The container-tools module in Red Hat Enterprise Linux 8, which includes tools like podman, buildah, skopeo, and runc, is affected by three security vulnerabilities: CVE-2024-24785 involves golang's html/template where errors from MarshalJSON methods may break template escaping; CVE-2025-61729 is a denial-of-service vulnerability in golang's crypto/x509 due to excessive resource consumption from crafted certificates; CVE-2025-65637 is a denial-of-service vulnerability in github.com/sirupsen/logrus triggered by large single-line payloads. Red Hat has released an update to address these issues across multiple RHEL 8 architectures.

These vulnerabilities can lead to denial-of-service conditions and potential issues with template escaping in container tooling environments. The denial-of-service vulnerabilities may cause excessive resource consumption or application disruption when processing crafted certificates or large payloads. No known exploits in the wild have been reported. The advisory rates the overall impact as Important, indicating a high security concern but not critical.

Red Hat has released an official security update for the container-tools module in Red Hat Enterprise Linux 8 to address these vulnerabilities. Users should apply the update as detailed in the Red Hat advisory (RHSA-2026:3428) and the referenced article https://access.redhat.com/articles/11258. Since this is an on-premises product, remediation requires applying the vendor-provided patches. Patch status is confirmed as available via the vendor advisory.