[ALSA-2024:9098] Moderate: skopeo security update
Type:
security
Severity:
moderate
Release date:
2024-11-18
Description:
The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * containers/image: digest type does not guarantee valid type (CVE-2024-3727) * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788) * go-retryable[http:](http:) url might write sensitive information to log file (CVE-2024-6104) * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 skopeo-1.16.1-1.el9.aarch64.rpm 249f2268c16bd22c9fa479c55705482ba989b5342f51567bb1a1e837ed8bff1f
aarch64 skopeo-tests-1.16.1-1.el9.aarch64.rpm c9c0251ca98d859c56daef09ae56e9295525ce9a9a868d09c43f0c9cf5df1d36
ppc64le skopeo-1.16.1-1.el9.ppc64le.rpm 3de37b0d7a7eb4d712899c4fd78d2a598b3f5215b7c9fb1e7ac43639e4da6b7a
ppc64le skopeo-tests-1.16.1-1.el9.ppc64le.rpm d9c4ff4dcb39a6e16db246d59c7b8574daf0e6f63da4dee10118e0f2e9d80738
s390x skopeo-tests-1.16.1-1.el9.s390x.rpm 07fe07efbf54bf185b6424df987512d182655e8a3602e139873d273dbc89dc81
s390x skopeo-1.16.1-1.el9.s390x.rpm 403e6ae5839c7f5afab0fbe5cbe9fb66a3afb8246d4e3b649393fa2ce20dbfdf
x86_64 skopeo-1.16.1-1.el9.x86_64.rpm 5b5fe42353356082c9485f2b2c49d5ad2decd26c04573154fe94c811ece07208
x86_64 skopeo-tests-1.16.1-1.el9.x86_64.rpm 6e0c9c00f4865cc5dc708147a9d1f154fd0a05fca4a54f6e6754eec4601fb0e7
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.