ELSA-2026-38494

ELSA-2026-38494 - buildah security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-16

Description

[1.43.1-4.0.1]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]

[2:1.43.1-4]
- rebuild for CVE-2026-39822
- Resolves: RHEL-193643

[2:1.43.1-3]
- bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830
- Resolves: RHEL-186266

[2:1.43.1-2]
- Rebuild for CVE-2026-25679
- Resolves: RHEL-158476

Related CVEs

CVE-2026-39822

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	buildah-1.43.1-4.0.1.el10_2.src.rpm	41b8bae4a50e0df8b531f7e8bb2135a3aa63d2233b6403ad77ca77b17e1fa2fb	-	ol10_aarch64_appstream
	buildah-1.43.1-4.0.1.el10_2.aarch64.rpm	bf64deb759351c2b6a7014b48460ae3460e376a35d6c61aa055cdf91f76a5e23	-	ol10_aarch64_appstream
	buildah-tests-1.43.1-4.0.1.el10_2.aarch64.rpm	81184990f31dbe0b79d303d11fc436e56853fe2412c0c01eb4515115f992a6f5	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	buildah-1.43.1-4.0.1.el10_2.src.rpm	41b8bae4a50e0df8b531f7e8bb2135a3aa63d2233b6403ad77ca77b17e1fa2fb	-	ol10_x86_64_appstream
	buildah-1.43.1-4.0.1.el10_2.x86_64.rpm	8ebce5dd13da41a3de39eb4563a4b6999ad5103818a5aa74b7fb77d938014e20	-	ol10_x86_64_appstream
	buildah-tests-1.43.1-4.0.1.el10_2.x86_64.rpm	92fa98f3f0abe5637a803ce1621f8011de5d8380447920fc3887cab56a454616	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team