Skip to content
OpenAdvisories
Medium ELSA-2025-7397 1 CVE

Moderate: skopeo security update (Oracle Linux 9)

Published May 21, 2025 · Updated May 21, 2025

Ecosystem: Oracle Linux

Summary

[2:1.18.1-1]
- update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
(https://github.com/containers/skopeo/commit/bfd0850)
- fixes 'CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-9.6.z]'
- Resolves: RHEL-82972

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 skopeo 2:1.18.1-1.el9_6
Oracle Linux · 9 skopeo-tests 2:1.18.1-1.el9_6

Vulnerabilities 1

  • Medium 6.6
    CVE-2025-27144

    Go JOSE's Parsing Vulnerable to Denial of Service

    Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. In versions on the 4.x branch prior to ve…

    go-jose go-jose zot kubescape Debian Ubuntu Azure Linux Wolfi Go