File _patchinfo of Package patchinfo.37715
<patchinfo incident="37715"> <issue tracker="cve" id="2025-27144"/> <issue tracker="bnc" id="1237613">VUL-0: CVE-2025-27144: skopeo: gopkg.in/square/go-jose.v2,gopkg.in/go-jose/go-jose.v2,github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service</issue> <packager>dancermak</packager> <rating>important</rating> <category>security</category> <summary>Security update for skopeo</summary> <description>This update for skopeo fixes the following issues: - CVE-2025-27144: excessive memory consumption by Go JOSE when parsing compact JWS or JWE input containing a large number of '.' characters (bsc#1237613). </description> </patchinfo>