Red Hat Security AdvisoryRHSA-2026:4693
container-tools:rhel8 security update
Released 2026-03-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8, buildah-1:1.29.7-1.module+el8.8.0+24026+ca15dd94.src::container-tools:rhel8 +47
Fixes 8 records
Priority MEDIUM 40
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00668 · Published 2025-11-13 · Partial fix · 0.43.0 CWE-617
Priority LOW 38
runc is a CLI tool for spawning and running containers according to the OCI specification.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00811 · Published 2025-11-06 · Fixed in 1.2.8, 1.3.3 +1 CWE-363
Priority LOW 37
runc is a CLI tool for spawning and running containers according to the OCI specification.
CVSS 4.0HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.01245 · Published 2025-11-06 · Fixed in 1.2.8, 1.3.3 +1 CWE-363
Priority LOW 35
runc is a CLI tool for spawning and running containers according to the OCI specification.
CVSS 4.0HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00801 · Published 2025-11-06 · Partial fix · 1.2.8, 1.13.0 +2 CWE-363
Priority LOW 34
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00675 · Published 2025-12-04 · Partial fix · 1.8.3, 1.9.1 +1 CWE-400
Priority LOW 28
The HTTP client drops sensitive headers after following a cross-domain redirect.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0071 · Published 2025-01-28 · Partial fix · 1.22.11, 1.23.5 +1
Priority LOW 20
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00443 · Published 2025-10-29 · Partial fix · 1.24.8, 1.25.2
Priority LOW 19
Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture.
CVSS 3.1MEDIUM 4.0· Local · No auth · No interaction · EPSS 0.0029 · Published 2025-02-06 · Partial fix · 1.22.12, 1.23.6 +1
THREATIST.IORead the docs