Fixed packages 65
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | aardvark-dns | 2:1.10.1-2.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | buildah | 2:1.33.14-2.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | buildah-debuginfo | 2:1.33.14-2.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | buildah-debugsource | 2:1.33.14-2.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | buildah-tests | 2:1.33.14-2.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | buildah-tests-debuginfo | 2:1.33.14-2.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | cockpit-podman | 0:84.1-1.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | conmon | 3:2.1.10-1.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | conmon-debuginfo | 3:2.1.10-1.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | conmon-debugsource | 3:2.1.10-1.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | container-selinux | 2:2.229.0-2.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | containernetworking-plugins | 1:1.4.0-7.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | containernetworking-plugins-debuginfo | 1:1.4.0-7.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | containernetworking-plugins-debugsource | 1:1.4.0-7.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | containers-common | 2:1-82.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | crit | 0:3.18-5.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | criu | 0:3.18-5.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | criu-debuginfo | 0:3.18-5.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | criu-debugsource | 0:3.18-5.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | criu-devel | 0:3.18-5.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | criu-libs | 0:3.18-5.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | criu-libs-debuginfo | 0:3.18-5.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | crun | 0:1.14.3-2.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | crun-debuginfo | 0:1.14.3-2.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | crun-debugsource | 0:1.14.3-2.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | fuse-overlayfs | 0:1.13-1.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | fuse-overlayfs-debuginfo | 0:1.13-1.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | fuse-overlayfs-debugsource | 0:1.13-1.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libslirp | 0:4.4.0-2.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libslirp-debuginfo | 0:4.4.0-2.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libslirp-debugsource | 0:4.4.0-2.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libslirp-devel | 0:4.4.0-2.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | netavark | 2:1.10.3-1.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | oci-seccomp-bpf-hook-debuginfo | 0:1.2.10-1.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | oci-seccomp-bpf-hook-debugsource | 0:1.2.10-1.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman | 4:4.9.4-28.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-catatonit | 4:4.9.4-28.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-catatonit-debuginfo | 4:4.9.4-28.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-debuginfo | 4:4.9.4-28.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-debugsource | 4:4.9.4-28.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-docker | 4:4.9.4-28.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-gvproxy | 4:4.9.4-28.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-gvproxy-debuginfo | 4:4.9.4-28.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-plugins | 4:4.9.4-28.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-plugins-debuginfo | 4:4.9.4-28.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-remote | 4:4.9.4-28.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-remote-debuginfo | 4:4.9.4-28.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | podman-tests | 4:4.9.4-28.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-podman | 0:4.9.0-3.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-criu | 0:3.18-5.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-podman | 0:4.9.0-3.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | runc | 4:1.2.9-3.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | runc-debuginfo | 4:1.2.9-3.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | runc-debugsource | 4:1.2.9-3.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | skopeo | 2:1.14.5-6.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | skopeo-tests | 2:1.14.5-6.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | slirp4netns | 0:1.2.3-1.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | slirp4netns-debuginfo | 0:1.2.3-1.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | slirp4netns-debugsource | 0:1.2.3-1.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | toolbox | 0:0.0.99.5.1-1.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | toolbox-debuginfo | 0:0.0.99.5.1-1.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | toolbox-debugsource | 0:0.0.99.5.1-1.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | toolbox-tests | 0:0.0.99.5.1-1.module+el8.10.0+23963+b64d8032 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | udica | 0:0.2.6-21.module+el8.10.0+23963+b64d8032 |
Vulnerabilities 3
-
High 7.5
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certi…
-
High 7.5CVE-2025-65637 Public exploit
Logrus is vulnerable to DoS when using Entry.Writer()
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" a…
-
Medium 5.4
Errors returned from JSON marshaling may break template escaping in html/template
If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates.
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2268022
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2418462
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2418900
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3428.json
-
report
https://access.redhat.com/security/cve/CVE-2024-24785
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-24785
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-24785
-
article
https://go.dev/cl/564196
-
article
https://go.dev/issue/65697
-
article
https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg
-
article
https://vuln.go.dev/ID/GO-2024-2610.json
-
report
https://access.redhat.com/security/cve/CVE-2025-61729
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-61729
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-61729
-
article
https://go.dev/cl/725920
-
article
https://go.dev/issue/76445
-
article
https://groups.google.com/g/golang-announce/c/8FJoBkPddm4
-
advisory
https://pkg.go.dev/vuln/GO-2025-4155
-
report
https://access.redhat.com/security/cve/CVE-2025-65637
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-65637
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-65637
-
article
https://github.com/mjuanxd/logrus-dos-poc
-
article
https://github.com/mjuanxd/logrus-dos-poc/blob/main/README.md
-
article
https://github.com/sirupsen/logrus/issues/1370
-
article
https://github.com/sirupsen/logrus/pull/1376
-
article
https://github.com/sirupsen/logrus/releases/tag/v1.8.3
-
article
https://github.com/sirupsen/logrus/releases/tag/v1.9.1
-
article
https://github.com/sirupsen/logrus/releases/tag/v1.9.3
-
article
https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMSIRUPSENLOGRUS-5564391