[CLSA-2026:1792085312] buildah: Fix of 4 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-27 20:11:29 UTC
Description:
- CVE-2025-11395: storage/pkg/archive, oci/archive: confine the extraction of a crafted tar archive and the reading of an extracted oci-archive to the destination
Updated packages:
  • buildah-1.39.6-1.el9_6.tuxcare.els13.aarch64.rpm
    sha:f4450722bc16e75a305f0dd3382272af95631cdc9dd9ce002460f29a73998d41
  • buildah-1.39.6-1.el9_6.tuxcare.els13.x86_64.rpm
    sha:fa59899167b84bb36e0e79606748750aae64c3ee4786fd67cd485de8aaf84d34
  • buildah-tests-1.39.6-1.el9_6.tuxcare.els13.aarch64.rpm
    sha:0566162445ab4dfc57b40d13094b6d171ae94f7bb0587246b3f33aa3ef5dc4f5
  • buildah-tests-1.39.6-1.el9_6.tuxcare.els13.x86_64.rpm
    sha:6c4b0eacfb7605799d575d1995402a88c5f247c33562111106206c010d0f11ac
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.