Back Linuxsecurity Fedora 43: Skopeo Advisory Security Fix for CVE-2025-58189 CVE-2025
Command line utility to inspect images and repositories directly on Docker registries without the need to pull them Update Information : Security fix for CVE-2025-58189, CVE-2025-61725
Command line utility to inspect images and repositories directly on Docker
registries without the need to pull them
Security fix for CVE-2025-58189, CVE-2025-61725
* Fri Oct 31 2025 Lokesh Mandvekar - 1:1.20.0-5 - Resolves: CVE-2025-58189, CVE-2025-61725
* Fri Oct 31 2025 Lokesh Mandvekar - 1:1.20.0-5 - Resolves: CVE-2025-58189, CVE-2025-61725
[ 1 ] Bug #2408347 - CVE-2025-58189 skopeo: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43] [ 2 ] Bug #2408745 - CVE-2025-61725 skopeo: Excessive CPU consumption in ParseAddress in net/mail [fedora-43]
[ 1 ] Bug #2408347 - CVE-2025-58189 skopeo: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43] [ 2 ] Bug #2408745 - CVE-2025-61725 skopeo: Excessive CPU consumption in ParseAddress in net/mail [fedora-43]
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-af04521261' at the command line. For more information, refer to the dnf documentation available at
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
