Lucene search
RedHatRHSA-2020:5054HistoryNov 10, 2020 - 1:33 p.m.
(RHSA-2020:5054) Moderate: skopeo security update
2020-11-1013:33:26
access.redhat.com
86
0.001 Low
EPSS
Percentile
45.8%
The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files.
Security Fix(es):
- golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash (CVE-2020-14040)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | x86_64 | containers-common | < 0.1.40-12.el7_9 | containers-common-0.1.40-12.el7_9.x86_64.rpm |
| RedHat | 7 | s390x | skopeo-debuginfo | < 0.1.40-12.el7_9 | skopeo-debuginfo-0.1.40-12.el7_9.s390x.rpm |
| RedHat | 7 | ppc64le | containers-common | < 0.1.40-12.el7_9 | containers-common-0.1.40-12.el7_9.ppc64le.rpm |
| RedHat | 7 | x86_64 | skopeo | < 0.1.40-12.el7_9 | skopeo-0.1.40-12.el7_9.x86_64.rpm |
| RedHat | 7 | s390x | skopeo | < 0.1.40-12.el7_9 | skopeo-0.1.40-12.el7_9.s390x.rpm |
| RedHat | 7 | s390x | containers-common | < 0.1.40-12.el7_9 | containers-common-0.1.40-12.el7_9.s390x.rpm |
| RedHat | 7 | ppc64le | skopeo-debuginfo | < 0.1.40-12.el7_9 | skopeo-debuginfo-0.1.40-12.el7_9.ppc64le.rpm |
| RedHat | 7 | x86_64 | skopeo-debuginfo | < 0.1.40-12.el7_9 | skopeo-debuginfo-0.1.40-12.el7_9.x86_64.rpm |
| RedHat | 7 | ppc64le | skopeo | < 0.1.40-12.el7_9 | skopeo-0.1.40-12.el7_9.ppc64le.rpm |
Related
osv
osv
Infinite loop when decoding some inputs in golang.org/x/text
2021-04-14 20:04:52
CVE-2020-14040
2020-06-17 20:15:09
golang.org/x/text Infinite loop
2021-05-18 18:34:35
cvelist
cvelist
CVE-2020-14040
2020-06-17 19:22:31
nessus
nessus
RHEL 7 : skopeo (RHSA-2020:5054)
2020-11-11 00:00:00
RHEL 7 : buildah (RHSA-2020:5055)
2020-11-11 00:00:00
Amazon Linux 2 : golang (ALAS-2020-1494)
2020-10-01 00:00:00
redhat
redhat
(RHSA-2020:3783) Moderate: OpenShift Container Platform 4.4.23 cluster-network-operator-container security update
2020-09-22 07:10:42
(RHSA-2020:3780) Moderate: OpenShift Container Platform 4.5.11 ose-cluster-svcat-apiserver-operator-container security update
2020-09-21 19:38:11
(RHSA-2020:5055) Moderate: buildah security update
2020-11-10 13:33:39
github
github
golang.org/x/text Infinite loop
2021-05-18 18:34:35
prion
prion
Design/Logic Flaw
2020-06-17 20:15:00
wolfi
wolfi
CVE-2020-14040 vulnerabilities
2024-07-01 15:27:45
cve
cve
CVE-2020-14040
2020-06-17 20:15:09
ibm
ibm
debiancve
debiancve
CVE-2020-14040
2020-06-17 20:15:09
veracode
veracode
Denial Of Service (DoS)
2020-06-17 03:55:36
ubuntucve
ubuntucve
CVE-2020-14040
2020-06-17 00:00:00
redhatcve
redhatcve
CVE-2020-14040
2021-06-27 12:24:34
nvd
nvd
CVE-2020-14040
2020-06-17 20:15:09
gitlab
gitlab
Loop with Unreachable Exit Condition (Infinite Loop)
2020-06-17 00:00:00
Loop with Unreachable Exit Condition ('Infinite Loop')
2021-05-18 00:00:00
cgr
cgr
CVE-2020-14040 vulnerabilities
2024-05-19 03:07:16
amazon
amazon
Medium: golang
2020-09-28 20:57:00
Medium: golang
2020-10-26 18:04:00
openvas
openvas
Fedora: Security Advisory for golang (FEDORA-2020-d75360e2b0)
2020-07-31 00:00:00
Fedora: Security Advisory for golang (FEDORA-2020-9cd1204ba0)
2020-07-31 00:00:00
Fedora: Security Advisory for golang (FEDORA-2020-a55f130272)
2020-09-08 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: golang-1.14.6-1.fc32
2020-07-30 17:53:53
[SECURITY] Fedora 31 Update: golang-1.13.14-1.fc31
2020-07-28 15:03:46
[SECURITY] Fedora 32 Update: golang-1.14.7-1.fc32
2020-09-07 17:14:54
rocky
rocky
container-tools:rhel8 security, bug fix, and enhancement update
2020-11-03 12:27:37
oraclelinux
oraclelinux
go-toolset:ol8 security update
2020-09-11 00:00:00
container-tools:ol8 security, bug fix, and enhancement update
2020-11-10 00:00:00
almalinux
almalinux
Moderate: container-tools:rhel8 security, bug fix, and enhancement update
2020-11-03 12:27:37
ubuntu
ubuntu
Go Text vulnerabilities
2023-02-16 00:00:00