The container-tools module for Red Hat Enterprise Linux 8, which includes container management tools such as podman, buildah, skopeo, and runc, is affected by three security vulnerabilities. CVE-2024-24785 concerns golang's html/template package where errors from MarshalJSON methods may break template escaping. CVE-2025-61729 is a denial of service vulnerability in golang's crypto/x509 package due to excessive resource consumption triggered by crafted certificates. CVE-2025-65637 is a denial of service vulnerability in the github.com/sirupsen/logrus logging library caused by processing large single-line payloads. Red Hat has released an update addressing these issues in the container-tools:rhel8 module for Red Hat Enterprise Linux 8 across multiple architectures and extended life cycle versions.

These vulnerabilities can lead to denial of service conditions and potential security bypasses in container tooling environments. Specifically, CVE-2024-24785 may cause template escaping issues, potentially affecting the integrity of template rendering. CVE-2025-61729 and CVE-2025-65637 can cause denial of service through resource exhaustion or processing large payloads, impacting availability of container tools. No known exploits in the wild have been reported at this time.

Red Hat has released an official security update for the container-tools:rhel8 module in Red Hat Enterprise Linux 8 that addresses these vulnerabilities. Users should apply the update as detailed in Red Hat advisory RHSA-2026:3428 and the referenced article https://access.redhat.com/articles/11258. This update covers affected packages including podman, buildah, skopeo, runc, and related components. No additional mitigation steps are indicated beyond applying the official update.