Skip to content
Fedora 42: Skopeo Critical Security Issue CVE-2025-58189, CVE-2025

Fedora 42: Skopeo Critical Security Issue CVE-2025-58189, CVE-2025

Linuxsecurity •LinuxSecurity Advisories • November 13, 2025

Command line utility to inspect images and repositories directly on Docker registries without the need to pull them Update Information : Security fix for CVE-2025-58189 and CVE-2025-61725

Command line utility to inspect images and repositories directly on Docker

registries without the need to pull them

Security fix for CVE-2025-58189 and CVE-2025-61725

* Fri Oct 31 2025 Lokesh Mandvekar - 1:1.20.0-4 - Resolves: CVE-2025-58189, CVE-2025-61725

* Fri Oct 31 2025 Lokesh Mandvekar - 1:1.20.0-4 - Resolves: CVE-2025-58189, CVE-2025-61725

[ 1 ] Bug #2408094 - CVE-2025-58189 skopeo: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42] [ 2 ] Bug #2408689 - CVE-2025-61725 skopeo: Excessive CPU consumption in ParseAddress in net/mail [fedora-42] [ 3 ] Bug #2409564 - CVE-2025-61723 skopeo: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-42] [ 4 ] Bug #2410515 - CVE-2025-58185 skopeo: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-42] [ 5 ] Bug #2411413 - CVE-2025-58188 skopeo: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-42] [ 6 ] Bug #2412818 - CVE-2025-58183 skopeo: Unbounded all... Read the Full Advisory

[ 1 ] Bug #2408094 - CVE-2025-58189 skopeo: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42] [ 2 ] Bug #2408689 - CVE-2025-61725 skopeo: Excessive CPU consumption in ParseAddress in net/mail [fedora-42] [ 3 ] Bug #2409564 - CVE-2025-61723 skopeo: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-42] [ 4 ] Bug #2410515 - CVE-2025-58185 skopeo: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-42] [ 5 ] Bug #2411413 - CVE-2025-58188 skopeo: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-42] [ 6 ] Bug #2412818 - CVE-2025-58183 skopeo: Unbounded all...

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-01148de25a' at the command line. For more information, refer to the dnf documentation available at