SUSE-CU-2023:1668-1: Security update of suse/registry

[sle-security-updates at lists.suse.com]

SUSE Container Update Advisory: suse/registry
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2023:1668-1
Container Tags        : suse/registry:2.8 , suse/registry:2.8-9.8 , suse/registry:latest
Container Release     : 9.8
Severity              : moderate
Type                  : security
References            : 1207705 1210428 CVE-2023-2253 
-----------------------------------------------------------------

The container suse/registry was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2023:2298-1
Released:    Thu May 25 12:41:30 2023
Summary:     Security update for distribution
Type:        security
Severity:    moderate
References:  1207705,1210428,CVE-2023-2253
This update for distribution fixes the following issues:

Update to verison 2.8.2:

- Revert registry/client: set `Accept: identity` header when getting layers
- Parse `http` forbidden as denied
- Fix CVE-2023-2253 runaway allocation on /v2/_catalog (bsc#1207705)
- Fix panic in inmemory driver
- update to go1.19.9
- Add code to handle pagination of parts. Fixes max layer size of 10GB bug
- Dockerfile: fix filenames of artifacts


The following package changes have been done:

- distribution-registry-2.8.2-150400.9.21.1 updated