The container-tools module in Red Hat Enterprise Linux 8 contains tools for container management, including podman, buildah, skopeo, and runc. This advisory addresses three security issues: CVE-2024-24785, where errors returned from MarshalJSON methods in golang's html/template package may break template escaping; CVE-2025-61729, a denial of service vulnerability in golang's crypto/x509 package caused by excessive resource consumption via crafted certificates; and CVE-2025-65637, a denial of service vulnerability in github.com/sirupsen/logrus due to large single-line payloads. These vulnerabilities have been fixed in updated packages provided by Red Hat. The advisory covers multiple architectures and extended life cycle versions of Red Hat Enterprise Linux 8.

These vulnerabilities can lead to denial of service conditions or incorrect template escaping in container management tools, potentially disrupting container operations or causing unexpected behavior in applications relying on these tools. The issues affect critical components used in container workflows, which may impact system stability and reliability if exploited.

Red Hat has released updated packages for the container-tools module in Red Hat Enterprise Linux 8 that address these vulnerabilities. Users should apply the security update as detailed in the Red Hat advisory RHSA-2026:3428 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official update.