The image-builder tool, used for creating customized OS artifacts such as VM images and OSTree commits, has a security update addressing multiple vulnerabilities in underlying Go libraries. Notably, CVE-2025-61729 is a denial of service vulnerability caused by excessive resource consumption when processing crafted certificates in the crypto/x509 package. Other related fixes address memory exhaustion in net/url parsing and unexpected session resumption in crypto/tls. The issue affects versions of image-builder prior to 31-3.el9_7.