This advisory addresses multiple security vulnerabilities in the container-tools module of Red Hat Enterprise Linux 8.6, which includes container management tools like podman, buildah, skopeo, and runc. The fixed issues include: an SSH client panic due to unexpected SSH_AGENT_SUCCESS (CVE-2025-47913), denial of service via crafted certificates and certificate chain building (CVE-2025-61729, CVE-2026-32280), memory exhaustion in URL query parsing (CVE-2025-61726), incorrect IPv6 host literal parsing (CVE-2026-25679), unexpected TLS session resumption (CVE-2025-68121), and denial of service via multiple TLS 1.3 key update messages (CVE-2026-32283). These vulnerabilities stem from flaws in Go cryptographic and URL libraries used by container-tools. The advisory provides updated packages to remediate these issues.

The vulnerabilities collectively could lead to denial of service conditions through resource exhaustion or crashes in container tooling components, potentially disrupting container operations. Incorrect parsing issues could cause unexpected behavior in network or cryptographic operations. The advisory rates the security impact as important, indicating a high severity but no confirmed active exploitation in the wild at the time of publication.

Red Hat has released updated packages for the container-tools module in Red Hat Enterprise Linux 8.6 that address these vulnerabilities. Users should apply the security update as soon as possible following the guidance at https://access.redhat.com/articles/11258. No additional mitigations are specified or required beyond applying the official update.