[ALSA-2026:36199] Important: buildah security update
Type:
security
Severity:
important
Release date:
2026-07-08
Description:
The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835) * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829) * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830) * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 buildah-1.43.1-3.el10_2.aarch64.rpm 12824731bca2508d6a06b74bb58bcf79b71970918613dd965437e60bae2dab31
aarch64 buildah-tests-1.43.1-3.el10_2.aarch64.rpm 710424dbfa2d405e6d1722ac82f765e54fbdc3572b64eeb132e100849fc4dbb7
ppc64le buildah-1.43.1-3.el10_2.ppc64le.rpm 0d0147d0acaca262ac0001f62d8093dd764faa66d24aa53a3befea317e0e2103
ppc64le buildah-tests-1.43.1-3.el10_2.ppc64le.rpm 4b88935e997cfcce8eed555ab17c1f9e54762557e206fb62d5bc37f16ec26462
s390x buildah-tests-1.43.1-3.el10_2.s390x.rpm 731fc328513f6005b32fed3abd3c0aed9a797d89bb0d127ee1aab92472ccdbb3
s390x buildah-1.43.1-3.el10_2.s390x.rpm ace0cdcd3bc79ca1a26f7a8aaf6e70a648ae9516a3ff17a65b2c7cd89970fdff
x86_64 buildah-tests-1.43.1-3.el10_2.x86_64.rpm 625581c9ce9daef1bb6ab269d033f94e2428bba94ce6f8174fc1258964b15d47
x86_64 buildah-1.43.1-3.el10_2.x86_64.rpm 8708a2aa20e3360f34dab87b679bd1cb3b683e0353a32ad0c570c9e8f2b40829
x86_64_v2 buildah-1.43.1-3.el10_2.x86_64_v2.rpm 3a06c40f2eb79af3cface670923700405e3f04c99fb64e89f8f1727824fcd549
x86_64_v2 buildah-tests-1.43.1-3.el10_2.x86_64_v2.rpm 47ff7288fe4e243cc9ba0f2ee2a838ec311543f5e65aeb8c5f1c656522633588
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.