Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 932453

Summary: <app-containers/skopeo-1.15.1: unexpected authenticated registry accesses
Product: Gentoo Security Reporter: Rahil Bhimjiani <me>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Status: UNCONFIRMED ---    
Severity: minor CC: ajak, me
Priority: Normal Keywords: PullRequest, SECURITY
Version: unspecified   
Hardware: All   
OS: Linux   
See Also: https://github.com/gentoo/gentoo/pull/36772
https://github.com/gentoo/gentoo/pull/37135
Whiteboard: B3 [stable]
Package list:
Runtime testing required: ---
Bug Depends on: 940019    
Bug Blocks: 936384    

Comment 1 Larry the Git Cow gentoo-dev 2024-06-13 19:10:51 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c7b5ac4efdde4f4cce8bf3747c22bfee187e2488

commit c7b5ac4efdde4f4cce8bf3747c22bfee187e2488
Author:     Rahil Bhimjiani <me@rahil.rocks>
AuthorDate: 2024-06-12 12:34:03 +0000
Commit:     Zac Medico <zmedico@gentoo.org>
CommitDate: 2024-06-13 19:10:43 +0000

    app-containers/skopeo: update to 1.15.1
    
    Addresses https://github.com/advisories/GHSA-6wvf-f2vw-3425 which allows unexpected authenticated registry accesses
    
    Bug: https://bugs.gentoo.org/932453
    Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
    From: https://github.com/gentoo/gentoo/pull/37135
    Signed-off-by: Zac Medico <zmedico@gentoo.org>

 app-containers/skopeo/Manifest             |  1 +
 app-containers/skopeo/skopeo-1.15.1.ebuild | 69 ++++++++++++++++++++++++++++++
 2 files changed, 70 insertions(+)