elsa-2026-90424
oracle_linux
Description
[1.43.4-2.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.43.4-2] - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-279009 - Resolves: RHEL-287507 [2:1.43.4-1] - Update to buildah 1.43.4 (c7061d00) - fix CVE-2026-56855 (golang.org/x/crypto/ssh DoS) and CVE-2025-11395 (arbitrary file write in copier) - Resolves: RHEL-256886 RHEL-121272
Timeline
- Published
- unknown
- Last Modified
- unknown
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"cves": [
"CVE-2025-11395",
"CVE-2026-111943",
"CVE-2026-56855",
"CVE-2026-78667"
],
"cvss": 0.0,
"database_specific": {
"severity": "IMPORTANT"
},
"description": "[1.43.4-2.0.1]\n- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]\n\n[2:1.43.4-2]\n- Rebuild for CVE-2026-78667 and CVE-2026-111943\n- Resolves: RHEL-279009\n- Resolves: RHEL-287507\n\n[2:1.43.4-1]\n- Update to buildah 1.43.4 (c7061d00) - fix CVE-2026-56855\n (golang.org/x/crypto/ssh DoS) and CVE-2025-11395 (arbitrary file write in\n copier)\n- Resolves: RHEL-256886 RHEL-121272",
"id": "ELSA-2026-90424",
"ovalId": "oval:com.oracle.elsa:def:202690424",
"source": "oracle_linux",
"title": "ELSA-2026-90424: buildah security update (IMPORTANT)",
"url": "https://linux.oracle.com/errata/ELSA-2026-90424.html"
}