Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE Linux Micro 6.0: 2025:20085-1 moderate: skopeo DoS issue

suse
Calendar Grey June 4, 2025
Dist Suse Esm H88
SUSE Linux Micro 6.0 has addressed a moderate security vulnerability in skopeo linked to symlink traversal, enhancing stability and mitigating denial-of-service risks
* bsc#1231698 Cross-References: * CVE-2024-9676

Summary

## This update for skopeo fixes the following issues: * CVE-2024-9676: Fixed symlink traversal vulnerability in the containers/storage library that could have let to a denial-of-service attack (bsc#1231698). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-146=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * skopeo-1.14.4-2.1 * skopeo-debuginfo-1.14.4-2.1

Topics%20covered

Topics Covered

security advisory moderate DoS SUSE symlink skopeo

References

* bsc#1231698

Cross-

* CVE-2024-9676

CVSS scores:

* CVE-2024-9676 ( SUSE ): 5.7

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2024-9676 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

* CVE-2024-9676 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

* CVE-2024-9676 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products:

* SUSE Linux Micro 6.0

An update that solves one vulnerability can now be installed.

##

* https://www.suse.com/security/cve/CVE-2024-9676.html

* https://bugzilla.suse.com/show_bug.cgi?id=1231698

Announcement ID: SUSE-SU-2025:20085-1
Release Date: 2025-02-03T09:08:43Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate DoS SUSE symlink skopeo

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here