Summary
[2:1.22.2-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.22.2
- fixes signature verification of images which only sign the per-platform
manifest in skopeo proxy
- Resolves: RHEL-168168
[1:1.22.0-3]
- enable sequoia
- Resolves: RHEL-56364
[1:1.22.0-2]
- Rebuild for new golang to address CVE-2025-68121
- Resolves: RHEL-149255
[1:1.22.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.22.0
- Related: RHEL-122178
[1:1.21.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.21.0
- Related: RHEL-122178
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | skopeo | 2:1.22.2-1.el10_2 |
| Oracle Linux · 10 | skopeo-tests | 2:1.22.2-1.el10_2 |
Vulnerabilities 1
-
High 7.5
Incorrect parsing of IPv6 host literals in net/url
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.