Description:
The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files.
Security Fix(es):
* podman: Arbitrary file write when importing OCI archive (CVE-2025-11395)
* net/[http:](http:) golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667)
* crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
| Architecture |
Package |
Checksum |
| aarch64 |
skopeo-1.22.2-9.el9_8.aarch64.rpm |
5a4b56bc1ce3bbc239e1c5b1035ea8b8529ba519392abec4b9641aa0cd1bea64 |
| aarch64 |
skopeo-tests-1.22.2-9.el9_8.aarch64.rpm |
8f07ae4790c4ed66fd3ea5526f4c0796d1e49f054e450c810b6327be9e8c3c4d |
| ppc64le |
skopeo-1.22.2-9.el9_8.ppc64le.rpm |
c39932eda947d5b149ae9a0f94de2cc99d692d63dba950bf6a6062f426386eb6 |
| ppc64le |
skopeo-tests-1.22.2-9.el9_8.ppc64le.rpm |
de699472bf89cfcd586818fbecd60b7c5cb48c8fa0bbde20ab7884323e3d94e4 |
| s390x |
skopeo-tests-1.22.2-9.el9_8.s390x.rpm |
49209ccd37d83a359d68affcb28ef41b0be364341876fc7918579c8dcfd25204 |
| s390x |
skopeo-1.22.2-9.el9_8.s390x.rpm |
e8e9ac4ea9d801b93617e2340d71d40149499e0831cf6b49f31bf0f2cb3e003c |
| x86_64 |
skopeo-tests-1.22.2-9.el9_8.x86_64.rpm |
3b9b80bb246d19d88043eee38ebfa812bbdbf767d81e7b97df85f30f5eec6174 |
| x86_64 |
skopeo-1.22.2-9.el9_8.x86_64.rpm |
64408670b88834fcb1b65fadb2c9c7d6d02e8fcc158246e7e4332804c6e19636 |
