Skip to content
OpenAdvisories
Medium ELSA-2024-6195 1 CVE

Moderate: skopeo security update (Oracle Linux 9)

Published Sep 3, 2024 · Updated Sep 3, 2024

Ecosystem: Oracle Linux

Summary

[2:1.14.5-1]
- update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
(https://github.com/containers/skopeo/commit/072072b)
- Resolves: RHEL-40805

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 skopeo 2:1.14.5-1.el9_4
Oracle Linux · 9 skopeo-tests 2:1.14.5-1.el9_4

Vulnerabilities 1

  • Medium 5.9
    CVE-2024-24783

    Verify panics on certificates with an unknown public key algorithm in crypto/x509

    Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyC…

    Go standard library crypto/x509 golang go Debian Ubuntu Azure Linux Alpine Wolfi Go