ELSA-2026-19031

ELSA-2026-19031 - skopeo security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-08

Description

[2:1.22.2-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.22.2
- fixes signature verification of images which only sign the per-platform
manifest in skopeo proxy
- Resolves: RHEL-168168

[1:1.22.0-3]
- enable sequoia
- Resolves: RHEL-56364

[1:1.22.0-2]
- Rebuild for new golang to address CVE-2025-68121
- Resolves: RHEL-149255

[1:1.22.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.22.0
- Related: RHEL-122178

[1:1.21.0-1]
- update to https://github.com/containers/skopeo/releases/tag/v1.21.0
- Related: RHEL-122178

Related CVEs

CVE-2026-25679

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	skopeo-1.22.2-1.el10_2.src.rpm	d182a3a53f9c7645c399ac603a06ed390a4f39f9063c29c2082f54a45ae0ee0e	-	ol10_aarch64_appstream
	skopeo-1.22.2-1.el10_2.aarch64.rpm	07c84c11f2d4142cc88ae81fb1ddbf52147d583ab652f61401449ef758a61b0d	-	ol10_aarch64_appstream
	skopeo-tests-1.22.2-1.el10_2.aarch64.rpm	f1db00950cfb88e789249913445f4fd92132e779bc9e15469d8d4c5bd2af4ed2	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	skopeo-1.22.2-1.el10_2.src.rpm	d182a3a53f9c7645c399ac603a06ed390a4f39f9063c29c2082f54a45ae0ee0e	-	ol10_x86_64_appstream
	skopeo-1.22.2-1.el10_2.x86_64.rpm	76d10aaf434a6d9ea57c076a61d2329915f50c228bf23fca649312ae80f3288d	-	ol10_x86_64_appstream
	skopeo-tests-1.22.2-1.el10_2.x86_64.rpm	321a0db85800972b840adbe2eee56fa4e4c6f969ae14f09740b95fe39ccf3279	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team