Important: Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: skopeo security update

An update for skopeo is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HT...

ALSA-2026:90462 Important: skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HT...

skopeo security update

2:1.22.2-6 - Rebuild for CVE-2026-111943 - Resolves: RHEL-287480...

skopeo security update

1:1.22.2-9 - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-279016 - Resolves: RHEL-287514...

ALSA-2026:89761 Important: skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HT...

Amazon Linux 2023 : skopeo, skopeo-tests (ALAS2023-2026-3325)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3325 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : skopeo, skopeo-tests (ALAS2023-2026-3254)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3254 advisory. When Trailer headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map,...

Medium: skopeo

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Important: skopeo

Issue Overview: When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: skopeo: skopeo-1.24.1-1.2.hum1 aarch64, s390x, x8664 skopeo-tests-1.24.1-1.2.hum1 aarch64, s390x, x8664 skopeo-1.24.1-1.2.hum1.src src Security Fixes: skopeo: CVE-2026-111943...

CVE-2026-107324 affecting package skopeo for versions less than 1.14.4-14

CVE-2026-107324 affecting package skopeo for versions less than 1.14.4-14. A patched version of the package is available...

CVE-2026-78660 affecting package skopeo for versions less than 1.14.4-14

CVE-2026-78660 affecting package skopeo for versions less than 1.14.4-14. A patched version of the package is available...

CVE-2026-78659 affecting package skopeo for versions less than 1.14.4-14

CVE-2026-78659 affecting package skopeo for versions less than 1.14.4-14. A patched version of the package is available...

CVE-2026-61801 affecting package skopeo for versions less than 1.14.4-14

CVE-2026-61801 affecting package skopeo for versions less than 1.14.4-14. A patched version of the package is available...

CVE-2026-97032 affecting package skopeo for versions less than 1.14.4-14

CVE-2026-97032 affecting package skopeo for versions less than 1.14.4-14. A patched version of the package is available...

CVE-2026-107325 affecting package skopeo for versions less than 1.14.4-14

CVE-2026-107325 affecting package skopeo for versions less than 1.14.4-14. A patched version of the package is available...

CVE-2026-78669 affecting package skopeo for versions less than 1.14.4-14

CVE-2026-78669 affecting package skopeo for versions less than 1.14.4-14. A patched version of the package is available...

AZL-107880 CVE-2026-97032 affecting package skopeo 1.14.4-13

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...