[CLSA-2026:1791455053] skopeo: Fix of CVE-2025-11395
Type:
security
Severity:
Moderate
Release date:
2026-10-08 10:24:27 UTC
Description:
- CVE-2025-11395: oci-archive, storage/pkg/archive: prevent writes outside the destination when extracting a crafted tar archive
CVEs fixed:
Updated packages:
  • skopeo-1.22.2-8.el9_8.tuxcare.els1.aarch64.rpm
    sha:198b8e4d219baff06a1f17a2b533fdb6b896fc483b8c2993849befd1150abd7b
  • skopeo-1.22.2-8.el9_8.tuxcare.els1.x86_64.rpm
    sha:d2b08b07d73cbf56091cedb8957bb072580fb1ac3cb478d1c18af97667c75efd
  • skopeo-tests-1.22.2-8.el9_8.tuxcare.els1.aarch64.rpm
    sha:64af75f8364828de89e9fa3b16ea65741a1edbfc3bb6219c5174565c31db1ac7
  • skopeo-tests-1.22.2-8.el9_8.tuxcare.els1.x86_64.rpm
    sha:98a07711d8ae36185b9a8f729e6483dc5bf167b34de89d2b007cf298e984e86e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.