SUSE-CU-2023:1668-1: Security update of suse/registry

sle-security-updates at sle-security-updates at
Wed May 31 07:12:07 UTC 2023

SUSE Container Update Advisory: suse/registry
Container Advisory ID : SUSE-CU-2023:1668-1
Container Tags        : suse/registry:2.8 , suse/registry:2.8-9.8 , suse/registry:latest
Container Release     : 9.8
Severity              : moderate
Type                  : security
References            : 1207705 1210428 CVE-2023-2253 

The container suse/registry was updated. The following patches have been included in this update:

Advisory ID: SUSE-SU-2023:2298-1
Released:    Thu May 25 12:41:30 2023
Summary:     Security update for distribution
Type:        security
Severity:    moderate
References:  1207705,1210428,CVE-2023-2253
This update for distribution fixes the following issues:

Update to verison 2.8.2:

- Revert registry/client: set `Accept: identity` header when getting layers
- Parse `http` forbidden as denied
- Fix CVE-2023-2253 runaway allocation on /v2/_catalog (bsc#1207705)
- Fix panic in inmemory driver
- update to go1.19.9
- Add code to handle pagination of parts. Fixes max layer size of 10GB bug
- Dockerfile: fix filenames of artifacts

The following package changes have been done:

- distribution-registry-2.8.2-150400.9.21.1 updated

More information about the sle-security-updates mailing list