Red Hat Product Errata RHSA-2026:36317 - Security Advisory
Issued:
2026-07-07
Updated:
2026-07-07

RHSA-2026:36317 - Security Advisory

Synopsis

Important: skopeo security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for skopeo is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files.

Security Fix(es):

  • net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
  • crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x

Fixes

  • BZ - 2445356 - CVE-2026-25679 net/url: Incorrect parsing of IPv6 host literals in net/url
  • BZ - 2484207 - CVE-2026-27145 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

Red Hat Enterprise Linux for x86_64 9

SRPM
skopeo-1.22.2-7.el9_8.src.rpm SHA-256: 13dcedda81723abf87f55c5891cea75663d5df9598266d1cdb54225131d6a8be
x86_64
skopeo-1.22.2-7.el9_8.x86_64.rpm SHA-256: ec499a7f895bc70eae5e50527dbbe6b1ff621ba0599bc8bbf0a55a4661924bbc
skopeo-debuginfo-1.22.2-7.el9_8.x86_64.rpm SHA-256: fae50dd1a08626a99546986698d5ed69679fb755004d096221762c9b872200ea
skopeo-debugsource-1.22.2-7.el9_8.x86_64.rpm SHA-256: 0c7e0f8097b2cc39765ea9b8acc19567592a8f418a8a1a5fe07b51a44275f794
skopeo-tests-1.22.2-7.el9_8.x86_64.rpm SHA-256: 2e1ea5c2acdea295942316d8c2b7869f91652deb87217a793d1fc79bea344eb1

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8

SRPM
skopeo-1.22.2-7.el9_8.src.rpm SHA-256: 13dcedda81723abf87f55c5891cea75663d5df9598266d1cdb54225131d6a8be
x86_64
skopeo-1.22.2-7.el9_8.x86_64.rpm SHA-256: ec499a7f895bc70eae5e50527dbbe6b1ff621ba0599bc8bbf0a55a4661924bbc
skopeo-debuginfo-1.22.2-7.el9_8.x86_64.rpm SHA-256: fae50dd1a08626a99546986698d5ed69679fb755004d096221762c9b872200ea
skopeo-debugsource-1.22.2-7.el9_8.x86_64.rpm SHA-256: 0c7e0f8097b2cc39765ea9b8acc19567592a8f418a8a1a5fe07b51a44275f794
skopeo-tests-1.22.2-7.el9_8.x86_64.rpm SHA-256: 2e1ea5c2acdea295942316d8c2b7869f91652deb87217a793d1fc79bea344eb1

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
skopeo-1.22.2-7.el9_8.src.rpm SHA-256: 13dcedda81723abf87f55c5891cea75663d5df9598266d1cdb54225131d6a8be
s390x
skopeo-1.22.2-7.el9_8.s390x.rpm SHA-256: f6443948836661ed52d4f2a887dc31b706d0ac0d3e3211080b7ace46d2e05044
skopeo-debuginfo-1.22.2-7.el9_8.s390x.rpm SHA-256: 9b34e549885e58842115033c15bab025c0d15e4fb5fa8bf5be06a455a939d4f3
skopeo-debugsource-1.22.2-7.el9_8.s390x.rpm SHA-256: 50d1a3d587585c7e522028997bef52f77b941f975ec448b85dae87d1b9932a34
skopeo-tests-1.22.2-7.el9_8.s390x.rpm SHA-256: 16342bc27d674f35f3e1b45b8b3c42843c095ebf92411ed527968e4bbd46d16f

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8

SRPM
skopeo-1.22.2-7.el9_8.src.rpm SHA-256: 13dcedda81723abf87f55c5891cea75663d5df9598266d1cdb54225131d6a8be
s390x
skopeo-1.22.2-7.el9_8.s390x.rpm SHA-256: f6443948836661ed52d4f2a887dc31b706d0ac0d3e3211080b7ace46d2e05044
skopeo-debuginfo-1.22.2-7.el9_8.s390x.rpm SHA-256: 9b34e549885e58842115033c15bab025c0d15e4fb5fa8bf5be06a455a939d4f3
skopeo-debugsource-1.22.2-7.el9_8.s390x.rpm SHA-256: 50d1a3d587585c7e522028997bef52f77b941f975ec448b85dae87d1b9932a34
skopeo-tests-1.22.2-7.el9_8.s390x.rpm SHA-256: 16342bc27d674f35f3e1b45b8b3c42843c095ebf92411ed527968e4bbd46d16f

Red Hat Enterprise Linux for Power, little endian 9

SRPM
skopeo-1.22.2-7.el9_8.src.rpm SHA-256: 13dcedda81723abf87f55c5891cea75663d5df9598266d1cdb54225131d6a8be
ppc64le
skopeo-1.22.2-7.el9_8.ppc64le.rpm SHA-256: 50cdbb25c13f0f63f486e69a7bc72b2bb2df0237fd9c3352ef964a975ef06bc0
skopeo-debuginfo-1.22.2-7.el9_8.ppc64le.rpm SHA-256: 190763c68a3ddc7ab4f0466d477a4cf8a7651a463dfc73c611794cbacf234296
skopeo-debugsource-1.22.2-7.el9_8.ppc64le.rpm SHA-256: 9dc15438f7c9f5f3cd5919e78cb54a8a0e1d04b89247c4bb83e087e17812d476
skopeo-tests-1.22.2-7.el9_8.ppc64le.rpm SHA-256: 5845069be6041af541fae1b4413aa234e08274f1cc28bcf76859393f288b9df3

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8

SRPM
skopeo-1.22.2-7.el9_8.src.rpm SHA-256: 13dcedda81723abf87f55c5891cea75663d5df9598266d1cdb54225131d6a8be
ppc64le
skopeo-1.22.2-7.el9_8.ppc64le.rpm SHA-256: 50cdbb25c13f0f63f486e69a7bc72b2bb2df0237fd9c3352ef964a975ef06bc0
skopeo-debuginfo-1.22.2-7.el9_8.ppc64le.rpm SHA-256: 190763c68a3ddc7ab4f0466d477a4cf8a7651a463dfc73c611794cbacf234296
skopeo-debugsource-1.22.2-7.el9_8.ppc64le.rpm SHA-256: 9dc15438f7c9f5f3cd5919e78cb54a8a0e1d04b89247c4bb83e087e17812d476
skopeo-tests-1.22.2-7.el9_8.ppc64le.rpm SHA-256: 5845069be6041af541fae1b4413aa234e08274f1cc28bcf76859393f288b9df3

Red Hat Enterprise Linux for ARM 64 9

SRPM
skopeo-1.22.2-7.el9_8.src.rpm SHA-256: 13dcedda81723abf87f55c5891cea75663d5df9598266d1cdb54225131d6a8be
aarch64
skopeo-1.22.2-7.el9_8.aarch64.rpm SHA-256: 074a883d072a5cbf34005d8d5b4a001358d346636ea9215cf45962081133d93e
skopeo-debuginfo-1.22.2-7.el9_8.aarch64.rpm SHA-256: 3133488ae2222394781d8d94ce323dda76c9b09a8dde9c097707e76af173292f
skopeo-debugsource-1.22.2-7.el9_8.aarch64.rpm SHA-256: 1573c41d18517997042be4d910d978496e4fa355c233ae738c97b4ef4f26b915
skopeo-tests-1.22.2-7.el9_8.aarch64.rpm SHA-256: d8c44ea13e96ffe56ffcc34f9b6520f14a005a17ebec03405a93488fc102fb86

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8

SRPM
skopeo-1.22.2-7.el9_8.src.rpm SHA-256: 13dcedda81723abf87f55c5891cea75663d5df9598266d1cdb54225131d6a8be
aarch64
skopeo-1.22.2-7.el9_8.aarch64.rpm SHA-256: 074a883d072a5cbf34005d8d5b4a001358d346636ea9215cf45962081133d93e
skopeo-debuginfo-1.22.2-7.el9_8.aarch64.rpm SHA-256: 3133488ae2222394781d8d94ce323dda76c9b09a8dde9c097707e76af173292f
skopeo-debugsource-1.22.2-7.el9_8.aarch64.rpm SHA-256: 1573c41d18517997042be4d910d978496e4fa355c233ae738c97b4ef4f26b915
skopeo-tests-1.22.2-7.el9_8.aarch64.rpm SHA-256: d8c44ea13e96ffe56ffcc34f9b6520f14a005a17ebec03405a93488fc102fb86

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8

SRPM
skopeo-1.22.2-7.el9_8.src.rpm SHA-256: 13dcedda81723abf87f55c5891cea75663d5df9598266d1cdb54225131d6a8be
ppc64le
skopeo-1.22.2-7.el9_8.ppc64le.rpm SHA-256: 50cdbb25c13f0f63f486e69a7bc72b2bb2df0237fd9c3352ef964a975ef06bc0
skopeo-debuginfo-1.22.2-7.el9_8.ppc64le.rpm SHA-256: 190763c68a3ddc7ab4f0466d477a4cf8a7651a463dfc73c611794cbacf234296
skopeo-debugsource-1.22.2-7.el9_8.ppc64le.rpm SHA-256: 9dc15438f7c9f5f3cd5919e78cb54a8a0e1d04b89247c4bb83e087e17812d476
skopeo-tests-1.22.2-7.el9_8.ppc64le.rpm SHA-256: 5845069be6041af541fae1b4413aa234e08274f1cc28bcf76859393f288b9df3

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8

SRPM
skopeo-1.22.2-7.el9_8.src.rpm SHA-256: 13dcedda81723abf87f55c5891cea75663d5df9598266d1cdb54225131d6a8be
x86_64
skopeo-1.22.2-7.el9_8.x86_64.rpm SHA-256: ec499a7f895bc70eae5e50527dbbe6b1ff621ba0599bc8bbf0a55a4661924bbc
skopeo-debuginfo-1.22.2-7.el9_8.x86_64.rpm SHA-256: fae50dd1a08626a99546986698d5ed69679fb755004d096221762c9b872200ea
skopeo-debugsource-1.22.2-7.el9_8.x86_64.rpm SHA-256: 0c7e0f8097b2cc39765ea9b8acc19567592a8f418a8a1a5fe07b51a44275f794
skopeo-tests-1.22.2-7.el9_8.x86_64.rpm SHA-256: 2e1ea5c2acdea295942316d8c2b7869f91652deb87217a793d1fc79bea344eb1

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8

SRPM
skopeo-1.22.2-7.el9_8.src.rpm SHA-256: 13dcedda81723abf87f55c5891cea75663d5df9598266d1cdb54225131d6a8be
aarch64
skopeo-1.22.2-7.el9_8.aarch64.rpm SHA-256: 074a883d072a5cbf34005d8d5b4a001358d346636ea9215cf45962081133d93e
skopeo-debuginfo-1.22.2-7.el9_8.aarch64.rpm SHA-256: 3133488ae2222394781d8d94ce323dda76c9b09a8dde9c097707e76af173292f
skopeo-debugsource-1.22.2-7.el9_8.aarch64.rpm SHA-256: 1573c41d18517997042be4d910d978496e4fa355c233ae738c97b4ef4f26b915
skopeo-tests-1.22.2-7.el9_8.aarch64.rpm SHA-256: d8c44ea13e96ffe56ffcc34f9b6520f14a005a17ebec03405a93488fc102fb86

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8

SRPM
skopeo-1.22.2-7.el9_8.src.rpm SHA-256: 13dcedda81723abf87f55c5891cea75663d5df9598266d1cdb54225131d6a8be
s390x
skopeo-1.22.2-7.el9_8.s390x.rpm SHA-256: f6443948836661ed52d4f2a887dc31b706d0ac0d3e3211080b7ace46d2e05044
skopeo-debuginfo-1.22.2-7.el9_8.s390x.rpm SHA-256: 9b34e549885e58842115033c15bab025c0d15e4fb5fa8bf5be06a455a939d4f3
skopeo-debugsource-1.22.2-7.el9_8.s390x.rpm SHA-256: 50d1a3d587585c7e522028997bef52f77b941f975ec448b85dae87d1b9932a34
skopeo-tests-1.22.2-7.el9_8.s390x.rpm SHA-256: 16342bc27d674f35f3e1b45b8b3c42843c095ebf92411ed527968e4bbd46d16f

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8

SRPM
skopeo-1.22.2-7.el9_8.src.rpm SHA-256: 13dcedda81723abf87f55c5891cea75663d5df9598266d1cdb54225131d6a8be
x86_64
skopeo-1.22.2-7.el9_8.x86_64.rpm SHA-256: ec499a7f895bc70eae5e50527dbbe6b1ff621ba0599bc8bbf0a55a4661924bbc
skopeo-debuginfo-1.22.2-7.el9_8.x86_64.rpm SHA-256: fae50dd1a08626a99546986698d5ed69679fb755004d096221762c9b872200ea
skopeo-debugsource-1.22.2-7.el9_8.x86_64.rpm SHA-256: 0c7e0f8097b2cc39765ea9b8acc19567592a8f418a8a1a5fe07b51a44275f794
skopeo-tests-1.22.2-7.el9_8.x86_64.rpm SHA-256: 2e1ea5c2acdea295942316d8c2b7869f91652deb87217a793d1fc79bea344eb1

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8

SRPM
skopeo-1.22.2-7.el9_8.src.rpm SHA-256: 13dcedda81723abf87f55c5891cea75663d5df9598266d1cdb54225131d6a8be
aarch64
skopeo-1.22.2-7.el9_8.aarch64.rpm SHA-256: 074a883d072a5cbf34005d8d5b4a001358d346636ea9215cf45962081133d93e
skopeo-debuginfo-1.22.2-7.el9_8.aarch64.rpm SHA-256: 3133488ae2222394781d8d94ce323dda76c9b09a8dde9c097707e76af173292f
skopeo-debugsource-1.22.2-7.el9_8.aarch64.rpm SHA-256: 1573c41d18517997042be4d910d978496e4fa355c233ae738c97b4ef4f26b915
skopeo-tests-1.22.2-7.el9_8.aarch64.rpm SHA-256: d8c44ea13e96ffe56ffcc34f9b6520f14a005a17ebec03405a93488fc102fb86

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8

SRPM
skopeo-1.22.2-7.el9_8.src.rpm SHA-256: 13dcedda81723abf87f55c5891cea75663d5df9598266d1cdb54225131d6a8be
ppc64le
skopeo-1.22.2-7.el9_8.ppc64le.rpm SHA-256: 50cdbb25c13f0f63f486e69a7bc72b2bb2df0237fd9c3352ef964a975ef06bc0
skopeo-debuginfo-1.22.2-7.el9_8.ppc64le.rpm SHA-256: 190763c68a3ddc7ab4f0466d477a4cf8a7651a463dfc73c611794cbacf234296
skopeo-debugsource-1.22.2-7.el9_8.ppc64le.rpm SHA-256: 9dc15438f7c9f5f3cd5919e78cb54a8a0e1d04b89247c4bb83e087e17812d476
skopeo-tests-1.22.2-7.el9_8.ppc64le.rpm SHA-256: 5845069be6041af541fae1b4413aa234e08274f1cc28bcf76859393f288b9df3

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8

SRPM
skopeo-1.22.2-7.el9_8.src.rpm SHA-256: 13dcedda81723abf87f55c5891cea75663d5df9598266d1cdb54225131d6a8be
s390x
skopeo-1.22.2-7.el9_8.s390x.rpm SHA-256: f6443948836661ed52d4f2a887dc31b706d0ac0d3e3211080b7ace46d2e05044
skopeo-debuginfo-1.22.2-7.el9_8.s390x.rpm SHA-256: 9b34e549885e58842115033c15bab025c0d15e4fb5fa8bf5be06a455a939d4f3
skopeo-debugsource-1.22.2-7.el9_8.s390x.rpm SHA-256: 50d1a3d587585c7e522028997bef52f77b941f975ec448b85dae87d1b9932a34
skopeo-tests-1.22.2-7.el9_8.s390x.rpm SHA-256: 16342bc27d674f35f3e1b45b8b3c42843c095ebf92411ed527968e4bbd46d16f

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.