Security update for buildah
This update for buildah rebuilds it against the current go security release.
- Mettez à jour vers 1.35.5-150500.3.68.1
PatchFirst · Vulnérabilités récentes
Vulnérabilité publiée pour buildah au cours des 30 derniers jours : 1. Dans le catalogue KEV : 0.
Vulnérabilités : 8
This update for buildah rebuilds it against the current go security release.
This update for buildah rebuilds it against the current go security release.
This update for buildah rebuilds it against the current go security release.
This update for buildah fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files (bsc#1267179). - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262953). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266648). - CVE-2026-39827: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypt
This update for buildah rebuilds it against the current go security release.
This update for buildah rebuilds it against the current go 1.25 security release.
This update for buildah fixes the following issues: - CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed out of bounds read caused by non validated message size (bsc#1254054) - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253598)
This update for buildah rebuilds it against the current security release of GO.
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.