Description:
The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.
Security Fix(es):
* golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
* golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)
* golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)
* golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
| Architecture |
Package |
Checksum |
| aarch64 |
buildah-1.43.1-3.el10_2.aarch64.rpm |
12824731bca2508d6a06b74bb58bcf79b71970918613dd965437e60bae2dab31 |
| aarch64 |
buildah-tests-1.43.1-3.el10_2.aarch64.rpm |
710424dbfa2d405e6d1722ac82f765e54fbdc3572b64eeb132e100849fc4dbb7 |
| ppc64le |
buildah-1.43.1-3.el10_2.ppc64le.rpm |
0d0147d0acaca262ac0001f62d8093dd764faa66d24aa53a3befea317e0e2103 |
| ppc64le |
buildah-tests-1.43.1-3.el10_2.ppc64le.rpm |
4b88935e997cfcce8eed555ab17c1f9e54762557e206fb62d5bc37f16ec26462 |
| s390x |
buildah-tests-1.43.1-3.el10_2.s390x.rpm |
731fc328513f6005b32fed3abd3c0aed9a797d89bb0d127ee1aab92472ccdbb3 |
| s390x |
buildah-1.43.1-3.el10_2.s390x.rpm |
ace0cdcd3bc79ca1a26f7a8aaf6e70a648ae9516a3ff17a65b2c7cd89970fdff |
| x86_64 |
buildah-tests-1.43.1-3.el10_2.x86_64.rpm |
625581c9ce9daef1bb6ab269d033f94e2428bba94ce6f8174fc1258964b15d47 |
| x86_64 |
buildah-1.43.1-3.el10_2.x86_64.rpm |
8708a2aa20e3360f34dab87b679bd1cb3b683e0353a32ad0c570c9e8f2b40829 |
| x86_64_v2 |
buildah-1.43.1-3.el10_2.x86_64_v2.rpm |
3a06c40f2eb79af3cface670923700405e3f04c99fb64e89f8f1727824fcd549 |
| x86_64_v2 |
buildah-tests-1.43.1-3.el10_2.x86_64_v2.rpm |
47ff7288fe4e243cc9ba0f2ee2a838ec311543f5e65aeb8c5f1c656522633588 |