Red Hat Security Advisory

RHSA-2025:3266

container-tools:rhel8 security update

Released 2025-03-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) buildah-1.21.4-4.module+el8.4.0+22947+c10a58d6.src::container-tools:rhel8, buildah-1.21.4-4.module+el8.4.0+22947+c10a58d6.x86_64::container-tools:rhel8, buildah-tests-1.21.4-4.module+el8.4.0+22947+c10a58d6.x86_64::container-tools:rhel8 +40
Red Hat Enterprise Linux AppStream E4S (v.8.4) buildah-1.21.4-4.module+el8.4.0+22947+c10a58d6.ppc64le::container-tools:rhel8, buildah-1.21.4-4.module+el8.4.0+22947+c10a58d6.src::container-tools:rhel8, buildah-1.21.4-4.module+el8.4.0+22947+c10a58d6.x86_64::container-tools:rhel8 +47
Red Hat Enterprise Linux AppStream TUS (v.8.4) buildah-1.21.4-4.module+el8.4.0+22947+c10a58d6.src::container-tools:rhel8, buildah-1.21.4-4.module+el8.4.0+22947+c10a58d6.x86_64::container-tools:rhel8, buildah-tests-1.21.4-4.module+el8.4.0+22947+c10a58d6.x86_64::container-tools:rhel8 +40

Fixes 1 record

TI-2025-16741 CVE-2025-22869 · GHSA-hcg3-q754-cr77

Potential denial of service in golang.org/x/crypto

MEDIUM 41

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but nev…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00939 Published 2025-02-26 Partial fix · 0.35.0 CWE-770