Lucene search

RedHatRHSA-2024:2549

HistoryApr 30, 2024 - 11:38 a.m.

(RHSA-2024:2549) Moderate: skopeo security and bug fix update

2024-04-3011:38:49

access.redhat.com

skopeo

security fix

bug fix

image registry

inspection

golang-protobuf

jose-go

cve-2024-24786

7.4 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

JSON

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files.

Security Fix(es):

golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786)

Bug Fix(es):

TRIAGE CVE-2024-24786 skopeo: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON [rhel-9] - RHEL 9.4 0day (JIRA:RHEL-28235)
skopeo: jose-go: improper handling of highly compressed data [rhel-9] (JIRA:RHEL-28736)

OSVersionArchitecturePackageVersionFilename
RedHat9ppc64leskopeo-debugsource< 1.14.3-2.el9_4skopeo-debugsource-1.14.3-2.el9_4.ppc64le.rpm
RedHat9s390xskopeo-debugsource< 1.14.3-2.el9_4skopeo-debugsource-1.14.3-2.el9_4.s390x.rpm
RedHat9s390xskopeo-debuginfo< 1.14.3-2.el9_4skopeo-debuginfo-1.14.3-2.el9_4.s390x.rpm
RedHat9aarch64skopeo< 1.14.3-2.el9_4skopeo-1.14.3-2.el9_4.aarch64.rpm
RedHat9s390xskopeo< 1.14.3-2.el9_4skopeo-1.14.3-2.el9_4.s390x.rpm
RedHat9s390xskopeo-tests< 1.14.3-2.el9_4skopeo-tests-1.14.3-2.el9_4.s390x.rpm
RedHat9x86_64skopeo< 1.14.3-2.el9_4skopeo-1.14.3-2.el9_4.x86_64.rpm
RedHat9ppc64leskopeo< 1.14.3-2.el9_4skopeo-1.14.3-2.el9_4.ppc64le.rpm
RedHat9ppc64leskopeo-debuginfo< 1.14.3-2.el9_4skopeo-debuginfo-1.14.3-2.el9_4.ppc64le.rpm
RedHat9x86_64skopeo-debugsource< 1.14.3-2.el9_4skopeo-debugsource-1.14.3-2.el9_4.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	ppc64le	skopeo-debugsource	< 1.14.3-2.el9_4	skopeo-debugsource-1.14.3-2.el9_4.ppc64le.rpm
RedHat	9	s390x	skopeo-debugsource	< 1.14.3-2.el9_4	skopeo-debugsource-1.14.3-2.el9_4.s390x.rpm
RedHat	9	s390x	skopeo-debuginfo	< 1.14.3-2.el9_4	skopeo-debuginfo-1.14.3-2.el9_4.s390x.rpm
RedHat	9	aarch64	skopeo	< 1.14.3-2.el9_4	skopeo-1.14.3-2.el9_4.aarch64.rpm
RedHat	9	s390x	skopeo	< 1.14.3-2.el9_4	skopeo-1.14.3-2.el9_4.s390x.rpm
RedHat	9	s390x	skopeo-tests	< 1.14.3-2.el9_4	skopeo-tests-1.14.3-2.el9_4.s390x.rpm
RedHat	9	x86_64	skopeo	< 1.14.3-2.el9_4	skopeo-1.14.3-2.el9_4.x86_64.rpm
RedHat	9	ppc64le	skopeo	< 1.14.3-2.el9_4	skopeo-1.14.3-2.el9_4.ppc64le.rpm
RedHat	9	ppc64le	skopeo-debuginfo	< 1.14.3-2.el9_4	skopeo-debuginfo-1.14.3-2.el9_4.ppc64le.rpm
RedHat	9	x86_64	skopeo-debugsource	< 1.14.3-2.el9_4	skopeo-debugsource-1.14.3-2.el9_4.x86_64.rpm

Rows per page:

1-10 of 161