RLSA-2026:97562

See a problem?
Please try reporting it to the source first.

Source

https://errata.rockylinux.org/RLSA-2026:97562

Import Source

https://storage.googleapis.com/resf-osv-data/RLSA-2026:97562.json

JSON Data

https://api.osv.dev/v1/vulns/RLSA-2026:97562

Upstream

CVE (2)

Published

2026-11-13T06:05:11Z

Modified

2026-11-13T06:30:02Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Important: skopeo security, bug fix, and enhancement update

Details

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files.

Security Fix(es):

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload (CVE-2026-41567)

Bug Fix(es) and Enhancement(s):

Update skopeo to 1.22.2 [rhel-9.9] (JIRA:Rocky Linux-170520)
update to the latest upstream release (JIRA:Rocky Linux-185740)
switch skopeo to sustaining-engineering GitLab release-1.22 branch and bump epoch (JIRA:Rocky Linux-220456)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.

Database specific

{
    "license": "CC-BY-4.0",
    "license_url": "https://creativecommons.org/licenses/by/4.0/",
    "source_advisory": "RHSA-2026:97562"
}

References

Credits

- Rocky Enterprise Software Foundation
- Red Hat

Affected packages

Rocky Linux:9

skopeo

Package

Name: skopeo
Purl: pkg:rpm/rocky-linux/skopeo?distro=rocky-linux-9&epoch=3

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

3:1.22.2-4.el9

Database specific

Show details

{
    "yum_repository": "AppStream"
}

Database specific

source

"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97562.json"

skopeo-debuginfo

Package

Name: skopeo-debuginfo
Purl: pkg:rpm/rocky-linux/skopeo-debuginfo?distro=rocky-linux-9&epoch=3

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

3:1.22.2-4.el9

Database specific

Show details

{
    "yum_repository": "AppStream"
}

Database specific

source

"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97562.json"

skopeo-debugsource

Package

Name: skopeo-debugsource
Purl: pkg:rpm/rocky-linux/skopeo-debugsource?distro=rocky-linux-9&epoch=3

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

3:1.22.2-4.el9

Database specific

Show details

{
    "yum_repository": "AppStream"
}

Database specific

source

"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97562.json"

skopeo-tests

Package

Name: skopeo-tests
Purl: pkg:rpm/rocky-linux/skopeo-tests?distro=rocky-linux-9&epoch=3

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

3:1.22.2-4.el9

Database specific

Show details

{
    "yum_repository": "AppStream"
}

Database specific

source

"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97562.json"

skopeo

Package

Name: skopeo
Purl: pkg:rpm/rocky-linux/skopeo?distro=rocky-linux-9&epoch=3

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

3:1.22.2-4.el9

Database specific

Show details

{
    "yum_repository": "AppStream"
}

Database specific

source

"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97562.json"

skopeo-debuginfo

Package

Name: skopeo-debuginfo
Purl: pkg:rpm/rocky-linux/skopeo-debuginfo?distro=rocky-linux-9&epoch=3

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

3:1.22.2-4.el9

Database specific

Show details

{
    "yum_repository": "AppStream"
}

Database specific

source

"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97562.json"

skopeo-debugsource

Package

Name: skopeo-debugsource
Purl: pkg:rpm/rocky-linux/skopeo-debugsource?distro=rocky-linux-9&epoch=3

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

3:1.22.2-4.el9

Database specific

Show details

{
    "yum_repository": "AppStream"
}

Database specific

source

"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97562.json"

skopeo-tests

Package

Name: skopeo-tests
Purl: pkg:rpm/rocky-linux/skopeo-tests?distro=rocky-linux-9&epoch=3

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

3:1.22.2-4.el9

Database specific

Show details

{
    "yum_repository": "AppStream"
}

Database specific

source

"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97562.json"

skopeo

Package

Name: skopeo
Purl: pkg:rpm/rocky-linux/skopeo?distro=rocky-linux-9&epoch=3

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

3:1.22.2-4.el9

Database specific

Show details

{
    "yum_repository": "AppStream"
}

Database specific

source

"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97562.json"

skopeo-debuginfo

Package

Name: skopeo-debuginfo
Purl: pkg:rpm/rocky-linux/skopeo-debuginfo?distro=rocky-linux-9&epoch=3

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

3:1.22.2-4.el9

Database specific

Show details

{
    "yum_repository": "AppStream"
}

Database specific

source

"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97562.json"

skopeo-debugsource

Package

Name: skopeo-debugsource
Purl: pkg:rpm/rocky-linux/skopeo-debugsource?distro=rocky-linux-9&epoch=3

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

3:1.22.2-4.el9

Database specific

Show details

{
    "yum_repository": "AppStream"
}

Database specific

source

"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97562.json"

skopeo-tests

Package

Name: skopeo-tests
Purl: pkg:rpm/rocky-linux/skopeo-tests?distro=rocky-linux-9&epoch=3

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

3:1.22.2-4.el9

Database specific

Show details

{
    "yum_repository": "AppStream"
}

Database specific

source

"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97562.json"

skopeo

Package

Name: skopeo
Purl: pkg:rpm/rocky-linux/skopeo?distro=rocky-linux-9&epoch=3

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

3:1.22.2-4.el9

Database specific

Show details

{
    "yum_repository": "AppStream"
}

Database specific

source

"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97562.json"

skopeo-debuginfo

Package

Name: skopeo-debuginfo
Purl: pkg:rpm/rocky-linux/skopeo-debuginfo?distro=rocky-linux-9&epoch=3

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

3:1.22.2-4.el9

Database specific

Show details

{
    "yum_repository": "AppStream"
}

Database specific

source

"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97562.json"

skopeo-debugsource

Package

Name: skopeo-debugsource
Purl: pkg:rpm/rocky-linux/skopeo-debugsource?distro=rocky-linux-9&epoch=3

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

3:1.22.2-4.el9

Database specific

Show details

{
    "yum_repository": "AppStream"
}

Database specific

source

"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97562.json"

skopeo-tests

Package

Name: skopeo-tests
Purl: pkg:rpm/rocky-linux/skopeo-tests?distro=rocky-linux-9&epoch=3

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

3:1.22.2-4.el9

Database specific

Show details

{
    "yum_repository": "AppStream"
}

Database specific

source

"https://storage.googleapis.com/resf-osv-data/RLSA-2026:97562.json"