The container-tools module for Red Hat Enterprise Linux 8.6 contains multiple security vulnerabilities across several Go libraries and container-related tools. These include CVE-2025-47913 (SSH client panic due to unexpected SSH_AGENT_SUCCESS), CVE-2025-61729 (Denial of Service via crafted certificate in crypto/x509), CVE-2025-61726 (Memory exhaustion in net/url query parsing), CVE-2025-68121 (Unexpected TLS session resumption), CVE-2026-25679 (Incorrect IPv6 host literal parsing in net/url), CVE-2026-32283 (Denial of Service via multiple TLS 1.3 key update messages), and CVE-2026-32280 (Denial of Service in certificate chain building). These vulnerabilities impact container tooling and underlying cryptographic and URL parsing libraries, potentially leading to denial of service or client crashes.

The vulnerabilities can cause denial of service conditions through excessive resource consumption or crashes in container tools and Go libraries used by Red Hat Enterprise Linux 8.6 container-tools module. This may disrupt container operations or related services relying on these tools. No known exploits in the wild have been reported. The overall security impact is rated as Important by Red Hat.

Red Hat has released an official security update for the container-tools module in Red Hat Enterprise Linux 8.6 that addresses these vulnerabilities. Users should apply the update as described in the Red Hat advisory RHSA-2026:19634 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official patch.