Critical Security Update for Container Tools: Addressing Vulnerabilities in Podman and Related Packages
Summary
ALSA-2026:38504: Important: container-tools:rhel8 security update. Affects aardvark-dns across 4 version ranges.
< 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7
< 2:1.10.1-2.module_el8.10.0+4089+ce72bbbe
< 2:1.10.1-2.module_el8.10.0+4047+545787c4
< 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7
Fixed in 4 releases; the minimum fixed version depends on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The container-tools module is a collection of essential tools for managing containers, including Podman, Buildah, Skopeo, and Runc. These tools facilitate the creation, management, and deployment of containerized applications, making them vital for modern software development and deployment workflows. However, recent vulnerabilities have been identified that could compromise the security of applications utilizing these tools.
Vulnerability Detail
The vulnerabilities stem from issues in the Go net package, the golang.org/x/crypto/ssh package, and Podman itself. Specifically, CVE-2026-33811 allows for a Denial of Service via long CNAME responses in the Go net package. CVE-2026-39835 presents a Denial of Service risk through crafted SSH certificates in the golang.org/x/crypto/ssh package. Additionally, CVE-2026-57231 in Podman could lead to information disclosure through malicious container image environment variables. These vulnerabilities could lead to service outages and unauthorized access to sensitive information.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo dnf update aardvark-dns-
< 2:1.10.1-2.module_el8.10.0+3901+4b80ecd72:1.10.1-2.module_el8.10.0+3901+4b80ecd7 -
< 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb72:1.10.1-2.module_el8.10.0+3909+6e1c1eb7 -
< 2:1.10.1-2.module_el8.10.0+4047+545787c42:1.10.1-2.module_el8.10.0+4047+545787c4 -
< 2:1.10.1-2.module_el8.10.0+4089+ce72bbbe2:1.10.1-2.module_el8.10.0+4089+ce72bbbe
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
If immediate updates cannot be applied, consider isolating the affected containers or limiting their exposure to untrusted inputs until the patches can be applied. Additionally, monitor the environment for unusual activity that may indicate exploitation attempts.
Conclusion
In summary, the identified vulnerabilities in the container-tools module pose significant risks to applications utilizing Podman and related tools. It is essential to apply the recommended updates promptly to mitigate these risks and ensure the security of your containerized applications.
See every vulnerability recorded for aardvark-dns →
FAQ
The vulnerabilities could lead to Denial of Service attacks and potential information disclosure, compromising the security and availability of applications using these tools.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
Consider implementing workarounds such as isolating affected containers and monitoring for suspicious activity until you can apply the updates.
While specific exploits may not be publicly available, the nature of the vulnerabilities suggests that they could be exploited to disrupt services or leak sensitive information.
Detailed information can be found on the CVE pages linked in the vulnerability details, as well as through security advisories from AlmaLinux.
Related vulnerabilities
Recent vulnerabilities recorded for aardvark-dns.
