The skopeo command in Red Hat Enterprise Linux 10.0 Extended Update Support is affected by three denial of service vulnerabilities in the Go crypto libraries. CVE-2026-32280 and CVE-2026-32281 involve inefficient certificate chain validation and certificate chain building in crypto/x509 and crypto/tls, leading to denial of service. CVE-2026-32283 involves denial of service via multiple TLS 1.3 key update messages in crypto/tls. Red Hat Product Security has released updated skopeo packages that fix these issues. The advisory rates the security impact as Important and provides updated packages for multiple architectures. No CVSS scores are provided in the advisory, but the severity is assessed as high.

Successful exploitation of these vulnerabilities can cause denial of service conditions in the skopeo command by exploiting inefficient certificate chain validation and TLS key update handling. This may disrupt container image inspection and verification processes. There are no reports of active exploitation in the wild. The impact is limited to denial of service and does not include code execution or data disclosure.

Red Hat has released updated skopeo packages for Red Hat Enterprise Linux 10.0 Extended Update Support that address these vulnerabilities. Users should apply these official updates as described in the Red Hat advisory (RHSA-2026:20571) and the referenced article https://access.redhat.com/articles/11258. No additional mitigation is required beyond applying the vendor-provided patches.