skopeo-1.11.2-0.1.el9

The skopeo command lets you inspect images from container image registries, get
images and image layers, and use signatures to create and verify files.

Security Fix(es):

* golang: net/http: excessive memory growth in a Go server accepting HTTP/2
requests (CVE-2022-41717)
* golang: crypto/tls: session tickets lack random ticket_age_add
(CVE-2022-30629)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2022-30629
Non-random values for ticket_age_add in session tickets in crypto/tls before Go
1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to
correlate successive connections by comparing ticket ages during session
resumption.
CVE-2022-41717
An attacker can cause excessive memory growth in a Go server accepting HTTP/2
requests. HTTP/2 server connections contain a cache of HTTP header keys sent by
the client. While the total number of entries in this cache is capped, an
attacker sending very large keys can cause the server to allocate approximately
64 MiB per open connection.