Security update for buildah
This update for buildah rebuilds it against the current go security release.
- Update to 1.35.5-150400.3.76.1
Published Updated
PatchFirst · Latest vulnerabilities
buildah vulnerabilities
Vulnerability published for buildah in the last 30 days: 1. Listed in the KEV catalogue: 0.
Vulnerabilities: 16
Security update for buildah
This update for buildah rebuilds it against the current go security release.
- Update to 1.35.5-150400.3.74.1
Published UpdatedSecurity update for buildah
This update for buildah rebuilds it against the current go security release.
- Update to 1.35.5-150400.3.72.1
Published UpdatedSecurity update for buildah
This update for buildah rebuilds it against the current go security release.
- Update to 1.35.5-150400.3.70.1
Published UpdatedSecurity update for buildah
This update for buildah fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files (bsc#1267179). - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262953). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266648). - CVE-2026-39827: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypt
- Update to 1.35.5-150400.3.68.1
Published UpdatedSecurity update for buildah
This update for buildah rebuilds it against the current go security release.
- Update to 1.35.5-150400.3.65.1
Published UpdatedSecurity update for buildah
This update for buildah rebuilds it against the current go 1.25 security release.
- Update to 1.35.5-150400.3.61.1
Published UpdatedSecurity update for buildah
This update for buildah fixes the following issues: - CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed out of bounds read caused by non validated message size (bsc#1254054) - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253598)
- Update to 1.35.5-150400.3.59.1
Published UpdatedSecurity update for buildah
This update for buildah fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. (bsc#1253598)
- Update to 1.35.5-150400.3.56.1
Published UpdatedSecurity update for buildah
This update for buildah fixes the following issues: - CVE-2025-52881: Fixed container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1253096) Other fixes: - podman and buildah with runc 1.3.2 fail with lots of warnings as rootless (bsc#1252543)
- Update to 1.35.5-150400.3.53.1
Published UpdatedSecurity update for buildah
This update for buildah fixes the following issues: - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239339).
- Update to 1.35.5-150400.3.45.1
Published UpdatedSecurity update for buildah
This update for buildah fixes the following issues: - CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE (bsc#1237681)
- Update to 1.35.5-150400.3.42.1
Published UpdatedSecurity update for buildah
This update for buildah fixes the following issues: - Update to version 1.35.5 - CVE-2024-11218: Fix TOCTOU error when bind and cache mounts use 'src' values. (bsc#1236272)
- Update to 1.35.5-150400.3.36.1
Published UpdatedSecurity update for buildah
This update for buildah fixes the following issues: - CVE-2024-9676: Fixed github.com/containers/storage: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (bsc#1231698): - CVE-2024-9675: VUL-0: CVE-2024-9675: buildah,podman: buildah: cache arbitrary directory mount (bsc#1231499): - CVE-2024-9407: Fixed improper input validation in bind-propagation Option of Dockerfile RUN --mount Instruction (bsc#1231208) - CVE-2024-9341: Fixed FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (bsc#1231230) - Using networking slirp4netns as default instead of pasta on SLE (bsc#123
- Update to 1.35.4-150400.3.33.1
Published UpdatedSecurity update for buildah
This update for buildah fixes the following issues: Update to version 1.35.4: * CVE-2024-3727 updates (bsc#1224117) * Bump go-jose CVE-2024-28180 * Bump ocicrypt and go-jose CVE-2024-28180 Update to version 1.35.3: * correctly configure /etc/hosts and resolv.conf * buildah: refactor resolv/hosts setup. * rename the hostFile var to reflect * CVE-2024-24786 protobuf to 1.33 Update to version 1.35.1: * CVE-2024-1753 container escape fix (bsc#1221677) - Buildah dropped cni support, require netavark instead (bsc#1221243) - Remove obsolete requires libcontainers-image & libcontainers-storage - Require passt for rootless networking (poo#15
- Update to 1.35.4-150400.3.30.1
Published UpdatedSecurity update for buildah
This update for buildah fixes the following issues: - CVE-2024-1753: Fixed an issue to prevent a full container escape at build time. (bsc#1221677) - Update to version 1.34.1 for compatibility with Docker 25.0 (which is not in SLES yet, but will eventually be) (bsc#1219563). See the corresponding release notes: * https://github.com/containers/buildah/releases/tag/v1.34.1 * https://github.com/containers/buildah/releases/tag/v1.34.0 * https://github.com/containers/buildah/releases/tag/v1.33.0 * https://github.com/containers/buildah/releases/tag/v1.32.0 * https://github.com/containers/buildah/releases/tag/v1.31.0 * https://githu
- Update to 1.34.1-150400.3.27.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.