Skip to content
OpenAdvisories
High ELSA-2026-0436 1 CVE

Important: buildah security update (Oracle Linux 10)

Published Jan 12, 2026 · Updated Jan 12, 2026

Summary

[1.41.8-1.0.1]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]

[2:1.41.8-1]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.41
(https://github.com/containers/buildah/commit/f85ff89)
- fixes 'CVE-2025-47913 buildah: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS [rhel-10.1.z]'
- Resolves: RHEL-134777

[2:1.41.7-1]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.41
(https://github.com/containers/buildah/commit/e363f79)
- fixes 'Bump to runc v1.2.9 or v1.3.4 to get CVE and regression fixes - Buildah [rhel-10.1.z]'
- Resolves: RHEL-132841

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 10 buildah 2:1.41.8-1.0.1.el10_1
Oracle Linux · 10 buildah-tests 2:1.41.8-1.0.1.el10_1

Vulnerabilities 1