Red Hat Security AdvisoryRHSA-2026:4532
buildah security update
Released 2026-03-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.2) buildah-1:1.29.5-1.el9_2.2, buildah-tests-1:1.29.5-1.el9_2.2
Fixes 4 records
Priority MEDIUM 40
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00668 · Published 2025-11-13 · Partial fix · 0.43.0 CWE-617
Priority LOW 35
runc is a CLI tool for spawning and running containers according to the OCI specification.
CVSS 4.0HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00801 · Published 2025-11-06 · Partial fix · 1.2.8, 1.13.0 +2 CWE-363
Priority LOW 34
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00675 · Published 2025-12-04 · Partial fix · 1.8.3, 1.9.1 +1 CWE-400
Priority LOW 20
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00443 · Published 2025-10-29 · Partial fix · 1.24.8, 1.25.2
THREATIST.IORead the docs