ELSA-2024-2239

ELSA-2024-2239 - skopeo security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2024-05-02

Description

[2:1.14.3-0.1]
- update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
(https://github.com/containers/skopeo/commit/1c2ab99)
- Related: RHEL-2112

[2:1.14.1-2]
- Switch to the maint branch
- Related: Jira:RHEL-2112

[2:1.14.1-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.14.1
- Related: RHEL-2112

[2:1.14.0-1]
- bump to v1.14.0
- Related: Jira:RHEL-2112

[2:1.13.3-3]
- Rebuild with golang 1.20.10
- Related: Jira:RHEL-2786

[2:1.13.3-2]
- Rebuild with golang 1.21.3
- Related: Jira:RHEL-2786

[2:1.13.3-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.13.3
- Related: #2176063

[2:1.13.2-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.13.2
- Related: #2176063

[2:1.13.1-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.13.1
- Related: #2176063

[2:1.13.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.13.0
- Related: #2176063

[2:1.12.0-3]
- rebuild for following CVEs:
CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
- Resolves: #2179967
- Resolves: #2187323
- Resolves: #2187384
- Resolves: #2203703
- Resolves: #2207523

[2:1.12.0-2]
- remove fakeroot from skopeo-tests
- Related: #2176063

[2:1.12.0-1]
- update to 1.12.0
- Related: #2176063

[2:1.11.3-0.1]
- update to the latest content of https://github.com/containers/skopeo/tree/release-1.11
(https://github.com/containers/skopeo/commit/d79588e)
- Related: #2176063

[2:1.11.2-0.2]
- update to the latest content of https://github.com/containers/skopeo/tree/release-1.11
(https://github.com/containers/skopeo/commit/8191ef3)
- Related: #2176063

[2:1.11.2-0.1]
- update to the latest content of https://github.com/containers/skopeo/tree/release-1.11
(https://github.com/containers/skopeo/commit/3f98753)
- Related: #2124478

[2:1.11.1-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.11.1
- Related: #2124478

[2:1.11.0-1]
- update to 1.11.0 release
- Related: #2124478

[2:1.11.0-0.4]
- update to the latest content of https://github.com/containers/skopeo/tree/main
(https://github.com/containers/skopeo/commit/b3b2c73)
- Related: #2124478

[2:1.11.0-0.3]
- update to the latest content of https://github.com/containers/skopeo/tree/main
(https://github.com/containers/skopeo/commit/fe15a36)
- Related: #2124478

[2:1.11.0-0.2]
- update to the latest content of https://github.com/containers/skopeo/tree/main
(https://github.com/containers/skopeo/commit/8e09e64)
- Related: #2124478

[2:1.11.0-0.1]
- update to the latest content of https://github.com/containers/skopeo/tree/main
(https://github.com/containers/skopeo/commit/2817510)
- Related: #2124478

[2:1.10.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.10.0
- Related: #2124478

[2:1.9.3-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.9.3
- Related: #2124478

[2:1.9.2-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.9.2
- Related: #2061316

[2:1.9.1-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.9.1
- Related: #2061316

[2:1.9.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.9.0
- Related: #2061316

[2:1.8.0-4]
- Re-enable debuginfo
- Related: #2061316

[2:1.8.0-3]
- BuildRequires: /usr/bin/go-md2man
- Related: #2061316

[2:1.8.0-2]
- enable LTO
- Related: #1988128

[2:1.8.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.8.0
- Related: #2061316

[2:1.7.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.7.0
- Related: #2061316

[2:1.6.1-4]
- add tags: classic (Ed Santiago)
- Related: #2061316

[2:1.6.1-3]
- remove BATS from required packages (Ed Santiago)
- Related: #2061316

[2:1.6.1-2]
- be sure to install BATS before gating tests are executed
(thanks to Ed Santiago)
- Related: #2061316

[2:1.6.1-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.6.1
- Related: #2000051

[2:1.6.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.6.0
- Related: #2000051

Related CVEs

CVE-2023-45287

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	skopeo-1.14.3-0.1.el9.src.rpm	837fb977c3464309300cb120fde2d59e	-	ol9_aarch64_appstream
	skopeo-1.14.3-0.1.el9.aarch64.rpm	b6a77f6d9ee2e35ee3c7c94d064c9c1a	-	ol9_aarch64_appstream
	skopeo-tests-1.14.3-0.1.el9.aarch64.rpm	99b9cd3b075de0d2677c344780b9f330	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	skopeo-1.14.3-0.1.el9.src.rpm	837fb977c3464309300cb120fde2d59e	-	ol9_x86_64_appstream
	skopeo-1.14.3-0.1.el9.x86_64.rpm	cd7380668c09856a520713666a6c80a4	-	ol9_x86_64_appstream
	skopeo-tests-1.14.3-0.1.el9.x86_64.rpm	dfc1b9f31dd72211f8b06de20cb1d78b	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team