ELSA-2026-90424

ELSA-2026-90424 - buildah security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-27

Description

[1.43.4-2.0.1]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]

[2:1.43.4-2]
- Rebuild for CVE-2026-78667 and CVE-2026-111943
- Resolves: RHEL-279009
- Resolves: RHEL-287507

[2:1.43.4-1]
- Update to buildah 1.43.4 (c7061d00) - fix CVE-2026-56855
(golang.org/x/crypto/ssh DoS) and CVE-2025-11395 (arbitrary file write in
copier)
- Resolves: RHEL-256886 RHEL-121272

Related CVEs

CVE-2025-11395

CVE-2026-111943

CVE-2026-56855

CVE-2026-78667

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	buildah-1.43.4-2.0.1.el9_8.src.rpm	fc1325ec909bf2d0f3bc38ef6b4a117a20365293e7a6770e527e14cd33d12661	-	ol9_aarch64_appstream
	buildah-1.43.4-2.0.1.el9_8.aarch64.rpm	a1c687af8cab3a876d940de0b8044de7ffa012399a4d3e95af675f55a945d9e8	-	ol9_aarch64_appstream
	buildah-tests-1.43.4-2.0.1.el9_8.aarch64.rpm	12114158687229e1e278856b113e1c02b11de0e772e21930cd6d9ca208c8590c	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	buildah-1.43.4-2.0.1.el9_8.src.rpm	fc1325ec909bf2d0f3bc38ef6b4a117a20365293e7a6770e527e14cd33d12661	-	ol9_x86_64_appstream
	buildah-1.43.4-2.0.1.el9_8.x86_64.rpm	8fc32b525bfe4782d71889b1eb1c7c1087323ad4eb38abc87a230087ab6f16e9	-	ol9_x86_64_appstream
	buildah-tests-1.43.4-2.0.1.el9_8.x86_64.rpm	5924dfd10baf3bb8d8dbdedaca9d164cd84f2f3529a7eff0938b745863fce893	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team