{"cves":["CVE-2025-11395","CVE-2026-111943","CVE-2026-56855","CVE-2026-78667"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[1.43.4-2.0.1]\n- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]\n\n[2:1.43.4-2]\n- Rebuild for CVE-2026-78667 and CVE-2026-111943\n- Resolves: RHEL-279009\n- Resolves: RHEL-287507\n\n[2:1.43.4-1]\n- Update to buildah 1.43.4 (c7061d00) - fix CVE-2026-56855\n  (golang.org/x/crypto/ssh DoS) and CVE-2025-11395 (arbitrary file write in\n  copier)\n- Resolves: RHEL-256886 RHEL-121272","id":"ELSA-2026-90424","ovalId":"oval:com.oracle.elsa:def:202690424","source":"oracle_linux","title":"ELSA-2026-90424:  buildah security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-90424.html"}