ELSA-2026-19186

ELSA-2026-19186 - buildah security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-06-12

Description

[1.43.1-1.0.1]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]

[2:1.43.1-1]
- update to https://github.com/containers/buildah/releases/tag/v1.43.1
- fixes CVE-2026-34986
- Resolves: RHEL-165035

[2:1.43.0-3]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
(https://github.com/containers/buildah/commit/bbc4bd1)
- Resolves: RHEL-95964

[2:1.43.0-2]
- Rebuild for new golang to address CVE-2025-61726
- Resolves: RHEL-146099

[2:1.43.0-1]
- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-111919

Related CVEs

CVE-2026-34986

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	buildah-1.43.1-1.0.1.el9_8.src.rpm	dafc64cdb8ad8333356992a52caf8115150ca4769165c160d616d1fb655c45dc	-	ol9_aarch64_appstream
	buildah-1.43.1-1.0.1.el9_8.aarch64.rpm	905ddf0b4ed65e7ef99a33b6e5fd598e441fa3e935c3416e9a6c8049508add70	-	ol9_aarch64_appstream
	buildah-tests-1.43.1-1.0.1.el9_8.aarch64.rpm	245643614f0ade15971b6f7e892929fa06767c25e702051f93f7bbe8fd472b40	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	buildah-1.43.1-1.0.1.el9_8.src.rpm	dafc64cdb8ad8333356992a52caf8115150ca4769165c160d616d1fb655c45dc	-	ol9_x86_64_appstream
	buildah-1.43.1-1.0.1.el9_8.x86_64.rpm	30174f2863e5df3d4b33e3bc4ed9627b8c6bdccd6b555ed0fc1350cfc2702e53	-	ol9_x86_64_appstream
	buildah-tests-1.43.1-1.0.1.el9_8.x86_64.rpm	fe269b6e052597d66c1b11dc671b710d6d16215db3575f863a6e3f9ae2b2aa51	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team