Oval Definition:oval:com.redhat.rhsa:def:20227955
Revision Date:2022-11-15Version:636
Title:RHSA-2022:7955: skopeo security and bug fix update (Moderate)
Description:The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files.

Security Fix(es):

  • containers/storage: DoS via malicious image (CVE-2021-20291)

  • golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents (CVE-2021-33198)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes linked from the References section.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2021-20291
    CVE-2021-33198
    RHSA-2022:7955
    Platform(s):Red Hat Enterprise Linux 9
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 9 is installed
  • AND
  • skopeo is earlier than 2:1.9.2-1.el9
  • AND skopeo is signed with Red Hat redhatrelease2 key
  • skopeo-tests is earlier than 2:1.9.2-1.el9
  • AND skopeo-tests is signed with Red Hat redhatrelease2 key
  • BACK