[ALSA-2025:9149] Moderate: skopeo security update
Type:
security
Severity:
moderate
Release date:
2025-06-17
Description:
The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 skopeo-1.18.1-2.el10_0.aarch64.rpm 4c6f7c233eb7c92bad8369706ef2a22545afbaff3b90cf5b56d8ac28d72797d1
aarch64 skopeo-tests-1.18.1-2.el10_0.aarch64.rpm 975be080578a4ad08462d7ac68627d323c9282653b90011e87541eca29773307
ppc64le skopeo-1.18.1-2.el10_0.ppc64le.rpm 0fe580b98fd44a6e9bb8feeb7a4861bcaf34fe5b2dc2481ae28037c5cff343ea
ppc64le skopeo-tests-1.18.1-2.el10_0.ppc64le.rpm 94a1cb4da8cf9dd135bb510fc12265439a9c4cfa11f0eb927a65279ec1059cdb
s390x skopeo-1.18.1-2.el10_0.s390x.rpm 428f63d28f5c6fc31cafc5783cae648cf651ec689b78e259335755ac288a8b4c
s390x skopeo-tests-1.18.1-2.el10_0.s390x.rpm e9ac37a91e660abba8dd9729b0a0f393839212d0293a0ef9ab004dc1f5c4b2ee
x86_64 skopeo-1.18.1-2.el10_0.x86_64.rpm 0e21cd5cfcce93f11e1064a62e6cfb44115e3bd38751fd22c520818a7e9d2329
x86_64 skopeo-tests-1.18.1-2.el10_0.x86_64.rpm 413f0e536a5156243ba4492f9d46ca18f29e4d15f809fb17a5922c0a952c8606
x86_64_v2 skopeo-1.18.1-2.el10_0.x86_64_v2.rpm 0657f2cd95a4b03563e22f5ced4903e3046d89dde9c44b8b593b4f047f72ab94
x86_64_v2 skopeo-tests-1.18.1-2.el10_0.x86_64_v2.rpm 423183422a81bf3dacb7fbf0df2229b1885e0ec7c75476ae5d00fed62ca6c70f
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.