ELSA-2026-70640

Опубликовано: 24 сент. 2026

Источник: oracle-oval

Платформа: Oracle Linux 9

Описание

ELSA-2026-70640: buildah security update (IMPORTANT)

[1.43.3-2.0.1]

Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]

[2:1.43.3-2]

rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862
Resolves: RHEL-241114 RHEL-241310 RHEL-241620 RHEL-241779 RHEL-242275

[2:1.43.3-1]

Update to buildah 1.43.3 (488c1c92)
Resolves: RHEL-219426

[2:1.43.2-1]

Update to release-1.43 branch HEAD (609eb9466)
Ensures golang.org/x/crypto v0.53.0 for CVE-2026-46597 fix
Resolves: RHEL-219426

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

buildah

1.43.3-2.0.1.el9_8

buildah-tests

1.43.3-2.0.1.el9_8

Oracle Linux x86_64

buildah

1.43.3-2.0.1.el9_8

buildah-tests

1.43.3-2.0.1.el9_8

Связанные CVE

Ссылки на источники

Связанные уязвимости

RLSA-2026:70640

rocky

около 1 месяца назад

Important: buildah security update

RLSA-2026:70641

rocky

около 1 месяца назад

Important: skopeo security update

ELSA-2026-70641

oracle-oval

около 1 месяца назад

ELSA-2026-70641: skopeo security update (IMPORTANT)

CVE-2025-11395

CVSS3: 5.5

ubuntu

около 1 месяца назад

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.

CVE-2025-11395

CVSS3: 5.5

redhat

12 месяцев назад

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.