Red Hat Security Advisory

RHSA-2020:1230

skopeo security and bug fix update

Released 2020-04-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux 7 Extras containers-common-1:0.1.40-7.el7_8, skopeo-1:0.1.40-7.el7_8

Fixes 1 record

TI-2020-07179 CVE-2020-8945 · GHSA-m6wg-2mwg-4rfq

The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as…

MEDIUM 41

The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.05071 Published 2020-02-12 Partial fix · 0.1.1 CWE-416