RED HATVERIFIED
Red Hat Security Advisory: skopeo security update
Checked 4 Oct 2026. BlackTree preserves the last verified facts if a later source check is temporarily unavailable.
Open the official publisher source
← Lifecycle catalogue
SECURITY ADVISORYRED HATVERIFIED
PUBLISHER UPDATE · RHSA-2026-9098
RHSA-2026-9098 release notes and known issues
Red Hat Security Advisory: skopeo security update
Scope: Red Hat Enterprise Linux. This update record adds version, fix and known-issue context. Its publication date is not a lifecycle boundary.
Summary
An update for skopeo is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Known issues
Publisher statementNot stated. The verified publisher record does not contain a known-issues statement.
Affected products and versions
Products
- Red Hat Enterprise Linux
Affected versions
- Red Hat Enterprise Linux AppStream EUS (v.9.6)
- skopeo-2:1.18.1-5.el9_6.src
- skopeo-2:1.18.1-5.el9_6.aarch64
- skopeo-tests-2:1.18.1-5.el9_6.aarch64
- skopeo-debugsource-2:1.18.1-5.el9_6.aarch64
- skopeo-debuginfo-2:1.18.1-5.el9_6.aarch64
- skopeo-2:1.18.1-5.el9_6.ppc64le
- skopeo-tests-2:1.18.1-5.el9_6.ppc64le
- skopeo-debugsource-2:1.18.1-5.el9_6.ppc64le
- skopeo-debuginfo-2:1.18.1-5.el9_6.ppc64le
- skopeo-2:1.18.1-5.el9_6.x86_64
- skopeo-tests-2:1.18.1-5.el9_6.x86_64
- skopeo-debugsource-2:1.18.1-5.el9_6.x86_64
- skopeo-debuginfo-2:1.18.1-5.el9_6.x86_64
- skopeo-2:1.18.1-5.el9_6.s390x
- skopeo-tests-2:1.18.1-5.el9_6.s390x
- skopeo-debugsource-2:1.18.1-5.el9_6.s390x
- skopeo-debuginfo-2:1.18.1-5.el9_6.s390x
Fixed versions or updates
- No fixed version is stated in this record.
Recommended action
Apply the Red Hat updates listed in the official advisory.