Red Hat Product Errata RHSA-2026:90462 - Security Advisory
Issued:
2026-10-26
Updated:
2026-10-26

RHSA-2026:90462 - Security Advisory

Synopsis

Important: skopeo security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for skopeo is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files.

Security Fix(es):

  • podman: Arbitrary file write when importing OCI archive (CVE-2025-11395)
  • net/http: golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667)
  • crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x

Fixes

  • BZ - 2548334 - CVE-2026-78667 net/http: golang: golang: Denial of Service via crafted HTTP Range headers
  • BZ - 2556068 - CVE-2026-111943 crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates

Red Hat Enterprise Linux for x86_64 9

SRPM
skopeo-1.22.2-9.el9_8.src.rpm SHA-256: 67e13c5a676a50988b984f7852fe48e4b117efcbe3c7b7e7b6595b3d2584f578
x86_64
skopeo-1.22.2-9.el9_8.x86_64.rpm SHA-256: e91385d7ca7d21454f164be095bfc29bf1a907002784bb26f83c6d7d4d258876
skopeo-debuginfo-1.22.2-9.el9_8.x86_64.rpm SHA-256: e322af5c0bc9c486ad9ae4d35d2faab75936569b1ef6b275f7ac776f3491c358
skopeo-debugsource-1.22.2-9.el9_8.x86_64.rpm SHA-256: 23b7fc863256ad73ed58b1f0d410b1ca1c642e35b9bc070c6fd9bd4c7b19cabd
skopeo-tests-1.22.2-9.el9_8.x86_64.rpm SHA-256: 1082a2875c188a9888f7579aef3313b9d8f37b251fcbb6e2a0977f7809e5eeab

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8

SRPM
skopeo-1.22.2-9.el9_8.src.rpm SHA-256: 67e13c5a676a50988b984f7852fe48e4b117efcbe3c7b7e7b6595b3d2584f578
x86_64
skopeo-1.22.2-9.el9_8.x86_64.rpm SHA-256: e91385d7ca7d21454f164be095bfc29bf1a907002784bb26f83c6d7d4d258876
skopeo-debuginfo-1.22.2-9.el9_8.x86_64.rpm SHA-256: e322af5c0bc9c486ad9ae4d35d2faab75936569b1ef6b275f7ac776f3491c358
skopeo-debugsource-1.22.2-9.el9_8.x86_64.rpm SHA-256: 23b7fc863256ad73ed58b1f0d410b1ca1c642e35b9bc070c6fd9bd4c7b19cabd
skopeo-tests-1.22.2-9.el9_8.x86_64.rpm SHA-256: 1082a2875c188a9888f7579aef3313b9d8f37b251fcbb6e2a0977f7809e5eeab

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
skopeo-1.22.2-9.el9_8.src.rpm SHA-256: 67e13c5a676a50988b984f7852fe48e4b117efcbe3c7b7e7b6595b3d2584f578
s390x
skopeo-1.22.2-9.el9_8.s390x.rpm SHA-256: 69592d8a494a72e28432688ad8ff04c2753039eaa0b2266451bb57fae6bd7b70
skopeo-debuginfo-1.22.2-9.el9_8.s390x.rpm SHA-256: 171139a9d1a16b7e1058db7a0fb6f642dc95b58630107703aad7a77f337a19ec
skopeo-debugsource-1.22.2-9.el9_8.s390x.rpm SHA-256: 3afa60252988cdf60af65954544c67f7bd7be39dad3edf36714fcbf969dafe03
skopeo-tests-1.22.2-9.el9_8.s390x.rpm SHA-256: 5745ab4a63499f54de51612508873f72d46fd40d75686471ec1f754185aa3c81

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8

SRPM
skopeo-1.22.2-9.el9_8.src.rpm SHA-256: 67e13c5a676a50988b984f7852fe48e4b117efcbe3c7b7e7b6595b3d2584f578
s390x
skopeo-1.22.2-9.el9_8.s390x.rpm SHA-256: 69592d8a494a72e28432688ad8ff04c2753039eaa0b2266451bb57fae6bd7b70
skopeo-debuginfo-1.22.2-9.el9_8.s390x.rpm SHA-256: 171139a9d1a16b7e1058db7a0fb6f642dc95b58630107703aad7a77f337a19ec
skopeo-debugsource-1.22.2-9.el9_8.s390x.rpm SHA-256: 3afa60252988cdf60af65954544c67f7bd7be39dad3edf36714fcbf969dafe03
skopeo-tests-1.22.2-9.el9_8.s390x.rpm SHA-256: 5745ab4a63499f54de51612508873f72d46fd40d75686471ec1f754185aa3c81

Red Hat Enterprise Linux for Power, little endian 9

SRPM
skopeo-1.22.2-9.el9_8.src.rpm SHA-256: 67e13c5a676a50988b984f7852fe48e4b117efcbe3c7b7e7b6595b3d2584f578
ppc64le
skopeo-1.22.2-9.el9_8.ppc64le.rpm SHA-256: 214900e23483aa798e379e4fe09b6bd59ec95f6af737c1ba4ba078a08dd5df54
skopeo-debuginfo-1.22.2-9.el9_8.ppc64le.rpm SHA-256: f4f6c68c90c3454b8f8ef7babfb5ceb42f9c0226fab3c886d5be4821ea44e0d3
skopeo-debugsource-1.22.2-9.el9_8.ppc64le.rpm SHA-256: 5d9456cd62fc39c82a45a61fbf149634a81a20297b6120a29c54cbc50b273b2f
skopeo-tests-1.22.2-9.el9_8.ppc64le.rpm SHA-256: ce5a5fe25ee12fbfcab6e40cd4079c0abd19d7ddc5769fb5ce41195f8fc3bc84

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8

SRPM
skopeo-1.22.2-9.el9_8.src.rpm SHA-256: 67e13c5a676a50988b984f7852fe48e4b117efcbe3c7b7e7b6595b3d2584f578
ppc64le
skopeo-1.22.2-9.el9_8.ppc64le.rpm SHA-256: 214900e23483aa798e379e4fe09b6bd59ec95f6af737c1ba4ba078a08dd5df54
skopeo-debuginfo-1.22.2-9.el9_8.ppc64le.rpm SHA-256: f4f6c68c90c3454b8f8ef7babfb5ceb42f9c0226fab3c886d5be4821ea44e0d3
skopeo-debugsource-1.22.2-9.el9_8.ppc64le.rpm SHA-256: 5d9456cd62fc39c82a45a61fbf149634a81a20297b6120a29c54cbc50b273b2f
skopeo-tests-1.22.2-9.el9_8.ppc64le.rpm SHA-256: ce5a5fe25ee12fbfcab6e40cd4079c0abd19d7ddc5769fb5ce41195f8fc3bc84

Red Hat Enterprise Linux for ARM 64 9

SRPM
skopeo-1.22.2-9.el9_8.src.rpm SHA-256: 67e13c5a676a50988b984f7852fe48e4b117efcbe3c7b7e7b6595b3d2584f578
aarch64
skopeo-1.22.2-9.el9_8.aarch64.rpm SHA-256: 2a9fe910075ac9b193597abc937c9b11c2b8f589cca8527d33f087a8a26ca48a
skopeo-debuginfo-1.22.2-9.el9_8.aarch64.rpm SHA-256: c9dd71f9b5df4cbad8508e7f19b30c238afbb43c9e2866d95fbf916d61f70654
skopeo-debugsource-1.22.2-9.el9_8.aarch64.rpm SHA-256: 041dff1c701b893a6cef6853d44f5915e8b29d9bd08c840b82ebdef740357cad
skopeo-tests-1.22.2-9.el9_8.aarch64.rpm SHA-256: 2b04585ecf9c4657366bd8f0187304a1e8051d3418a83782f3e241735e0891c4

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8

SRPM
skopeo-1.22.2-9.el9_8.src.rpm SHA-256: 67e13c5a676a50988b984f7852fe48e4b117efcbe3c7b7e7b6595b3d2584f578
aarch64
skopeo-1.22.2-9.el9_8.aarch64.rpm SHA-256: 2a9fe910075ac9b193597abc937c9b11c2b8f589cca8527d33f087a8a26ca48a
skopeo-debuginfo-1.22.2-9.el9_8.aarch64.rpm SHA-256: c9dd71f9b5df4cbad8508e7f19b30c238afbb43c9e2866d95fbf916d61f70654
skopeo-debugsource-1.22.2-9.el9_8.aarch64.rpm SHA-256: 041dff1c701b893a6cef6853d44f5915e8b29d9bd08c840b82ebdef740357cad
skopeo-tests-1.22.2-9.el9_8.aarch64.rpm SHA-256: 2b04585ecf9c4657366bd8f0187304a1e8051d3418a83782f3e241735e0891c4

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8

SRPM
skopeo-1.22.2-9.el9_8.src.rpm SHA-256: 67e13c5a676a50988b984f7852fe48e4b117efcbe3c7b7e7b6595b3d2584f578
ppc64le
skopeo-1.22.2-9.el9_8.ppc64le.rpm SHA-256: 214900e23483aa798e379e4fe09b6bd59ec95f6af737c1ba4ba078a08dd5df54
skopeo-debuginfo-1.22.2-9.el9_8.ppc64le.rpm SHA-256: f4f6c68c90c3454b8f8ef7babfb5ceb42f9c0226fab3c886d5be4821ea44e0d3
skopeo-debugsource-1.22.2-9.el9_8.ppc64le.rpm SHA-256: 5d9456cd62fc39c82a45a61fbf149634a81a20297b6120a29c54cbc50b273b2f
skopeo-tests-1.22.2-9.el9_8.ppc64le.rpm SHA-256: ce5a5fe25ee12fbfcab6e40cd4079c0abd19d7ddc5769fb5ce41195f8fc3bc84

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8

SRPM
skopeo-1.22.2-9.el9_8.src.rpm SHA-256: 67e13c5a676a50988b984f7852fe48e4b117efcbe3c7b7e7b6595b3d2584f578
x86_64
skopeo-1.22.2-9.el9_8.x86_64.rpm SHA-256: e91385d7ca7d21454f164be095bfc29bf1a907002784bb26f83c6d7d4d258876
skopeo-debuginfo-1.22.2-9.el9_8.x86_64.rpm SHA-256: e322af5c0bc9c486ad9ae4d35d2faab75936569b1ef6b275f7ac776f3491c358
skopeo-debugsource-1.22.2-9.el9_8.x86_64.rpm SHA-256: 23b7fc863256ad73ed58b1f0d410b1ca1c642e35b9bc070c6fd9bd4c7b19cabd
skopeo-tests-1.22.2-9.el9_8.x86_64.rpm SHA-256: 1082a2875c188a9888f7579aef3313b9d8f37b251fcbb6e2a0977f7809e5eeab

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8

SRPM
skopeo-1.22.2-9.el9_8.src.rpm SHA-256: 67e13c5a676a50988b984f7852fe48e4b117efcbe3c7b7e7b6595b3d2584f578
aarch64
skopeo-1.22.2-9.el9_8.aarch64.rpm SHA-256: 2a9fe910075ac9b193597abc937c9b11c2b8f589cca8527d33f087a8a26ca48a
skopeo-debuginfo-1.22.2-9.el9_8.aarch64.rpm SHA-256: c9dd71f9b5df4cbad8508e7f19b30c238afbb43c9e2866d95fbf916d61f70654
skopeo-debugsource-1.22.2-9.el9_8.aarch64.rpm SHA-256: 041dff1c701b893a6cef6853d44f5915e8b29d9bd08c840b82ebdef740357cad
skopeo-tests-1.22.2-9.el9_8.aarch64.rpm SHA-256: 2b04585ecf9c4657366bd8f0187304a1e8051d3418a83782f3e241735e0891c4

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8

SRPM
skopeo-1.22.2-9.el9_8.src.rpm SHA-256: 67e13c5a676a50988b984f7852fe48e4b117efcbe3c7b7e7b6595b3d2584f578
s390x
skopeo-1.22.2-9.el9_8.s390x.rpm SHA-256: 69592d8a494a72e28432688ad8ff04c2753039eaa0b2266451bb57fae6bd7b70
skopeo-debuginfo-1.22.2-9.el9_8.s390x.rpm SHA-256: 171139a9d1a16b7e1058db7a0fb6f642dc95b58630107703aad7a77f337a19ec
skopeo-debugsource-1.22.2-9.el9_8.s390x.rpm SHA-256: 3afa60252988cdf60af65954544c67f7bd7be39dad3edf36714fcbf969dafe03
skopeo-tests-1.22.2-9.el9_8.s390x.rpm SHA-256: 5745ab4a63499f54de51612508873f72d46fd40d75686471ec1f754185aa3c81

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8

SRPM
skopeo-1.22.2-9.el9_8.src.rpm SHA-256: 67e13c5a676a50988b984f7852fe48e4b117efcbe3c7b7e7b6595b3d2584f578
x86_64
skopeo-1.22.2-9.el9_8.x86_64.rpm SHA-256: e91385d7ca7d21454f164be095bfc29bf1a907002784bb26f83c6d7d4d258876
skopeo-debuginfo-1.22.2-9.el9_8.x86_64.rpm SHA-256: e322af5c0bc9c486ad9ae4d35d2faab75936569b1ef6b275f7ac776f3491c358
skopeo-debugsource-1.22.2-9.el9_8.x86_64.rpm SHA-256: 23b7fc863256ad73ed58b1f0d410b1ca1c642e35b9bc070c6fd9bd4c7b19cabd
skopeo-tests-1.22.2-9.el9_8.x86_64.rpm SHA-256: 1082a2875c188a9888f7579aef3313b9d8f37b251fcbb6e2a0977f7809e5eeab

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8

SRPM
skopeo-1.22.2-9.el9_8.src.rpm SHA-256: 67e13c5a676a50988b984f7852fe48e4b117efcbe3c7b7e7b6595b3d2584f578
aarch64
skopeo-1.22.2-9.el9_8.aarch64.rpm SHA-256: 2a9fe910075ac9b193597abc937c9b11c2b8f589cca8527d33f087a8a26ca48a
skopeo-debuginfo-1.22.2-9.el9_8.aarch64.rpm SHA-256: c9dd71f9b5df4cbad8508e7f19b30c238afbb43c9e2866d95fbf916d61f70654
skopeo-debugsource-1.22.2-9.el9_8.aarch64.rpm SHA-256: 041dff1c701b893a6cef6853d44f5915e8b29d9bd08c840b82ebdef740357cad
skopeo-tests-1.22.2-9.el9_8.aarch64.rpm SHA-256: 2b04585ecf9c4657366bd8f0187304a1e8051d3418a83782f3e241735e0891c4

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8

SRPM
skopeo-1.22.2-9.el9_8.src.rpm SHA-256: 67e13c5a676a50988b984f7852fe48e4b117efcbe3c7b7e7b6595b3d2584f578
ppc64le
skopeo-1.22.2-9.el9_8.ppc64le.rpm SHA-256: 214900e23483aa798e379e4fe09b6bd59ec95f6af737c1ba4ba078a08dd5df54
skopeo-debuginfo-1.22.2-9.el9_8.ppc64le.rpm SHA-256: f4f6c68c90c3454b8f8ef7babfb5ceb42f9c0226fab3c886d5be4821ea44e0d3
skopeo-debugsource-1.22.2-9.el9_8.ppc64le.rpm SHA-256: 5d9456cd62fc39c82a45a61fbf149634a81a20297b6120a29c54cbc50b273b2f
skopeo-tests-1.22.2-9.el9_8.ppc64le.rpm SHA-256: ce5a5fe25ee12fbfcab6e40cd4079c0abd19d7ddc5769fb5ce41195f8fc3bc84

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8

SRPM
skopeo-1.22.2-9.el9_8.src.rpm SHA-256: 67e13c5a676a50988b984f7852fe48e4b117efcbe3c7b7e7b6595b3d2584f578
s390x
skopeo-1.22.2-9.el9_8.s390x.rpm SHA-256: 69592d8a494a72e28432688ad8ff04c2753039eaa0b2266451bb57fae6bd7b70
skopeo-debuginfo-1.22.2-9.el9_8.s390x.rpm SHA-256: 171139a9d1a16b7e1058db7a0fb6f642dc95b58630107703aad7a77f337a19ec
skopeo-debugsource-1.22.2-9.el9_8.s390x.rpm SHA-256: 3afa60252988cdf60af65954544c67f7bd7be39dad3edf36714fcbf969dafe03
skopeo-tests-1.22.2-9.el9_8.s390x.rpm SHA-256: 5745ab4a63499f54de51612508873f72d46fd40d75686471ec1f754185aa3c81

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.