Security update for buildah
This update for buildah rebuilds it against the current go security release.
- Mettez à jour vers 1.35.5-150500.3.68.1
PatchFirst · Vulnérabilités récentes
Vulnérabilité publiée pour buildah au cours des 30 derniers jours : 1. Dans le catalogue KEV : 0.
Vulnérabilités : 12
This update for buildah rebuilds it against the current go security release.
This update for buildah rebuilds it against the current go security release.
This update for buildah rebuilds it against the current go security release.
This update for buildah fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files (bsc#1267179). - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262953). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266648). - CVE-2026-39827: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypt
This update for buildah rebuilds it against the current go security release.
This update for buildah rebuilds it against the current go 1.25 security release.
This update for buildah fixes the following issues: - CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed out of bounds read caused by non validated message size (bsc#1254054) - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253598)
This update for buildah rebuilds it against the current security release of GO.
This update for buildah fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. (bsc#1253598)
This update for buildah fixes the following issues: - CVE-2025-52881: Fixed container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1253096)
This update for buildah fixes the following issues: - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239339).
This update for buildah fixes the following issues: - CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE (bsc#1237681)
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.