Summary
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.
Security Fix(es):
* golang: html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785)
* crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
* github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload (CVE-2025-65637)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 76
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7 |
| AlmaLinux · 8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+4089+ce72bbbe |
| AlmaLinux · 8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+4047+545787c4 |
| AlmaLinux · 8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 |
| AlmaLinux · 8 | buildah | 2:1.33.14-2.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | buildah-tests | 2:1.33.14-2.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | cockpit-podman | 84.1-1.module_el8.10.0+4102+6c76e544 |
| AlmaLinux · 8 | conmon | 3:2.1.10-1.module_el8.10.0+3970+8445edf6 |
| AlmaLinux · 8 | conmon | 3:2.1.10-1.module_el8.10.0+4090+91932338 |
| AlmaLinux · 8 | conmon | 3:2.1.10-1.module_el8.10.0+4068+0e21408f |
| AlmaLinux · 8 | container-selinux | 2:2.229.0-2.module_el8.10.0+4090+91932338 |
| AlmaLinux · 8 | containernetworking-plugins | 1:1.4.0-7.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | containers-common | 2:1-82.module_el8.10.0+3876+e55593a8 |
| AlmaLinux · 8 | containers-common | 2:1-82.module_el8.10.0+3901+4b80ecd7 |
| AlmaLinux · 8 | containers-common | 2:1-82.module_el8.10.0+4089+ce72bbbe |
| AlmaLinux · 8 | crit | 3.18-5.module_el8.10.0+4047+545787c4 |
| AlmaLinux · 8 | crit | 3.18-5.module_el8.10.0+3901+4b80ecd7 |
| AlmaLinux · 8 | crit | 3.18-5.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | crit | 3.18-5.module_el8.10.0+3845+87b84552 |
| AlmaLinux · 8 | criu | 3.18-5.module_el8.10.0+4089+ce72bbbe |
| AlmaLinux · 8 | criu | 3.18-5.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | criu | 3.18-5.module_el8.10.0+3876+e55593a8 |
| AlmaLinux · 8 | criu | 3.18-5.module_el8.10.0+3909+6e1c1eb7 |
| AlmaLinux · 8 | criu-devel | 3.18-5.module_el8.10.0+4016+efd18bf8 |
| AlmaLinux · 8 | criu-devel | 3.18-5.module_el8.10.0+4089+ce72bbbe |
| AlmaLinux · 8 | criu-devel | 3.18-5.module_el8.10.0+4068+0e21408f |
| AlmaLinux · 8 | criu-devel | 3.18-5.module_el8.10.0+3858+6ad51f9f |
| AlmaLinux · 8 | criu-libs | 3.18-5.module_el8.10.0+3970+8445edf6 |
| AlmaLinux · 8 | criu-libs | 3.18-5.module_el8.10.0+3909+6e1c1eb7 |
| AlmaLinux · 8 | criu-libs | 3.18-5.module_el8.10.0+3926+f12484f5 |
| AlmaLinux · 8 | criu-libs | 3.18-5.module_el8.10.0+4082+f7f0c95e |
| AlmaLinux · 8 | crun | 1.14.3-2.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | crun | 1.14.3-2.module_el8.10.0+4102+6c76e544 |
| AlmaLinux · 8 | crun | 1.14.3-2.module_el8.10.0+4082+f7f0c95e |
| AlmaLinux · 8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4047+545787c4 |
| AlmaLinux · 8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4082+f7f0c95e |
| AlmaLinux · 8 | fuse-overlayfs | 1.13-1.module_el8.10.0+3792+03eaed9c |
| AlmaLinux · 8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4068+0e21408f |
| AlmaLinux · 8 | libslirp | 4.4.0-2.module_el8.10.0+4023+db236c53 |
| AlmaLinux · 8 | libslirp | 4.4.0-2.module_el8.10.0+4090+91932338 |
| AlmaLinux · 8 | libslirp | 4.4.0-2.module_el8.10.0+4089+ce72bbbe |
| AlmaLinux · 8 | libslirp | 4.4.0-2.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4102+6c76e544 |
| AlmaLinux · 8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4068+0e21408f |
| AlmaLinux · 8 | libslirp-devel | 4.4.0-2.module_el8.10.0+3970+8445edf6 |
| AlmaLinux · 8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4082+f7f0c95e |
| AlmaLinux · 8 | netavark | 2:1.10.3-1.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | netavark | 2:1.10.3-1.module_el8.10.0+4023+db236c53 |
| AlmaLinux · 8 | netavark | 2:1.10.3-1.module_el8.10.0+3970+8445edf6 |
| AlmaLinux · 8 | netavark | 2:1.10.3-1.module_el8.10.0+4082+f7f0c95e |
| AlmaLinux · 8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4047+545787c4 |
| AlmaLinux · 8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+3909+6e1c1eb7 |
| AlmaLinux · 8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4068+0e21408f |
| AlmaLinux · 8 | podman | 4:4.9.4-28.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | podman-catatonit | 4:4.9.4-28.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | podman-docker | 4:4.9.4-28.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | podman-gvproxy | 4:4.9.4-28.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | podman-plugins | 4:4.9.4-28.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | podman-remote | 4:4.9.4-28.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | podman-tests | 4:4.9.4-28.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | python3-criu | 3.18-5.module_el8.10.0+3970+8445edf6 |
| AlmaLinux · 8 | python3-criu | 3.18-5.module_el8.10.0+3901+4b80ecd7 |
| AlmaLinux · 8 | python3-criu | 3.18-5.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | python3-criu | 3.18-5.module_el8.10.0+3876+e55593a8 |
| AlmaLinux · 8 | python3-podman | 4.9.0-3.module_el8.10.0+4016+efd18bf8 |
| AlmaLinux · 8 | runc | 4:1.2.9-3.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | skopeo | 2:1.14.5-6.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | skopeo-tests | 2:1.14.5-6.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | slirp4netns | 1.2.3-1.module_el8.10.0+4047+545787c4 |
| AlmaLinux · 8 | slirp4netns | 1.2.3-1.module_el8.10.0+4023+db236c53 |
| AlmaLinux · 8 | slirp4netns | 1.2.3-1.module_el8.10.0+3926+f12484f5 |
| AlmaLinux · 8 | slirp4netns | 1.2.3-1.module_el8.10.0+4082+f7f0c95e |
| AlmaLinux · 8 | toolbox | 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | toolbox-tests | 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 |
| AlmaLinux · 8 | udica | 0.2.6-21.module_el8.10.0+4068+0e21408f |
Vulnerabilities 3
-
High 7.5
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certi…
-
High 7.5CVE-2025-65637 Public exploit
Logrus is vulnerable to DoS when using Entry.Writer()
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" a…
-
Medium 5.4
Errors returned from JSON marshaling may break template escaping in html/template
If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates.
References
-
report
https://access.redhat.com/security/cve/CVE-2024-24785
-
report
https://access.redhat.com/security/cve/CVE-2025-61729
-
report
https://access.redhat.com/security/cve/CVE-2025-65637
-
report
https://bugzilla.redhat.com/2268022
-
report
https://bugzilla.redhat.com/2418462
-
report
https://bugzilla.redhat.com/2418900
-
advisory
https://errata.almalinux.org/8/ALSA-2026-3428.html