Skip to content
OpenAdvisories
Medium ELSA-2025-7389 1 CVE

Moderate: buildah security update (Oracle Linux 9)

Published May 21, 2025 · Updated May 21, 2025

Ecosystem: Oracle Linux

Summary

[1.39.4-1.0.1]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]

[2:1.39.4-1]
- update to https://github.com/containers/buildah/releases/tag/v1.39.4
- Resolves: RHEL-85114

[2:1.39.3-1]
- update to https://github.com/containers/buildah/releases/tag/v1.39.3
- Resolves: RHEL-85114

[2:1.39.1-1]
- update to https://github.com/containers/buildah/releases/tag/v1.39.1
- Resolves: RHEL-80999

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 buildah 2:1.39.4-1.0.1.el9_6
Oracle Linux · 9 buildah-tests 2:1.39.4-1.0.1.el9_6

Vulnerabilities 1

  • Medium 6.6
    CVE-2025-27144

    Go JOSE's Parsing Vulnerable to Denial of Service

    Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. In versions on the 4.x branch prior to ve…

    go-jose go-jose zot kubescape Debian Ubuntu Azure Linux Wolfi Go