910 matches found
AZL-99375 CVE-2026-84304 affecting package skopeo 1.14.4-12
gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...
GO-2024-3171 vulnerabilities
Vulnerabilities for packages: skopeo-fips, skopeo, buildah, podman, zot...
GO-2024-2842 vulnerabilities
Vulnerabilities for packages: skopeo, zot, buildah...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: cadvisor, kubernetes, skopeo, trivy, wolfictl, k3s, kaniko, docker, skaffold, k9s, runc, syft, k3d, kots, kubescape, podman, zot, nerdctl, buildkitd, ctop, zarf, grype, newrelic-infrastructure-agent...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: cadvisor, kubernetes, skopeo, trivy, wolfictl, k3s, kaniko, docker, skaffold, k9s, runc, syft, k3d, kots, kubescape, podman, zot, nerdctl, buildkitd, ctop, zarf, grype, newrelic-infrastructure-agent...
GO-2024-3171 vulnerabilities
Vulnerabilities for packages: skopeo, podman, zot, buildah...
GO-2024-2842 vulnerabilities
Vulnerabilities for packages: skopeo, zot, buildah...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-eventstore, fuse-overlayfs-snapshotter, kubernetes-event-exporter, tekton-chains, db-operator, crossplane-provider-aws-s3, ingress-nginx-controller, golangci-lint, cert-manager, kubescape-operator, litestream, xeol, glab, pulumi-language-java,...
GO-2026-5853 vulnerabilities
Vulnerabilities for packages: ratify, kyverno, flux-source-controller, aactl, falcoctl, slsa-verifier, kyverno-notation-aws, witness, zarf, skopeo, undock, tekton-chains, buildah, kots, gitsign, kubescape, podman...
GO-2026-4311 vulnerabilities
Vulnerabilities for packages: sigstore-scaffolding, aactl, falcoctl, slsa-verifier, witness, zarf, falco-no-driver, skopeo, tekton-chains, kots, gitsign, kubescape, vexctl, cosign...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: actions-runner-controller, falcoctl, flux-kustomize-controller, slsa-verifier, kubernetes-event-exporter, skopeo, terraform, crossplane-provider-family-azure, flux-helm-controller, tekton-chains, crossplane-provider-azure-authorization, kargo, nuclei, kubevela,...
OESA-2026-3360 skopeo security update
A command line utility that performs various operations on container images and image repositories Security Fixes: tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse...
OESA-2026-3359 skopeo security update
A command line utility that performs various operations on container images and image repositories Security Fixes: tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: skopeo: skopeo-1.24.0-2.hum1 aarch64, x8664 skopeo-tests-1.24.0-2.hum1 aarch64, x8664 skopeo-1.24.0-2.hum1.src src Security Fixes: skopeo: CVE-2026-56852...
RHEL 8 : container-tools:rhel8 (RHSA-2026:51288)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51288 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes:...
RHSA-2026:9098 Red Hat Security Advisory: skopeo security update
Bulletin has no description...
RHSA-2026:29035 Red Hat Security Advisory: skopeo security update
Bulletin has no description...
MiracleLinux 9 : skopeo-1.22.2-6.el9_8 (AXSA:2026-1395:03)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1395:03 advisory. crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-32281 crypto/tls: golang: Go crypto/tls...
