[ALSA-2025:23294] Moderate: skopeo security update
Type:
security
Severity:
moderate
Release date:
2025-12-22
Description:
The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 skopeo-1.20.0-2.el10_1.aarch64.rpm 20e41d0352cd7284bcd95de29705ecd5406e6ab81ecd3db6e78bdf476543e1a5
aarch64 skopeo-tests-1.20.0-2.el10_1.aarch64.rpm 5f8caff4d288841668c2d4afea0b8d1d30565de30052dfd6696240ae214353a9
ppc64le skopeo-tests-1.20.0-2.el10_1.ppc64le.rpm c77eca510330470b63de980ea4a71e514a30d63abaebea0c57d2e9c334b1fa99
ppc64le skopeo-1.20.0-2.el10_1.ppc64le.rpm e9a98eadf4f7dcfd8290c8efc74fe34192fb5a869ce3030d8d0ac06f56974305
s390x skopeo-1.20.0-2.el10_1.s390x.rpm 5e32fade6b1380752d1fcc8191049c8ada9dea176c5ca322bf9dc10c2cfe6938
s390x skopeo-tests-1.20.0-2.el10_1.s390x.rpm 706664c242d949dd051bce4ab4bcf796c84043f284459536e4835eb69d20efdb
x86_64 skopeo-1.20.0-2.el10_1.x86_64.rpm 23e894ac48c86239c6894f7cdc1a58e6b5e47eead9a146bebfdaa7a4cf8c88c8
x86_64 skopeo-tests-1.20.0-2.el10_1.x86_64.rpm bbb1ef96d8778018da42d4da1fb8599f819b256e153d500ced48d7ef7d2c9424
x86_64_v2 skopeo-tests-1.20.0-2.el10_1.x86_64_v2.rpm e791b72cf54a06db97591aea5eb953ec3226cad9bf898eb215d8b2c5462d5d66
x86_64_v2 skopeo-1.20.0-2.el10_1.x86_64_v2.rpm e81cb44321b159d47f7c2b155b5de9874dc788313dc3ed1ff3de24b215414d36
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.