Summary
[1.43.1-1.0.1]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]
[2:1.43.1-1]
- update to https://github.com/containers/buildah/releases/tag/v1.43.1
- fixes CVE-2026-34986
- Resolves: RHEL-165035
[2:1.43.0-3]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
(https://github.com/containers/buildah/commit/bbc4bd1)
- Resolves: RHEL-95964
[2:1.43.0-2]
- Rebuild for new golang to address CVE-2025-61726
- Resolves: RHEL-146099
[2:1.43.0-1]
- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-111919
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | buildah | 2:1.43.1-1.0.1.el9_8 |
| Oracle Linux · 9 | buildah-tests | 2:1.43.1-1.0.1.el9_8 |
Vulnerabilities 1
-
High 7.5
Go JOSE affect by a panic in JWE decryption
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JS…