diff --git a/skopeo.spec b/skopeo.spec index 434c38a..a2b4e89 100644 --- a/skopeo.spec +++ b/skopeo.spec @@ -41,7 +41,7 @@ Epoch: %{conditional_epoch} Version: 1.18.1 # The `AND` needs to be uppercase in the License for SPDX compatibility License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0 -Release: 1%{?dist} +Release: 2%{?dist} %if %{defined golang_arches_future} ExclusiveArch: %{golang_arches_future} %else @@ -169,6 +169,10 @@ cp -pav systemtest/* %{buildroot}/%{_datadir}/%{name}/test/system/ %{_datadir}/%{name}/test %changelog +* Wed Jun 04 2025 Jindrich Novy - 1:1.18.1-2 +- rebuild to fix CVE-2025-22871 skopeo: Request smuggling due to acceptance of invalid chunked data in net/http +- Resolves: RHEL-89227 + * Mon Mar 17 2025 Jindrich Novy - 1:1.18.1-1 - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18 (https://github.com/containers/skopeo/commit/bfd0850)