ALSA-2026:4672
ALSA-2026:4672 · Important: container-tools:rhel8 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fix available
- Published
- Updated
Stack: system · containers
Affected products and versions
aardvark-dns AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7
Update to 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7
aardvark-dns AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2:1.10.1-2.module_el8.10.0+4089+ce72bbbe
Update to 2:1.10.1-2.module_el8.10.0+4089+ce72bbbe
aardvark-dns AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2:1.10.1-2.module_el8.10.0+4047+545787c4
Update to 2:1.10.1-2.module_el8.10.0+4047+545787c4
aardvark-dns AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7
Update to 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7
buildah AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2:1.33.14-3.module_el8.10.0+4136+16425343
Update to 2:1.33.14-3.module_el8.10.0+4136+16425343
buildah-tests AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2:1.33.14-3.module_el8.10.0+4136+16425343
Update to 2:1.33.14-3.module_el8.10.0+4136+16425343
cockpit-podman AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 84.1-1.module_el8.10.0+4102+6c76e544
Update to 84.1-1.module_el8.10.0+4102+6c76e544
conmon AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3:2.1.10-1.module_el8.10.0+3970+8445edf6
Update to 3:2.1.10-1.module_el8.10.0+3970+8445edf6
conmon AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3:2.1.10-1.module_el8.10.0+4090+91932338
Update to 3:2.1.10-1.module_el8.10.0+4090+91932338
conmon AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3:2.1.10-1.module_el8.10.0+4068+0e21408f
Update to 3:2.1.10-1.module_el8.10.0+4068+0e21408f
container-selinux AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2:2.229.0-2.module_el8.10.0+4090+91932338
Update to 2:2.229.0-2.module_el8.10.0+4090+91932338
containernetworking-plugins AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1:1.4.0-8.module_el8.10.0+4136+16425343
Update to 1:1.4.0-8.module_el8.10.0+4136+16425343
containers-common AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2:1-82.module_el8.10.0+3876+e55593a8
Update to 2:1-82.module_el8.10.0+3876+e55593a8
containers-common AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2:1-82.module_el8.10.0+3901+4b80ecd7
Update to 2:1-82.module_el8.10.0+3901+4b80ecd7
containers-common AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 2:1-82.module_el8.10.0+4089+ce72bbbe
Update to 2:1-82.module_el8.10.0+4089+ce72bbbe
crit AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3.18-5.module_el8.10.0+4047+545787c4
Update to 3.18-5.module_el8.10.0+4047+545787c4
crit AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3.18-5.module_el8.10.0+3901+4b80ecd7
Update to 3.18-5.module_el8.10.0+3901+4b80ecd7
crit AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3.18-5.module_el8.10.0+4120+03ad4b47
Update to 3.18-5.module_el8.10.0+4120+03ad4b47
crit AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3.18-5.module_el8.10.0+3845+87b84552
Update to 3.18-5.module_el8.10.0+3845+87b84552
criu AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3.18-5.module_el8.10.0+4089+ce72bbbe
Update to 3.18-5.module_el8.10.0+4089+ce72bbbe
criu AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3.18-5.module_el8.10.0+4120+03ad4b47
Update to 3.18-5.module_el8.10.0+4120+03ad4b47
criu AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3.18-5.module_el8.10.0+3876+e55593a8
Update to 3.18-5.module_el8.10.0+3876+e55593a8
criu AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3.18-5.module_el8.10.0+3909+6e1c1eb7
Update to 3.18-5.module_el8.10.0+3909+6e1c1eb7
criu-devel AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 3.18-5.module_el8.10.0+4016+efd18bf8
Update to 3.18-5.module_el8.10.0+4016+efd18bf8
Original sources
- https://access.redhat.com/errata/RHSA-2026:4672
- https://access.redhat.com/security/cve/CVE-2025-61726
- https://access.redhat.com/security/cve/CVE-2025-61728
- https://access.redhat.com/security/cve/CVE-2025-68121
- https://bugzilla.redhat.com/2434431
- https://bugzilla.redhat.com/2434432
- https://bugzilla.redhat.com/2437111
- https://errata.almalinux.org/8/ALSA-2026-4672.html
- https://osv.dev/vulnerability/ALSA-2026:4672