1047 matches found
skopeo security update
An update is available for skopeo. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The skopeo command lets you inspect images from container image registries, g...
RLSA-2026:89761 Important: skopeo security update
The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HT...
Important: Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update
An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Important: Red Hat Security Advisory: skopeo security update
An update for skopeo is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
RHEL 8 : container-tools:rhel8 (RHSA-2026:89760)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89760 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: net/http:...
RHEL 10 : skopeo (RHSA-2026:89761)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89761 advisory. The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and...
Important: skopeo security update
The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HT...
skopeo security update
2:1.22.2-6 - Rebuild for CVE-2026-111943 - Resolves: RHEL-287480...
ALSA-2026:89761 Important: skopeo security update
The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HT...
ALSA-2026:90462 Important: skopeo security update
The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HT...
skopeo security update
1:1.22.2-9 - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-279016 - Resolves: RHEL-287514...
Amazon Linux 2023 : skopeo, skopeo-tests (ALAS2023-2026-3254)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3254 advisory. When Trailer headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map,...
Amazon Linux 2023 : skopeo, skopeo-tests (ALAS2023-2026-3325)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3325 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...
Important: skopeo
Issue Overview: When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit...
Medium: skopeo
Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: skopeo: skopeo-1.24.1-1.2.hum1 aarch64, s390x, x8664 skopeo-tests-1.24.1-1.2.hum1 aarch64, s390x, x8664 skopeo-1.24.1-1.2.hum1.src src Security Fixes: skopeo: CVE-2026-111943...
CVE-2026-107324 affecting package skopeo for versions less than 1.14.4-14
CVE-2026-107324 affecting package skopeo for versions less than 1.14.4-14. A patched version of the package is available...
CVE-2026-78660 affecting package skopeo for versions less than 1.14.4-14
CVE-2026-78660 affecting package skopeo for versions less than 1.14.4-14. A patched version of the package is available...