ELSA-2024-2239

ELSA-2024-2239 - skopeo security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2024-05-02

Description

[2:1.14.3-0.1]
- update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
(https://github.com/containers/skopeo/commit/1c2ab99)
- Related: RHEL-2112

[2:1.14.1-2]
- Switch to the maint branch
- Related: Jira:RHEL-2112

[2:1.14.1-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.14.1
- Related: RHEL-2112

[2:1.14.0-1]
- bump to v1.14.0
- Related: Jira:RHEL-2112

[2:1.13.3-3]
- Rebuild with golang 1.20.10
- Related: Jira:RHEL-2786

[2:1.13.3-2]
- Rebuild with golang 1.21.3
- Related: Jira:RHEL-2786

[2:1.13.3-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.13.3
- Related: #2176063

[2:1.13.2-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.13.2
- Related: #2176063

[2:1.13.1-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.13.1
- Related: #2176063

[2:1.13.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.13.0
- Related: #2176063

[2:1.12.0-3]
- rebuild for following CVEs:
CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
- Resolves: #2179967
- Resolves: #2187323
- Resolves: #2187384
- Resolves: #2203703
- Resolves: #2207523

[2:1.12.0-2]
- remove fakeroot from skopeo-tests
- Related: #2176063

[2:1.12.0-1]
- update to 1.12.0
- Related: #2176063

[2:1.11.3-0.1]
- update to the latest content of https://github.com/containers/skopeo/tree/release-1.11
(https://github.com/containers/skopeo/commit/d79588e)
- Related: #2176063

[2:1.11.2-0.2]
- update to the latest content of https://github.com/containers/skopeo/tree/release-1.11
(https://github.com/containers/skopeo/commit/8191ef3)
- Related: #2176063

[2:1.11.2-0.1]
- update to the latest content of https://github.com/containers/skopeo/tree/release-1.11
(https://github.com/containers/skopeo/commit/3f98753)
- Related: #2124478

[2:1.11.1-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.11.1
- Related: #2124478

[2:1.11.0-1]
- update to 1.11.0 release
- Related: #2124478

[2:1.11.0-0.4]
- update to the latest content of https://github.com/containers/skopeo/tree/main
(https://github.com/containers/skopeo/commit/b3b2c73)
- Related: #2124478

[2:1.11.0-0.3]
- update to the latest content of https://github.com/containers/skopeo/tree/main
(https://github.com/containers/skopeo/commit/fe15a36)
- Related: #2124478

[2:1.11.0-0.2]
- update to the latest content of https://github.com/containers/skopeo/tree/main
(https://github.com/containers/skopeo/commit/8e09e64)
- Related: #2124478

[2:1.11.0-0.1]
- update to the latest content of https://github.com/containers/skopeo/tree/main
(https://github.com/containers/skopeo/commit/2817510)
- Related: #2124478

[2:1.10.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.10.0
- Related: #2124478

[2:1.9.3-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.9.3
- Related: #2124478

[2:1.9.2-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.9.2
- Related: #2061316

[2:1.9.1-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.9.1
- Related: #2061316

[2:1.9.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.9.0
- Related: #2061316

[2:1.8.0-4]
- Re-enable debuginfo
- Related: #2061316

[2:1.8.0-3]
- BuildRequires: /usr/bin/go-md2man
- Related: #2061316

[2:1.8.0-2]
- enable LTO
- Related: #1988128

[2:1.8.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.8.0
- Related: #2061316

[2:1.7.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.7.0
- Related: #2061316

[2:1.6.1-4]
- add tags: classic (Ed Santiago)
- Related: #2061316

[2:1.6.1-3]
- remove BATS from required packages (Ed Santiago)
- Related: #2061316

[2:1.6.1-2]
- be sure to install BATS before gating tests are executed
(thanks to Ed Santiago)
- Related: #2061316

[2:1.6.1-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.6.1
- Related: #2000051

[2:1.6.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.6.0
- Related: #2000051

Related CVEs

CVE-2023-45287

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	skopeo-1.14.3-0.1.el9.src.rpm	60da4700fcd1491ebdf4b5ce7099ac86204e1d13501a12d206751f3ba5419427	-	ol9_aarch64_appstream
	skopeo-1.14.3-0.1.el9.aarch64.rpm	a9be4eb5795ecc37854bd37dcc456a25de747cfc31afd0058fc3aff4ffef60ec	-	ol9_aarch64_appstream
	skopeo-tests-1.14.3-0.1.el9.aarch64.rpm	ae4727242af483b30f4b2657e97a0813b6078f87771cefe322adf524f1f697f3	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	skopeo-1.14.3-0.1.el9.src.rpm	60da4700fcd1491ebdf4b5ce7099ac86204e1d13501a12d206751f3ba5419427	-	ol9_x86_64_appstream
	skopeo-1.14.3-0.1.el9.x86_64.rpm	80dd10cab5f8dc0ea8a71ed07d6e270d50f9545ad63a5d535fae92561d0fdd76	-	ol9_x86_64_appstream
	skopeo-tests-1.14.3-0.1.el9.x86_64.rpm	e44e0c08ce0efa5140dc361af7ef01164bf1011e46bee07268077a75b8c11f76	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team