GO-2024-2842 vulnerabilities

Vulnerabilities for packages: buildah, zot, skopeo...

GO-2024-3171 vulnerabilities

Vulnerabilities for packages: skopeo-fips, buildah, skopeo, podman, zot...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: k9s, kaniko, nerdctl, kubernetes, k3s, runc, zarf, newrelic-infrastructure-agent, skaffold, grype, syft, trivy, ctop, cadvisor, docker, skopeo, k3d, zot, buildkitd, kots, kubescape, podman, wolfictl...

GO-2024-3171 vulnerabilities

Vulnerabilities for packages: buildah, podman, zot, skopeo...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: kots, grype, zot, wolfictl, zarf, cadvisor, podman, syft, k9s, skaffold, runc, kubescape, k3d, docker, k3s, buildkitd, newrelic-infrastructure-agent, kubernetes, nerdctl, trivy, skopeo, kaniko, ctop...

GO-2024-2842 vulnerabilities

Vulnerabilities for packages: buildah, skopeo, zot...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: spicedb-operator, gostatsd, newrelic-infra-operator, nova, stakater-reloader, docker-machine-driver-linode, migrate, cluster-api-ipam-provider-in-cluster, paranoia, db-operator, crossplane-provider-aws-kinesis, manifest-tool, litestream, kubernetes-event-exporter,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: aactl, falcoctl, flux-source-controller, kots, podman, tekton-chains, skopeo, kyverno-notation-aws, undock, buildah, ratify, zarf, slsa-verifier, witness, kubescape, kyverno, gitsign...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: aactl, falcoctl, kots, tekton-chains, cosign, falco-no-driver, sigstore-scaffolding, witness, zarf, slsa-verifier, vexctl, kubescape, skopeo, gitsign...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: spire-server, scorecard, flux-image-automation-controller, kubevela, sigstore-scaffolding, pulumi-kubernetes-operator, zarf, zot, vexctl, rook, crossplane-provider-azure, kubernetes-event-exporter, aactl, falcoctl, crossplane-provider-azure-managedidentity,...

OESA-2026-3359 skopeo security update

A command line utility that performs various operations on container images and image repositories Security Fixes: tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: skopeo: skopeo-1.24.0-2.hum1 aarch64, x8664 skopeo-tests-1.24.0-2.hum1 aarch64, x8664 skopeo-1.24.0-2.hum1.src src Security Fixes: skopeo: CVE-2026-56852...

RHEL 8 : container-tools:rhel8 (RHSA-2026:51288)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51288 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes:...

RHSA-2026:9098 Red Hat Security Advisory: skopeo security update

Bulletin has no description...

RHSA-2026:29035 Red Hat Security Advisory: skopeo security update

Bulletin has no description...

MiracleLinux 9 : skopeo-1.22.2-6.el9_8 (AXSA:2026-1395:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1395:03 advisory. crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-32281 crypto/tls: golang: Go crypto/tls...

CVE-2026-56852 affecting package skopeo for versions less than 1.14.4-12

CVE-2026-56852 affecting package skopeo for versions less than 1.14.4-12. A patched version of the package is available...

[SECURITY] Fedora 43 Update: skopeo-1.22.2-2.fc43

Command line utility to inspect images and repositories directly on Docker registries without the need to pull them...

[SECURITY] Fedora 44 Update: skopeo-1.22.2-2.fc44

Command line utility to inspect images and repositories directly on Docker registries without the need to pull them...

Fedora 44 : skopeo (2026-9b2e56edf5)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9b2e56edf5 advisory. Security fix for CVE-2026-27145 Go stdlib crypto/x509 DoS vulnerability. Rebuild with golang-1.26.5 which includes the fix. Tenable has extracted the precedi...