Summary
[2:1.16.1-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.16.1
- Related: RHEL-27608
[2:1.16.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.16.0
- Resolves: RHEL-47197 RHEL-44886 RHEL-40812
[2:1.15.2-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.15.2
- Related: RHEL-27608
[2:1.15.1-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.15.1
- Resolves: RHEL-35443
[2:1.15.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.15.0
- Resolves: RHEL-29277
[2:1.14.3-0.1]
- update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
(https://github.com/containers/skopeo/commit/1c2ab99)
- Related: RHEL-2112
[2:1.14.1-2]
- Switch to the maint branch
- Related: Jira:RHEL-2112
[2:1.14.1-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.14.1
- Related: RHEL-2112
[2:1.14.0-1]
- bump to v1.14.0
- Related: Jira:RHEL-2112
[2:1.13.3-3]
- Rebuild with golang 1.20.10
- Related: Jira:RHEL-2786
[2:1.13.3-2]
- Rebuild with golang 1.21.3
- Related: Jira:RHEL-2786
[2:1.13.3-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.13.3
- Related: #2176063
[2:1.13.2-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.13.2
- Related: #2176063
[2:1.13.1-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.13.1
- Related: #2176063
[2:1.13.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.13.0
- Related: #2176063
[2:1.12.0-3]
- rebuild for following CVEs:
CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
- Resolves: #2179967
- Resolves: #2187323
- Resolves: #2187384
- Resolves: #2203703
- Resolves: #2207523
[2:1.12.0-2]
- remove fakeroot from skopeo-tests
- Related: #2176063
[2:1.12.0-1]
- update to 1.12.0
- Related: #2176063
[2:1.11.3-0.1]
- update to the latest content of https://github.com/containers/skopeo/tree/release-1.11
(https://github.com/containers/skopeo/commit/d79588e)
- Related: #2176063
[2:1.11.2-0.2]
- update to the latest content of https://github.com/containers/skopeo/tree/release-1.11
(https://github.com/containers/skopeo/commit/8191ef3)
- Related: #2176063
[2:1.11.2-0.1]
- update to the latest content of https://github.com/containers/skopeo/tree/release-1.11
(https://github.com/containers/skopeo/commit/3f98753)
- Related: #2124478
[2:1.11.1-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.11.1
- Related: #2124478
[2:1.11.0-1]
- update to 1.11.0 release
- Related: #2124478
[2:1.11.0-0.4]
- update to the latest content of https://github.com/containers/skopeo/tree/main
(https://github.com/containers/skopeo/commit/b3b2c73)
- Related: #2124478
[2:1.11.0-0.3]
- update to the latest content of https://github.com/containers/skopeo/tree/main
(https://github.com/containers/skopeo/commit/fe15a36)
- Related: #2124478
[2:1.11.0-0.2]
- update to the latest content of https://github.com/containers/skopeo/tree/main
(https://github.com/containers/skopeo/commit/8e09e64)
- Related: #2124478
[2:1.11.0-0.1]
- update to the latest content of https://github.com/containers/skopeo/tree/main
(https://github.com/containers/skopeo/commit/2817510)
- Related: #2124478
[2:1.10.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.10.0
- Related: #2124478
[2:1.9.3-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.9.3
- Related: #2124478
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | skopeo | 2:1.16.1-1.el9 |
| Oracle Linux · 9 | skopeo-tests | 2:1.16.1-1.el9 |
Vulnerabilities 4
-
High 8.3
Containers/image: digest type does not guarantee valid type
A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.
-
High 7.5
Denial of service due to improper 100-continue handling in net/http
The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next r…
-
Medium 6.0
go-retryablehttp can leak basic auth credentials to log files
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7.
-
Medium 5.9
Malformed DNS message can cause infinite loop in net
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.