(RHSA-2024:1149) Moderate: skopeo security update

2024-03-0515:32:30

access.redhat.com

skopeo

security update

dos vulnerability

http requests

golang

cve-2023-39326

container image registries

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.6%

JSON

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files.

Security Fix(es):

golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9ppc64leskopeo-tests< 1.13.3-4.el9_3skopeo-tests-1.13.3-4.el9_3.ppc64le.rpm
RedHat9s390xskopeo-debugsource< 1.13.3-4.el9_3skopeo-debugsource-1.13.3-4.el9_3.s390x.rpm
RedHat9ppc64leskopeo-debugsource< 1.13.3-4.el9_3skopeo-debugsource-1.13.3-4.el9_3.ppc64le.rpm
RedHat9s390xskopeo< 1.13.3-4.el9_3skopeo-1.13.3-4.el9_3.s390x.rpm
RedHat9aarch64skopeo-debuginfo< 1.13.3-4.el9_3skopeo-debuginfo-1.13.3-4.el9_3.aarch64.rpm
RedHat9ppc64leskopeo< 1.13.3-4.el9_3skopeo-1.13.3-4.el9_3.ppc64le.rpm
RedHat9ppc64leskopeo-debuginfo< 1.13.3-4.el9_3skopeo-debuginfo-1.13.3-4.el9_3.ppc64le.rpm
RedHat9s390xskopeo-tests< 1.13.3-4.el9_3skopeo-tests-1.13.3-4.el9_3.s390x.rpm
RedHat9x86_64skopeo< 1.13.3-4.el9_3skopeo-1.13.3-4.el9_3.x86_64.rpm
RedHat9x86_64skopeo-debugsource< 1.13.3-4.el9_3skopeo-debugsource-1.13.3-4.el9_3.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	ppc64le	skopeo-tests	< 1.13.3-4.el9_3	skopeo-tests-1.13.3-4.el9_3.ppc64le.rpm
RedHat	9	s390x	skopeo-debugsource	< 1.13.3-4.el9_3	skopeo-debugsource-1.13.3-4.el9_3.s390x.rpm
RedHat	9	ppc64le	skopeo-debugsource	< 1.13.3-4.el9_3	skopeo-debugsource-1.13.3-4.el9_3.ppc64le.rpm
RedHat	9	s390x	skopeo	< 1.13.3-4.el9_3	skopeo-1.13.3-4.el9_3.s390x.rpm
RedHat	9	aarch64	skopeo-debuginfo	< 1.13.3-4.el9_3	skopeo-debuginfo-1.13.3-4.el9_3.aarch64.rpm
RedHat	9	ppc64le	skopeo	< 1.13.3-4.el9_3	skopeo-1.13.3-4.el9_3.ppc64le.rpm
RedHat	9	ppc64le	skopeo-debuginfo	< 1.13.3-4.el9_3	skopeo-debuginfo-1.13.3-4.el9_3.ppc64le.rpm
RedHat	9	s390x	skopeo-tests	< 1.13.3-4.el9_3	skopeo-tests-1.13.3-4.el9_3.s390x.rpm
RedHat	9	x86_64	skopeo	< 1.13.3-4.el9_3	skopeo-1.13.3-4.el9_3.x86_64.rpm
RedHat	9	x86_64	skopeo-debugsource	< 1.13.3-4.el9_3	skopeo-debugsource-1.13.3-4.el9_3.x86_64.rpm