Red Hat Security Advisory

RHSA-2024:2549

skopeo security and bug fix update

Released 2024-04-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) skopeo-2:1.14.3-2.el9_4, skopeo-tests-2:1.14.3-2.el9_4

TI-2024-16303 CVE-2024-24786 · GHSA-8r3f-844c-mc37

MEDIUM 41

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01262 Published 2024-03-05 Partial fix · 1.33.0 CWE-835

TI-2024-18756 CVE-2024-28180 · GHSA-c5q2-7r4c-mv6g

LOW 26

Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01956 Published 2024-03-09 Partial fix · 4.0.1, 3.0.3 +1 CWE-409