The skopeo utility in Red Hat Enterprise Linux 10 is affected by three security vulnerabilities: CVE-2025-61729, a denial of service caused by excessive resource consumption via crafted certificates in the crypto/x509 package; CVE-2025-61726, a memory exhaustion vulnerability in the net/url package during query parameter parsing; and CVE-2025-68121, an unexpected session resumption issue in the crypto/tls package. These vulnerabilities could lead to denial of service or unexpected behavior when processing container images or related data. Red Hat has released updated packages to fix these issues as detailed in advisory RHSA-2026:3343.

Successful exploitation of these vulnerabilities could cause denial of service conditions due to resource exhaustion or unexpected TLS session behavior when using skopeo to inspect or manipulate container images. This may disrupt container image workflows or related processes on affected Red Hat Enterprise Linux 10 systems. There are no known exploits in the wild at this time.

Red Hat has released updated skopeo packages for Red Hat Enterprise Linux 10 that address these vulnerabilities. Users should apply the security update described in advisory RHSA-2026:3343 promptly to remediate these issues. Detailed update instructions are available at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor.