[ALSA-2026:10135] Important: buildah security update
Type:
security
Severity:
important
Release date:
2026-04-30
Description:
The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 buildah-tests-1.41.8-3.el9_7.aarch64.rpm 33c3a067b9de83bb59e6b68e21ffbcf6d5464947940b58805b26d6a3a804cbc4
aarch64 buildah-1.41.8-3.el9_7.aarch64.rpm 67fdaf20c752a421249532a1aa4952a73eb2e95f8fd94014302df45f5b0921de
ppc64le buildah-tests-1.41.8-3.el9_7.ppc64le.rpm 7fe2063df4712eec3af82cc9a72aab2dfb958afd2667ceac595a011e2f284079
ppc64le buildah-1.41.8-3.el9_7.ppc64le.rpm fcf3efdfa71dd0c528cbac460594193c9d7cc93c72900e60a6c809e107207e4b
s390x buildah-tests-1.41.8-3.el9_7.s390x.rpm a379b3e00edb1d0b1bd1c0dbcc2ce363b2952e962795ef952f3c2d39755e5d6c
s390x buildah-1.41.8-3.el9_7.s390x.rpm f9f90fb9abc1d34d82864e3fc270f4c97f5c61bfb980f7cdd8bd0dd986d17b0a
x86_64 buildah-1.41.8-3.el9_7.x86_64.rpm f251a0f0beb0ce9ae4ad236f739d1b6a0975222bd6a200bd1789ff8c8a137bed
x86_64 buildah-tests-1.41.8-3.el9_7.x86_64.rpm fbfd24bd304efccab2fd6f4e2aed48bcabb1a2c7a4c29a342dd60b873dcd47a9
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.