Red Hat Product Errata RHSA-2026:19031 - Security Advisory Issued: 2026-05-19 Updated: 2026-05-19 RHSA-2026:19031 - Security Advisory Overview Updated Packages Synopsis Important: skopeo security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for skopeo is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2445356 - CVE-2026-25679 net/url: Incorrect parsing of IPv6 host literals in net/url RHEL-168168 - Multi-arch manifest-lists and skopeo 1.22.0 vs. rpm-ostree "no signature exists" - [RHEL 10.2] [0day] CVEs CVE-2026-25679 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM skopeo-1.22.2-1.el10_2.src.rpm SHA-256: e3b9f15b82cbf0839e2016b9e1e055cd488b23cfbf03d912baa01dbbec1cda29 x86_64 skopeo-1.22.2-1.el10_2.x86_64.rpm SHA-256: f641e6f6a3be82c98ed99f111e15ccce81ff6ab86247e34d5d97575b01a91ac6 skopeo-debuginfo-1.22.2-1.el10_2.x86_64.rpm SHA-256: 44bbaa36807dac2882d346b30df599dd07ace3ad7a9a7ecfcd1875e228b1ddb4 skopeo-debugsource-1.22.2-1.el10_2.x86_64.rpm SHA-256: fed9e64e5be19193ff8b5bb8d37d61247ee92cba4524e29f4f7e737585a1ab35 skopeo-tests-1.22.2-1.el10_2.x86_64.rpm SHA-256: ad9a4c073e67eeeebc73c9186dfabe3c427b955a0a842c589206c382645a54e8 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM skopeo-1.22.2-1.el10_2.src.rpm SHA-256: e3b9f15b82cbf0839e2016b9e1e055cd488b23cfbf03d912baa01dbbec1cda29 x86_64 skopeo-1.22.2-1.el10_2.x86_64.rpm SHA-256: f641e6f6a3be82c98ed99f111e15ccce81ff6ab86247e34d5d97575b01a91ac6 skopeo-debuginfo-1.22.2-1.el10_2.x86_64.rpm SHA-256: 44bbaa36807dac2882d346b30df599dd07ace3ad7a9a7ecfcd1875e228b1ddb4 skopeo-debugsource-1.22.2-1.el10_2.x86_64.rpm SHA-256: fed9e64e5be19193ff8b5bb8d37d61247ee92cba4524e29f4f7e737585a1ab35 skopeo-tests-1.22.2-1.el10_2.x86_64.rpm SHA-256: ad9a4c073e67eeeebc73c9186dfabe3c427b955a0a842c589206c382645a54e8 Red Hat Enterprise Linux for IBM z Systems 10 SRPM skopeo-1.22.2-1.el10_2.src.rpm SHA-256: e3b9f15b82cbf0839e2016b9e1e055cd488b23cfbf03d912baa01dbbec1cda29 s390x skopeo-1.22.2-1.el10_2.s390x.rpm SHA-256: 900346367aeeef1417cb7957a4cca550c1723758fce195d8bf3081f741abcca7 skopeo-debuginfo-1.22.2-1.el10_2.s390x.rpm SHA-256: adb1e3e468bae714ee00aed0fd3f9d72ccb45c932de43e31541e38cec7a3c2db skopeo-debugsource-1.22.2-1.el10_2.s390x.rpm SHA-256: 162dae68f38a90274167286aac862c5429b8cb8bad1a848a235dbfbcfefd8285 skopeo-tests-1.22.2-1.el10_2.s390x.rpm SHA-256: c0334d1239d0ff931e99e93c33d60585b45bb50b1ba9b3ee9a7170759fd73f9b Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM skopeo-1.22.2-1.el10_2.src.rpm SHA-256: e3b9f15b82cbf0839e2016b9e1e055cd488b23cfbf03d912baa01dbbec1cda29 s390x skopeo-1.22.2-1.el10_2.s390x.rpm SHA-256: 900346367aeeef1417cb7957a4cca550c1723758fce195d8bf3081f741abcca7 skopeo-debuginfo-1.22.2-1.el10_2.s390x.rpm SHA-256: adb1e3e468bae714ee00aed0fd3f9d72ccb45c932de43e31541e38cec7a3c2db skopeo-debugsource-1.22.2-1.el10_2.s390x.rpm SHA-256: 162dae68f38a90274167286aac862c5429b8cb8bad1a848a235dbfbcfefd8285 skopeo-tests-1.22.2-1.el10_2.s390x.rpm SHA-256: c0334d1239d0ff931e99e93c33d60585b45bb50b1ba9b3ee9a7170759fd73f9b Red Hat Enterprise Linux for Power, little endian 10 SRPM skopeo-1.22.2-1.el10_2.src.rpm SHA-256: e3b9f15b82cbf0839e2016b9e1e055cd488b23cfbf03d912baa01dbbec1cda29 ppc64le skopeo-1.22.2-1.el10_2.ppc64le.rpm SHA-256: 49755dea89c4b746244338b467daf831d08d7bffbd25423b8929cfaf85b2ebd8 skopeo-debuginfo-1.22.2-1.el10_2.ppc64le.rpm SHA-256: a7249739f5112cfe1287de3f62eaac9657a592eb88d5d8277b591b894b1a30a5 skopeo-debugsource-1.22.2-1.el10_2.ppc64le.rpm SHA-256: 0cc8dd94d817a66aeba9415e9edf6b856216977a61b039fedb97150f473c9904 skopeo-tests-1.22.2-1.el10_2.ppc64le.rpm SHA-256: 8b856d779dc1a2b92de18810b9aa2838cea1f98b5a47fa40f1e466f5d33000e7 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM skopeo-1.22.2-1.el10_2.src.rpm SHA-256: e3b9f15b82cbf0839e2016b9e1e055cd488b23cfbf03d912baa01dbbec1cda29 ppc64le skopeo-1.22.2-1.el10_2.ppc64le.rpm SHA-256: 49755dea89c4b746244338b467daf831d08d7bffbd25423b8929cfaf85b2ebd8 skopeo-debuginfo-1.22.2-1.el10_2.ppc64le.rpm SHA-256: a7249739f5112cfe1287de3f62eaac9657a592eb88d5d8277b591b894b1a30a5 skopeo-debugsource-1.22.2-1.el10_2.ppc64le.rpm SHA-256: 0cc8dd94d817a66aeba9415e9edf6b856216977a61b039fedb97150f473c9904 skopeo-tests-1.22.2-1.el10_2.ppc64le.rpm SHA-256: 8b856d779dc1a2b92de18810b9aa2838cea1f98b5a47fa40f1e466f5d33000e7 Red Hat Enterprise Linux for ARM 64 10 SRPM skopeo-1.22.2-1.el10_2.src.rpm SHA-256: e3b9f15b82cbf0839e2016b9e1e055cd488b23cfbf03d912baa01dbbec1cda29 aarch64 skopeo-1.22.2-1.el10_2.aarch64.rpm SHA-256: 6e6fe3fc3945f113c85a7abee74e84b08c9db25d70066c2ce2d356adf0194e63 skopeo-debuginfo-1.22.2-1.el10_2.aarch64.rpm SHA-256: 826ccf14f4e923766d5477a0c725f3ff6af83f6cd2780a755bc8669eef190ba1 skopeo-debugsource-1.22.2-1.el10_2.aarch64.rpm SHA-256: 707702ce46e253bec39293e5a87c0a210628102af766df9c9d680b48170c7c39 skopeo-tests-1.22.2-1.el10_2.aarch64.rpm SHA-256: 79faf7cb6d07f08123623b02ebe22d7c7b73d17bac7326bc59d1d2baa80be6c3 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 SRPM skopeo-1.22.2-1.el10_2.src.rpm SHA-256: e3b9f15b82cbf0839e2016b9e1e055cd488b23cfbf03d912baa01dbbec1cda29 aarch64 skopeo-1.22.2-1.el10_2.aarch64.rpm SHA-256: 6e6fe3fc3945f113c85a7abee74e84b08c9db25d70066c2ce2d356adf0194e63 skopeo-debuginfo-1.22.2-1.el10_2.aarch64.rpm SHA-256: 826ccf14f4e923766d5477a0c725f3ff6af83f6cd2780a755bc8669eef190ba1 skopeo-debugsource-1.22.2-1.el10_2.aarch64.rpm SHA-256: 707702ce46e253bec39293e5a87c0a210628102af766df9c9d680b48170c7c39 skopeo-tests-1.22.2-1.el10_2.aarch64.rpm SHA-256: 79faf7cb6d07f08123623b02ebe22d7c7b73d17bac7326bc59d1d2baa80be6c3 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 SRPM skopeo-1.22.2-1.el10_2.src.rpm SHA-256: e3b9f15b82cbf0839e2016b9e1e055cd488b23cfbf03d912baa01dbbec1cda29 aarch64 skopeo-1.22.2-1.el10_2.aarch64.rpm SHA-256: 6e6fe3fc3945f113c85a7abee74e84b08c9db25d70066c2ce2d356adf0194e63 skopeo-debuginfo-1.22.2-1.el10_2.aarch64.rpm SHA-256: 826ccf14f4e923766d5477a0c725f3ff6af83f6cd2780a755bc8669eef190ba1 skopeo-debugsource-1.22.2-1.el10_2.aarch64.rpm SHA-256: 707702ce46e253bec39293e5a87c0a210628102af766df9c9d680b48170c7c39 skopeo-tests-1.22.2-1.el10_2.aarch64.rpm SHA-256: 79faf7cb6d07f08123623b02ebe22d7c7b73d17bac7326bc59d1d2baa80be6c3 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 SRPM skopeo-1.22.2-1.el10_2.src.rpm SHA-256: e3b9f15b82cbf0839e2016b9e1e055cd488b23cfbf03d912baa01dbbec1cda29 s390x skopeo-1.22.2-1.el10_2.s390x.rpm SHA-256: 900346367aeeef1417cb7957a4cca550c1723758fce195d8bf3081f741abcca7 skopeo-debuginfo-1.22.2-1.el10_2.s390x.rpm SHA-256: adb1e3e468bae714ee00aed0fd3f9d72ccb45c932de43e31541e38cec7a3c2db skopeo-debugsource-1.22.2-1.el10_2.s390x.rpm SHA-256: 162dae68f38a90274167286aac862c5429b8cb8bad1a848a235dbfbcfefd8285 skopeo-tests-1.22.2-1.el10_2.s390x.rpm SHA-256: c0334d1239d0ff931e99e93c33d60585b45bb50b1ba9b3ee9a7170759fd73f9b Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 SRPM skopeo-1.22.2-1.el10_2.src.rpm SHA-256: e3b9f15b82cbf0839e2016b9e1e055cd488b23cfbf03d912baa01dbbec1cda29 ppc64le skopeo-1.22.2-1.el10_2.ppc64le.rpm SHA-256: 49755dea89c4b746244338b467daf831d08d7bffbd25423b8929cfaf85b2ebd8 skopeo-debuginfo-1.22.2-1.el10_2.ppc64le.rpm SHA-256: a7249739f5112cfe1287de3f62eaac9657a592eb88d5d8277b591b894b1a30a5 skopeo-debugsource-1.22.2-1.el10_2.ppc64le.rpm SHA-256: 0cc8dd94d817a66aeba9415e9edf6b856216977a61b039fedb97150f473c9904 skopeo-tests-1.22.2-1.el10_2.ppc64le.rpm SHA-256: 8b856d779dc1a2b92de18810b9aa2838cea1f98b5a47fa40f1e466f5d33000e7 Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 SRPM skopeo-1.22.2-1.el10_2.src.rpm