Security update for rekor

Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyClientCert. The default behavior is for TLS servers to not verify client certificates.

ELSA-2024-6195: skopeo security update (MODERATE)

ELSA-2024-6189: buildah security update (MODERATE)

ELSA-2024-6188: runc security update (MODERATE)

ELSA-2024-6187: gvisor-tap-vsock security update (MODERATE)

ELSA-2024-6186: containernetworking-plugins security update (MODERATE)

Уязвимость пакета golang операционной системы Debian GNU/Linux, позволяющая нарушителю вызвать отказ в обслуживании (DoS)

Security update for podman

Important: git-lfs security update

Important: git-lfs security update

ELSA-2024-3346: git-lfs security update (IMPORTANT)

ELSA-2024-2724: git-lfs security update (IMPORTANT)

Security update for go1.22

Security update for go1.22

Security update for go1.21

Security update for go1.21

Moderate: container-tools:rhel8 security update

ELSA-2024-6969: container-tools:ol8 security update (MODERATE)

Important: go-toolset:rhel8 security update