Red Hat Security Advisory 2020-2681-01 - The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. An issue was addressed where container images read the entire image manifest into memory.
abe6f20985dcf69200d36bd308be6afbb5562cc53098a5646f375fd147178709