022-5f253807ce' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Change Log

References

Update Instructions

Severity
important
Lowest
Low
Medium
High
Critical

Product: Fedora 36
Version: 1.7.0
Release: 1.fc36
Summary: Inspect container images and repositories on registries

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here