Security update for buildah
This update for buildah rebuilds it against the current go security release.
- Обновитесь до 1.35.5-150500.3.68.1
PatchFirst · Свежие уязвимости
За последние 30 дней в buildah опубликовано уязвимостей: 1; в каталоге KEV: 0.
Уязвимостей: 10
This update for buildah rebuilds it against the current go security release.
This update for buildah rebuilds it against the current go security release.
This update for buildah rebuilds it against the current go security release.
This update for buildah fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files (bsc#1267179). - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262953). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266648). - CVE-2026-39827: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypt
This update for buildah rebuilds it against the current go security release.
This update for buildah rebuilds it against the current go 1.25 security release.
This update for buildah fixes the following issues: - CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed out of bounds read caused by non validated message size (bsc#1254054) - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253598)
This update for buildah rebuilds it against the current security release of GO.
This update for buildah fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. (bsc#1253598)
This update for buildah fixes the following issues: - CVE-2025-52881: Fixed container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1253096)
Сопоставьте установленный стек и версии со свежими базами уязвимостей.