{
  "cves": [
    "CVE-2025-11395",
    "CVE-2026-111943",
    "CVE-2026-56855",
    "CVE-2026-78667"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[1.43.4-2.0.1]\n- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]\n\n[2:1.43.4-2]\n- Rebuild for CVE-2026-78667 and CVE-2026-111943\n- Resolves: RHEL-279009\n- Resolves: RHEL-287507\n\n[2:1.43.4-1]\n- Update to buildah 1.43.4 (c7061d00) - fix CVE-2026-56855\n  (golang.org/x/crypto/ssh DoS) and CVE-2025-11395 (arbitrary file write in\n  copier)\n- Resolves: RHEL-256886 RHEL-121272",
  "id": "ELSA-2026-90424",
  "ovalId": "oval:com.oracle.elsa:def:202690424",
  "source": "oracle_linux",
  "title": "ELSA-2026-90424:  buildah security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-90424.html"
}