Red Hat Security AdvisoryRHSA-2026:3428
container-tools:rhel8 security update
Released 2026-02-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+23963+b64d8032.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+23963+b64d8032.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+23963+b64d8032.s390x::container-tools:rhel8 +47
Fixes 3 records
Priority LOW 34
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00675 · Published 2025-12-04 · Partial fix · 1.8.3, 1.9.1 +1 CWE-400
Priority LOW 33
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0049 · Published 2025-12-02 · Partial fix · 1.24.11, 1.25.5 CWE-295
Priority LOW 26
If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00795 · Published 2024-03-05 · Partial fix · 1.21.8, 1.22.1
THREATIST.IORead the docs