p PatchFirst

SUSE-SU-2026:0014-1

SUSE-SU-2026:0014-1 · Security update for buildah

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for buildah fixes the following issues: - CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed out of bounds read caused by non validated message size (bsc#1254054) - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253598)

Fix available

Published
Updated

Stack: system

Affected products and versions

  • buildah SUSE:Linux Enterprise Module for Containers 15 SP7

    Affected ranges
    • ECOSYSTEM: < 1.35.5-150500.3.53.1

    Update to 1.35.5-150500.3.53.1

  • buildah SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS

    Affected ranges
    • ECOSYSTEM: < 1.35.5-150500.3.53.1

    Update to 1.35.5-150500.3.53.1

  • buildah SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS

    Affected ranges
    • ECOSYSTEM: < 1.35.5-150500.3.53.1

    Update to 1.35.5-150500.3.53.1

  • buildah SUSE:Linux Enterprise Server 15 SP5-LTSS

    Affected ranges
    • ECOSYSTEM: < 1.35.5-150500.3.53.1

    Update to 1.35.5-150500.3.53.1

  • buildah SUSE:Linux Enterprise Server 15 SP6-LTSS

    Affected ranges
    • ECOSYSTEM: < 1.35.5-150500.3.53.1

    Update to 1.35.5-150500.3.53.1

  • buildah SUSE:Linux Enterprise Server for SAP Applications 15 SP5

    Affected ranges
    • ECOSYSTEM: < 1.35.5-150500.3.53.1

    Update to 1.35.5-150500.3.53.1

  • buildah SUSE:Linux Enterprise Server for SAP Applications 15 SP6

    Affected ranges
    • ECOSYSTEM: < 1.35.5-150500.3.53.1

    Update to 1.35.5-150500.3.53.1

  • buildah openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 1.35.5-150500.3.53.1

    Update to 1.35.5-150500.3.53.1

Original sources

Check your server →