RHSA-2026:3428HighCVSS 7.5

Red Hat Security Advisory: container-tools:rhel8 security update

Published
February 26, 2026
Last Modified
August 25, 2026

🔗 CVE IDs covered (3)

CVE-2025-65637 →CVE-2024-24785 →CVE-2025-61729 →

📋 Description

CVE-2024-24785 — golang: html/template: errors returned from MarshalJSON methods may break template escaping CVE-2025-61729 — crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-65637 — github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload

🎯 Affected products200

  • Red Hat Enterprise Linux AppStream (v. 8)
  • aardvark-dns-2:1.10.1-2.module+el8.10.0+23963+b64d8032.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • aardvark-dns-2:1.10.1-2.module+el8.10.0+23963+b64d8032.ppc64le (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • aardvark-dns-2:1.10.1-2.module+el8.10.0+23963+b64d8032.s390x (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • aardvark-dns-2:1.10.1-2.module+el8.10.0+23963+b64d8032.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • aardvark-dns-2:1.10.1-2.module+el8.10.0+23963+b64d8032.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-2:1.33.14-2.module+el8.10.0+23963+b64d8032.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-2:1.33.14-2.module+el8.10.0+23963+b64d8032.ppc64le (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-2:1.33.14-2.module+el8.10.0+23963+b64d8032.s390x (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-2:1.33.14-2.module+el8.10.0+23963+b64d8032.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-2:1.33.14-2.module+el8.10.0+23963+b64d8032.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debuginfo-2:1.33.14-2.module+el8.10.0+23963+b64d8032.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debuginfo-2:1.33.14-2.module+el8.10.0+23963+b64d8032.ppc64le (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debuginfo-2:1.33.14-2.module+el8.10.0+23963+b64d8032.s390x (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debuginfo-2:1.33.14-2.module+el8.10.0+23963+b64d8032.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debugsource-2:1.33.14-2.module+el8.10.0+23963+b64d8032.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debugsource-2:1.33.14-2.module+el8.10.0+23963+b64d8032.ppc64le (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debugsource-2:1.33.14-2.module+el8.10.0+23963+b64d8032.s390x (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-debugsource-2:1.33.14-2.module+el8.10.0+23963+b64d8032.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-tests-2:1.33.14-2.module+el8.10.0+23963+b64d8032.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-tests-2:1.33.14-2.module+el8.10.0+23963+b64d8032.ppc64le (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-tests-2:1.33.14-2.module+el8.10.0+23963+b64d8032.s390x (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-tests-2:1.33.14-2.module+el8.10.0+23963+b64d8032.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-tests-debuginfo-2:1.33.14-2.module+el8.10.0+23963+b64d8032.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-tests-debuginfo-2:1.33.14-2.module+el8.10.0+23963+b64d8032.ppc64le (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-tests-debuginfo-2:1.33.14-2.module+el8.10.0+23963+b64d8032.s390x (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • buildah-tests-debuginfo-2:1.33.14-2.module+el8.10.0+23963+b64d8032.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • cockpit-podman-0:84.1-1.module+el8.10.0+23963+b64d8032.noarch (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • cockpit-podman-0:84.1-1.module+el8.10.0+23963+b64d8032.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • conmon-3:2.1.10-1.module+el8.10.0+23963+b64d8032.aarch64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation is either unavailable or does not meet Red Hat Product Security standards for usability, deployment, applicability, or stability.

🔗 References (6)