This Red Hat security advisory addresses three vulnerabilities affecting the skopeo tool in Red Hat Enterprise Linux 9. CVE-2025-61729 involves a denial of service caused by excessive resource consumption via a crafted certificate in the crypto/x509 package. CVE-2025-61726 is a memory exhaustion vulnerability in the parsing of query parameters in the net/url package. CVE-2025-68121 concerns unexpected session resumption behavior in the crypto/tls package. These vulnerabilities could be exploited to cause denial of service or unexpected TLS session behavior. The advisory provides updated skopeo packages (version 1.20.0-3.el9_7) to fix these issues. No known exploits in the wild have been reported. The vendor rates the update as Important and recommends applying the update as detailed in the advisory.

The vulnerabilities can lead to denial of service through excessive resource consumption or memory exhaustion, potentially disrupting the availability of the skopeo tool. The unexpected session resumption in crypto/tls could cause unexpected TLS session behavior, which may affect secure communications. No active exploitation has been reported. The overall impact is rated as Important by Red Hat.

Red Hat has released updated skopeo packages (e.g., skopeo-1.20.0-3.el9_7) that address these vulnerabilities. Users running affected versions should apply these official updates promptly. For detailed update instructions, refer to the Red Hat advisory at https://access.redhat.com/articles/11258. No additional mitigations are specified or required beyond applying the official patches.