Description:
The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files.
Security Fix(es):
* podman: Arbitrary file write when importing OCI archive (CVE-2025-11395)
* net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667)
* crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
| Architecture |
Package |
Checksum |
| aarch64 |
skopeo-tests-1.22.2-6.el10_2.aarch64.rpm |
9a87630be09d0573f928040a4143f2abbe06b0fe35d6705fbaf7ade8306d1197 |
| aarch64 |
skopeo-1.22.2-6.el10_2.aarch64.rpm |
e66da8e43ab13e65ba603f301e32190a971103a8c3835aba26027b241952b493 |
| ppc64le |
skopeo-tests-1.22.2-6.el10_2.ppc64le.rpm |
8c5286b5187d182b6e1c5c222c12ef7d66b75ae59ca66fa2c8346dc56993478e |
| ppc64le |
skopeo-1.22.2-6.el10_2.ppc64le.rpm |
ab882ab42db604f3d9114bae1d8bd0188b55306955962783954b31c92e539a2f |
| s390x |
skopeo-tests-1.22.2-6.el10_2.s390x.rpm |
6be6b0cc5f4f3778d0f9e39af3e6c8f1e3a2666d935129a702e59351cfeb95e5 |
| s390x |
skopeo-1.22.2-6.el10_2.s390x.rpm |
cda3fc9bc123909fbbd24710d235b32c863ec56d1f55332c5eaa8faa151cb304 |
| x86_64 |
skopeo-1.22.2-6.el10_2.x86_64.rpm |
4a2de19a3ebc070289d3e9cf38e3d2f470bad8af862e368f0e655a1c0beafe1f |
| x86_64 |
skopeo-tests-1.22.2-6.el10_2.x86_64.rpm |
b0f9462806f00f828e9d06a5dad820041ec4f53a1d2cd84bd5a5f81810599296 |
| x86_64_v2 |
skopeo-tests-1.22.2-6.el10_2.x86_64_v2.rpm |
14bf18f1e35afadbc761dc06c64da4a298e0ea6ab2d01c3cffde17c4ad68e9ed |
| x86_64_v2 |
skopeo-1.22.2-6.el10_2.x86_64_v2.rpm |
c28290b8e29f67752212c9c18bd82d0899fe36f5fe07f5e4b8a5501260702aef |
