Skip to content
OpenAdvisories
High ELSA-2026-10135 1 CVE

Important: buildah security update (Oracle Linux 9)

Published Apr 24, 2026 · Updated Apr 24, 2026

Ecosystem: Oracle Linux

Summary

[1.41.8-3.0.1]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]

[2:1.41.8-3]
- rebuild for CVE-2026-34986
- Resolves: RHEL-165027

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 buildah 2:1.41.8-3.0.1.el9_7
Oracle Linux · 9 buildah-tests 2:1.41.8-3.0.1.el9_7

Vulnerabilities 1

  • High 7.5
    CVE-2026-34986

    Go JOSE affect by a panic in JWE decryption

    Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JS…

    go-jose go-jose zot kubescape Debian Ubuntu Alpine Wolfi Go