GO-2024-3171 vulnerabilities

Vulnerabilities for packages: skopeo-fips, skopeo, buildah, zot, podman...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: zarf, grype, nerdctl, skaffold, kots, k9s, zot, docker, wolfictl, k3s, cadvisor, kaniko, newrelic-infrastructure-agent, trivy, ctop, kubescape, k3d, kubernetes, podman, runc, buildkitd, skopeo, syft...

GO-2024-2842 vulnerabilities

Vulnerabilities for packages: buildah, zot, skopeo...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, kaniko, podman, trivy, wolfictl, kots, ctop, nerdctl, k9s, skopeo, k3d, zot, k3s, runc, syft, grype, cadvisor, zarf, kubescape, docker, skaffold, kubernetes, buildkitd...

GO-2024-3171 vulnerabilities

Vulnerabilities for packages: buildah, skopeo, podman, zot...

GO-2024-2842 vulnerabilities

Vulnerabilities for packages: buildah, skopeo, zot...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: glab, kbld, kaniko, tetragon, step-issuer, secrets-store-csi-driver, cass-operator, aactl, conjur-cli, jitsucom-bulker, promxy, vcluster, ctop, coredns, crossplane-provider-family-azure, govulncheck, grafana-alloy, metrics-server, terraform-provider-grafana, k9s,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: kubescape, skopeo, flux-source-controller, podman, undock, kyverno, aactl, kyverno-notation-aws, witness, gitsign, kots, falcoctl, ratify, tekton-chains, slsa-verifier, buildah, zarf...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: kubescape, skopeo, cosign, tekton-chains, aactl, zarf, vexctl, gitsign, witness, kots, falcoctl, slsa-verifier, sigstore-scaffolding, falco-no-driver...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: glab, crossplane-provider-azure-managedidentity, nuclei, cosign, src-fingerprint, aactl, gh, gomplate, spire-server, flux-image-automation-controller, falcoctl, crossplane-provider-family-azure, sigstore-scaffolding, flux-image-reflector-controller, fulcio,...

OESA-2026-3359 skopeo security update

A command line utility that performs various operations on container images and image repositories Security Fixes: tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: skopeo: skopeo-1.24.0-2.hum1 aarch64, x8664 skopeo-tests-1.24.0-2.hum1 aarch64, x8664 skopeo-1.24.0-2.hum1.src src Security Fixes: skopeo: CVE-2026-56852...

RHEL 8 : container-tools:rhel8 (RHSA-2026:51288)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51288 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes:...

RHSA-2026:9098 Red Hat Security Advisory: skopeo security update

Bulletin has no description...

RHSA-2026:29035 Red Hat Security Advisory: skopeo security update

Bulletin has no description...

MiracleLinux 9 : skopeo-1.22.2-6.el9_8 (AXSA:2026-1395:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1395:03 advisory. crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-32281 crypto/tls: golang: Go crypto/tls...

CVE-2026-56852 affecting package skopeo for versions less than 1.14.4-12

CVE-2026-56852 affecting package skopeo for versions less than 1.14.4-12. A patched version of the package is available...

[SECURITY] Fedora 43 Update: skopeo-1.22.2-2.fc43

Command line utility to inspect images and repositories directly on Docker registries without the need to pull them...

[SECURITY] Fedora 44 Update: skopeo-1.22.2-2.fc44

Command line utility to inspect images and repositories directly on Docker registries without the need to pull them...

Fedora 44 : skopeo (2026-9b2e56edf5)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9b2e56edf5 advisory. Security fix for CVE-2026-27145 Go stdlib crypto/x509 DoS vulnerability. Rebuild with golang-1.26.5 which includes the fix. Tenable has extracted the precedi...