ELSA-2025-9148

ELSA-2025-9148 - buildah security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2025-06-27

Description

[2:1.39.4-2.0.1]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]

[2:1.39.4-2]
- Rebuild on new golang to fix CVE-2025-22871

[2:1.39.4-1]
- update to https://github.com/containers/buildah/releases/tag/v1.39.4
- Related: RHEL-80817

[2:1.39.3-1]
- update to https://github.com/containers/buildah/releases/tag/v1.39.3
- Related: RHEL-80817

[2:1.39.2-1]
- update to https://github.com/containers/buildah/releases/tag/v1.39.2
- Related: RHEL-80817

[2:1.39.1-1]
- update to https://github.com/containers/buildah/releases/tag/v1.39.1
- Resolves: RHEL-81133

Related CVEs

CVE-2025-22871

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	buildah-1.39.4-2.0.1.el10_0.src.rpm	e9e36092940fd564818ea6f08b22674d98398fb70ab718bb72680ffc5a827d64	-	ol10_aarch64_appstream
	buildah-1.39.4-2.0.1.el10_0.aarch64.rpm	dcd1ffea94a01401b9d9275cc2fc6d67fc4f64e6440641b8c6425cbae5de410d	-	ol10_aarch64_appstream
	buildah-tests-1.39.4-2.0.1.el10_0.aarch64.rpm	5139ea0db91f16361a6078745f97546831861676def0080b7b68c37fb41912fe	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	buildah-1.39.4-2.0.1.el10_0.src.rpm	e9e36092940fd564818ea6f08b22674d98398fb70ab718bb72680ffc5a827d64	-	ol10_x86_64_appstream
	buildah-1.39.4-2.0.1.el10_0.x86_64.rpm	975a3856ec44e7b81cbe83b12c3da2b57f443e807c6c2d88c6f63375148c6342	-	ol10_x86_64_appstream
	buildah-tests-1.39.4-2.0.1.el10_0.x86_64.rpm	72ff7cd109b2fc20161cc1f32359bdfa72c9d4f1c3c16e52cada563aa9e10b96	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team