{ "document": { "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/tuxcare9.8esu/vex/2026/cve-2026-27145-els_os-tuxcare9_8esu.json" } ], "tracking": { "current_release_date": "2026-10-13T15:55:58Z", "generator": { "date": "2026-10-13T15:55:58Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2026-27145-ELS_OS-TUXCARE9.8ESU", "initial_release_date": "2026-06-02T23:16:00Z", "revision_history": [ { "date": "2026-06-02T23:16:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-09T00:06:00Z", "number": "2", "summary": "Official Publication" }, { "date": "2026-10-13T15:55:58Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "3" }, "title": "Security update on CVE-2026-27145" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "skopeo-tests-2:1.22.2-8.el9_8.aarch64", "product": { "name": "skopeo-tests-2:1.22.2-8.el9_8.aarch64", "product_id": "skopeo-tests-2:1.22.2-8.el9_8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/almalinux/skopeo-tests@1.22.2-8.el9_8?arch=aarch64&epoch=2" } } }, { "category": "product_version", "name": "skopeo-2:1.22.2-8.el9_8.aarch64", "product": { "name": "skopeo-2:1.22.2-8.el9_8.aarch64", "product_id": "skopeo-2:1.22.2-8.el9_8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/almalinux/skopeo@1.22.2-8.el9_8?arch=aarch64&epoch=2" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "skopeo-tests-2:1.22.2-8.el9_8.x86_64", "product": { "name": "skopeo-tests-2:1.22.2-8.el9_8.x86_64", "product_id": "skopeo-tests-2:1.22.2-8.el9_8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/almalinux/skopeo-tests@1.22.2-8.el9_8?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "skopeo-2:1.22.2-8.el9_8.x86_64", "product": { "name": "skopeo-2:1.22.2-8.el9_8.x86_64", "product_id": "skopeo-2:1.22.2-8.el9_8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/almalinux/skopeo@1.22.2-8.el9_8?arch=x86_64&epoch=2" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.8", "product": { "name": "AlmaLinux 9.8", "product_id": "AlmaLinux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Rocky Linux 9.8", "product": { "name": "Rocky Linux 9.8", "product_id": "Rocky Linux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:resf:rocky_linux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Rocky Linux" }, { "branches": [ { "category": "product_version", "name": "rocky/skopeo-tests-2:1.22.2-8.el9_8.aarch64", "product": { "name": "rocky/skopeo-tests-2:1.22.2-8.el9_8.aarch64", "product_id": "rocky/skopeo-tests-2:1.22.2-8.el9_8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/rocky/skopeo-tests@1.22.2-8.el9_8?arch=aarch64&epoch=2" } } }, { "category": "product_version", "name": "rocky/skopeo-2:1.22.2-8.el9_8.aarch64", "product": { "name": "rocky/skopeo-2:1.22.2-8.el9_8.aarch64", "product_id": "rocky/skopeo-2:1.22.2-8.el9_8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/rocky/skopeo@1.22.2-8.el9_8?arch=aarch64&epoch=2" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "rocky/skopeo-tests-2:1.22.2-8.el9_8.x86_64", "product": { "name": "rocky/skopeo-tests-2:1.22.2-8.el9_8.x86_64", "product_id": "rocky/skopeo-tests-2:1.22.2-8.el9_8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/rocky/skopeo-tests@1.22.2-8.el9_8?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "rocky/skopeo-2:1.22.2-8.el9_8.x86_64", "product": { "name": "rocky/skopeo-2:1.22.2-8.el9_8.x86_64", "product_id": "rocky/skopeo-2:1.22.2-8.el9_8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/rocky/skopeo@1.22.2-8.el9_8?arch=x86_64&epoch=2" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Rocky Linux" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.aarch64", "product": { "name": "skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.aarch64", "product_id": "skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/skopeo-tests@1.22.2-8.el9_8.tuxcare.els1?arch=aarch64&epoch=2" } } }, { "category": "product_version", "name": "skopeo-2:1.22.2-8.el9_8.tuxcare.els1.aarch64", "product": { "name": "skopeo-2:1.22.2-8.el9_8.tuxcare.els1.aarch64", "product_id": "skopeo-2:1.22.2-8.el9_8.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/skopeo@1.22.2-8.el9_8.tuxcare.els1?arch=aarch64&epoch=2" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.x86_64", "product": { "name": "skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.x86_64", "product_id": "skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/skopeo-tests@1.22.2-8.el9_8.tuxcare.els1?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "skopeo-2:1.22.2-8.el9_8.tuxcare.els1.x86_64", "product": { "name": "skopeo-2:1.22.2-8.el9_8.tuxcare.els1.x86_64", "product_id": "skopeo-2:1.22.2-8.el9_8.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/skopeo@1.22.2-8.el9_8.tuxcare.els1?arch=x86_64&epoch=2" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.aarch64" }, "product_reference": "skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.x86_64" }, "product_reference": "skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "skopeo-2:1.22.2-8.el9_8.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:skopeo-2:1.22.2-8.el9_8.tuxcare.els1.aarch64" }, "product_reference": "skopeo-2:1.22.2-8.el9_8.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "skopeo-2:1.22.2-8.el9_8.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:skopeo-2:1.22.2-8.el9_8.tuxcare.els1.x86_64" }, "product_reference": "skopeo-2:1.22.2-8.el9_8.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.aarch64" }, "product_reference": "skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.x86_64" }, "product_reference": "skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "skopeo-2:1.22.2-8.el9_8.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:skopeo-2:1.22.2-8.el9_8.tuxcare.els1.aarch64" }, "product_reference": "skopeo-2:1.22.2-8.el9_8.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "skopeo-2:1.22.2-8.el9_8.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:skopeo-2:1.22.2-8.el9_8.tuxcare.els1.x86_64" }, "product_reference": "skopeo-2:1.22.2-8.el9_8.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "skopeo-tests-2:1.22.2-8.el9_8.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:skopeo-tests-2:1.22.2-8.el9_8.aarch64" }, "product_reference": "skopeo-tests-2:1.22.2-8.el9_8.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "skopeo-tests-2:1.22.2-8.el9_8.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:skopeo-tests-2:1.22.2-8.el9_8.x86_64" }, "product_reference": "skopeo-tests-2:1.22.2-8.el9_8.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "skopeo-2:1.22.2-8.el9_8.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:skopeo-2:1.22.2-8.el9_8.aarch64" }, "product_reference": "skopeo-2:1.22.2-8.el9_8.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "skopeo-2:1.22.2-8.el9_8.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:skopeo-2:1.22.2-8.el9_8.x86_64" }, "product_reference": "skopeo-2:1.22.2-8.el9_8.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rocky/skopeo-tests-2:1.22.2-8.el9_8.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rocky/skopeo-tests-2:1.22.2-8.el9_8.aarch64" }, "product_reference": "rocky/skopeo-tests-2:1.22.2-8.el9_8.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rocky/skopeo-tests-2:1.22.2-8.el9_8.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rocky/skopeo-tests-2:1.22.2-8.el9_8.x86_64" }, "product_reference": "rocky/skopeo-tests-2:1.22.2-8.el9_8.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rocky/skopeo-2:1.22.2-8.el9_8.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rocky/skopeo-2:1.22.2-8.el9_8.aarch64" }, "product_reference": "rocky/skopeo-2:1.22.2-8.el9_8.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "rocky/skopeo-2:1.22.2-8.el9_8.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:rocky/skopeo-2:1.22.2-8.el9_8.x86_64" }, "product_reference": "rocky/skopeo-2:1.22.2-8.el9_8.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-27145", "cwe": { "id": "CWE-606", "name": "Unchecked Input for Loop Condition" }, "notes": [ { "category": "description", "text": "(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \".\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:skopeo-2:1.22.2-8.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:skopeo-2:1.22.2-8.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:skopeo-2:1.22.2-8.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:skopeo-2:1.22.2-8.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:skopeo-tests-2:1.22.2-8.el9_8.tuxcare.els1.x86_64" ], "known_affected": [ "AlmaLinux-9.8:skopeo-2:1.22.2-8.el9_8.aarch64", "AlmaLinux-9.8:skopeo-2:1.22.2-8.el9_8.x86_64", "AlmaLinux-9.8:skopeo-tests-2:1.22.2-8.el9_8.aarch64", "AlmaLinux-9.8:skopeo-tests-2:1.22.2-8.el9_8.x86_64", "Rocky Linux-9.8:rocky/skopeo-2:1.22.2-8.el9_8.aarch64", "Rocky Linux-9.8:rocky/skopeo-2:1.22.2-8.el9_8.x86_64", "Rocky Linux-9.8:rocky/skopeo-tests-2:1.22.2-8.el9_8.aarch64", "Rocky Linux-9.8:rocky/skopeo-tests-2:1.22.2-8.el9_8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-27145" }, { "category": "external", "summary": "https://go.dev/cl/783621", "url": "https://go.dev/cl/783621" }, { "category": "external", "summary": "https://go.dev/issue/79694", "url": "https://go.dev/issue/79694" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw", "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-5037", "url": "https://pkg.go.dev/vuln/GO-2026-5037" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23262", "url": "https://access.redhat.com/errata/RHSA-2026:23262" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23264", "url": "https://access.redhat.com/errata/RHSA-2026:23264" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29980", "url": "https://access.redhat.com/errata/RHSA-2026:29980" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29981", "url": "https://access.redhat.com/errata/RHSA-2026:29981" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:33574", "url": "https://access.redhat.com/errata/RHSA-2026:33574" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:34357", "url": "https://access.redhat.com/errata/RHSA-2026:34357" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:34359", "url": "https://access.redhat.com/errata/RHSA-2026:34359" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:35832", "url": "https://access.redhat.com/errata/RHSA-2026:35832" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36317", "url": "https://access.redhat.com/errata/RHSA-2026:36317" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36648", "url": "https://access.redhat.com/errata/RHSA-2026:36648" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36797", "url": "https://access.redhat.com/errata/RHSA-2026:36797" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38995", "url": "https://access.redhat.com/errata/RHSA-2026:38995" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:39005", "url": "https://access.redhat.com/errata/RHSA-2026:39005" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:39573", "url": "https://access.redhat.com/errata/RHSA-2026:39573" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:39879", "url": "https://access.redhat.com/errata/RHSA-2026:39879" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:41030", "url": "https://access.redhat.com/errata/RHSA-2026:41030" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:41036", "url": "https://access.redhat.com/errata/RHSA-2026:41036" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:41930", "url": "https://access.redhat.com/errata/RHSA-2026:41930" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:42043", "url": "https://access.redhat.com/errata/RHSA-2026:42043" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:42047", "url": "https://access.redhat.com/errata/RHSA-2026:42047" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:42049", "url": "https://access.redhat.com/errata/RHSA-2026:42049" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:42050", "url": "https://access.redhat.com/errata/RHSA-2026:42050" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:42051", "url": "https://access.redhat.com/errata/RHSA-2026:42051" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:42079", "url": "https://access.redhat.com/errata/RHSA-2026:42079" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:42080", "url": "https://access.redhat.com/errata/RHSA-2026:42080" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:42082", "url": "https://access.redhat.com/errata/RHSA-2026:42082" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:42142", "url": "https://access.redhat.com/errata/RHSA-2026:42142" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:42150", "url": "https://access.redhat.com/errata/RHSA-2026:42150" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:42151", "url": "https://access.redhat.com/errata/RHSA-2026:42151" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:42240", "url": "https://access.redhat.com/errata/RHSA-2026:42240" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:42644", "url": "https://access.redhat.com/errata/RHSA-2026:42644" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:42946", "url": "https://access.redhat.com/errata/RHSA-2026:42946" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:44622", "url": "https://access.redhat.com/errata/RHSA-2026:44622" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46394", "url": "https://access.redhat.com/errata/RHSA-2026:46394" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46395", "url": "https://access.redhat.com/errata/RHSA-2026:46395" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:47149", "url": "https://access.redhat.com/errata/RHSA-2026:47149" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:47735", "url": "https://access.redhat.com/errata/RHSA-2026:47735" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:47737", "url": "https://access.redhat.com/errata/RHSA-2026:47737" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49702", "url": "https://access.redhat.com/errata/RHSA-2026:49702" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49703", "url": "https://access.redhat.com/errata/RHSA-2026:49703" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49705", "url": "https://access.redhat.com/errata/RHSA-2026:49705" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49712", "url": "https://access.redhat.com/errata/RHSA-2026:49712" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49729", "url": "https://access.redhat.com/errata/RHSA-2026:49729" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49744", "url": "https://access.redhat.com/errata/RHSA-2026:49744" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49765", "url": "https://access.redhat.com/errata/RHSA-2026:49765" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49770", "url": "https://access.redhat.com/errata/RHSA-2026:49770" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:50205", "url": "https://access.redhat.com/errata/RHSA-2026:50205" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:50319", "url": "https://access.redhat.com/errata/RHSA-2026:50319" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:51057", "url": "https://access.redhat.com/errata/RHSA-2026:51057" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:51187", "url": "https://access.redhat.com/errata/RHSA-2026:51187" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:52946", "url": "https://access.redhat.com/errata/RHSA-2026:52946" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:53374", "url": "https://access.redhat.com/errata/RHSA-2026:53374" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:53412", "url": "https://access.redhat.com/errata/RHSA-2026:53412" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:53413", "url": "https://access.redhat.com/errata/RHSA-2026:53413" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:53415", "url": "https://access.redhat.com/errata/RHSA-2026:53415" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:53416", "url": "https://access.redhat.com/errata/RHSA-2026:53416" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:53530", "url": "https://access.redhat.com/errata/RHSA-2026:53530" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:54168", "url": "https://access.redhat.com/errata/RHSA-2026:54168" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:54401", "url": "https://access.redhat.com/errata/RHSA-2026:54401" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:54427", "url": "https://access.redhat.com/errata/RHSA-2026:54427" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:54432", "url": "https://access.redhat.com/errata/RHSA-2026:54432" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:54435", "url": "https://access.redhat.com/errata/RHSA-2026:54435" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:54441", "url": "https://access.redhat.com/errata/RHSA-2026:54441" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:54500", "url": "https://access.redhat.com/errata/RHSA-2026:54500" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:54525", "url": "https://access.redhat.com/errata/RHSA-2026:54525" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:54531", "url": "https://access.redhat.com/errata/RHSA-2026:54531" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:54603", "url": "https://access.redhat.com/errata/RHSA-2026:54603" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:54757", "url": "https://access.redhat.com/errata/RHSA-2026:54757" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:55899", "url": "https://access.redhat.com/errata/RHSA-2026:55899" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:57194", "url": "https://access.redhat.com/errata/RHSA-2026:57194" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:57482", "url": "https://access.redhat.com/errata/RHSA-2026:57482" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:57488", "url": "https://access.redhat.com/errata/RHSA-2026:57488" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:57649", "url": "https://access.redhat.com/errata/RHSA-2026:57649" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:59556", "url": "https://access.redhat.com/errata/RHSA-2026:59556" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:59557", "url": "https://access.redhat.com/errata/RHSA-2026:59557" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:59558", "url": "https://access.redhat.com/errata/RHSA-2026:59558" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:59559", "url": "https://access.redhat.com/errata/RHSA-2026:59559" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:59579", "url": "https://access.redhat.com/errata/RHSA-2026:59579" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:59593", "url": "https://access.redhat.com/errata/RHSA-2026:59593" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:60025", "url": "https://access.redhat.com/errata/RHSA-2026:60025" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:60315", "url": "https://access.redhat.com/errata/RHSA-2026:60315" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:60354", "url": "https://access.redhat.com/errata/RHSA-2026:60354" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:60386", "url": "https://access.redhat.com/errata/RHSA-2026:60386" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:60387", "url": "https://access.redhat.com/errata/RHSA-2026:60387" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:60388", "url": "https://access.redhat.com/errata/RHSA-2026:60388" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:60390", "url": "https://access.redhat.com/errata/RHSA-2026:60390" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:60391", "url": "https://access.redhat.com/errata/RHSA-2026:60391" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:61253", "url": "https://access.redhat.com/errata/RHSA-2026:61253" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:61314", "url": "https://access.redhat.com/errata/RHSA-2026:61314" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:63016", "url": "https://access.redhat.com/errata/RHSA-2026:63016" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:66022", "url": "https://access.redhat.com/errata/RHSA-2026:66022" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:68334", "url": "https://access.redhat.com/errata/RHSA-2026:68334" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:68335", "url": "https://access.redhat.com/errata/RHSA-2026:68335" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-27145", "url": "https://access.redhat.com/security/cve/CVE-2026-27145" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json" } ], "release_date": "2026-06-02T23:16:00Z", "remediations": [ { "category": "none_available", "date": "2026-10-05T22:36:42.997759Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.8:skopeo-2:1.22.2-8.el9_8.aarch64", "AlmaLinux-9.8:skopeo-2:1.22.2-8.el9_8.x86_64", "AlmaLinux-9.8:skopeo-tests-2:1.22.2-8.el9_8.aarch64", "AlmaLinux-9.8:skopeo-tests-2:1.22.2-8.el9_8.x86_64", "Rocky Linux-9.8:rocky/skopeo-2:1.22.2-8.el9_8.aarch64", "Rocky Linux-9.8:rocky/skopeo-2:1.22.2-8.el9_8.x86_64", "Rocky Linux-9.8:rocky/skopeo-tests-2:1.22.2-8.el9_8.aarch64", "Rocky Linux-9.8:rocky/skopeo-tests-2:1.22.2-8.el9_8.x86_64" ] } ] } ] }