The container-tools module in Red Hat Enterprise Linux 8.8 contains tools such as podman, buildah, skopeo, and runc. Two security flaws have been identified: CVE-2025-58183 involves unbounded memory allocation in the golang archive/tar package when parsing GNU sparse maps, potentially leading to resource exhaustion. CVE-2025-65637 is a denial-of-service vulnerability in the github.com/sirupsen/logrus logging library triggered by processing large single-line payloads. Red Hat has released updated packages for the container-tools module in RHEL 8.8 to fix these vulnerabilities. The advisory rates the impact as moderate and does not indicate any known exploits in the wild.

Successful exploitation of CVE-2025-58183 could cause unbounded memory allocation, potentially leading to resource exhaustion on affected systems. CVE-2025-65637 could allow denial-of-service conditions by processing large single-line payloads in the logging library. Both vulnerabilities affect container-related tools, which may impact container management and operations if exploited. No active exploitation has been reported.

Red Hat has released updated packages for the container-tools module in Red Hat Enterprise Linux 8.8 that address these vulnerabilities. Users should apply the security update RHSA-2026:6191 to remediate these issues. For detailed update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigations are specified or required beyond applying the official update.