Red Hat Security Advisory: container-tools:rhel8 security update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) * github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload (CVE-2025-65637) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
The container-tools module for Red Hat Enterprise Linux 8.8 contains two security vulnerabilities. CVE-2025-58183 is an unbounded allocation vulnerability in the golang archive/tar package that occurs when parsing GNU sparse maps, potentially leading to resource exhaustion. CVE-2025-65637 is a denial-of-service vulnerability in the github.com/sirupsen/logrus logging library triggered by processing large single-line payloads. Red Hat Product Security has rated these issues as moderate severity and has issued updated packages for affected versions of Red Hat Enterprise Linux 8.8 to remediate these vulnerabilities.
Potential Impact
These vulnerabilities can lead to denial-of-service conditions due to unbounded memory allocation or resource exhaustion when processing specially crafted inputs. This may affect container tooling operations such as image handling and logging, potentially disrupting container workflows on affected systems.
Mitigation Recommendations
Red Hat has released security updates for the container-tools module in Red Hat Enterprise Linux 8.8 that address these vulnerabilities. Users should apply the official Red Hat update RHSA-2026:6191 to remediate these issues. For detailed update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor advisory.
Red Hat Security Advisory: container-tools:rhel8 security update
Description
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) * github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload (CVE-2025-65637) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The container-tools module for Red Hat Enterprise Linux 8.8 contains two security vulnerabilities. CVE-2025-58183 is an unbounded allocation vulnerability in the golang archive/tar package that occurs when parsing GNU sparse maps, potentially leading to resource exhaustion. CVE-2025-65637 is a denial-of-service vulnerability in the github.com/sirupsen/logrus logging library triggered by processing large single-line payloads. Red Hat Product Security has rated these issues as moderate severity and has issued updated packages for affected versions of Red Hat Enterprise Linux 8.8 to remediate these vulnerabilities.
Potential Impact
These vulnerabilities can lead to denial-of-service conditions due to unbounded memory allocation or resource exhaustion when processing specially crafted inputs. This may affect container tooling operations such as image handling and logging, potentially disrupting container workflows on affected systems.
Mitigation Recommendations
Red Hat has released security updates for the container-tools module in Red Hat Enterprise Linux 8.8 that address these vulnerabilities. Users should apply the official Red Hat update RHSA-2026:6191 to remediate these issues. For detailed update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:6191
- Cve Count
- 2
- Additional Cves
- ["CVE-2025-65637"]
- Cvss Version
- null
Threat ID: 6a160976e29bf47b50641190
Added to database: 05/26/2026, 20:58:30 UTC
Last enriched: 07/30/2026, 12:18:11 UTC
Last updated: 07/31/2026, 21:28:45 UTC
Views: 48
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.