From 71505649bb57134da6afcab0df799600b6f3920b Mon Sep 17 00:00:00 2001 From: eabdullin Date: Tue, 17 Jun 2025 02:32:34 +0000 Subject: [PATCH] import UBI skopeo-1.18.1-2.el9_6 --- SPECS/skopeo.spec | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/SPECS/skopeo.spec b/SPECS/skopeo.spec index d80d90b..b68dc15 100644 --- a/SPECS/skopeo.spec +++ b/SPECS/skopeo.spec @@ -25,7 +25,7 @@ Name: skopeo Epoch: 2 Version: 1.18.1 -Release: 1%{?dist} +Release: 2%{?dist} # The `AND` needs to be uppercase in the License for SPDX compatibility License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0 %if %{defined golang_arches_future} @@ -161,6 +161,10 @@ cp -pav systemtest/* %{buildroot}/%{_datadir}/%{name}/test/system/ %{_datadir}/%{name}/test %changelog +* Wed Jun 04 2025 Jindrich Novy - 2:1.18.1-2 +- rebuild to fix CVE-2025-22871 skopeo: Request smuggling due to acceptance of invalid chunked data in net/http +- Resolves: RHEL-89329 + * Mon Mar 17 2025 Jindrich Novy - 2:1.18.1-1 - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18 (https://github.com/containers/skopeo/commit/bfd0850)