Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 41: buildah 1.39.2 Security Advisory - CVE-2025-27144 DoS Risk

fedora
Calendar Grey March 10, 2025
Dist Fedora Esm H88
The latest Fedora 41 release for podman introduces a crucial security patch resolving CVE-2025-27145 linked to potential exploitations of resource exhaustion vulnerabilities.
Automatic update for buildah-1.39.2-1.fc41

Summary

The buildah package provides a command line tool which can be used to

* create a working container from scratch

or

* create a working container from an image as a starting point

* mount/umount a working container's root file system for manipulation

* save container's root file system layer to create a new image

* delete a working container or an image

Update Information:

Automatic update for buildah-1.39.2-1.fc41. Security fix for CVE-2025-27144 Changelog for buildah * Tue Mar 04 2025 Packit - 2:1.39.2-1 - Update to 1.39.2 upstream release * Wed Feb 26 2025 Packit - 2:1.39.1-1 - Update to 1.39.1 upstream release * Thu Feb 06 2025 Lokesh Mandvekar - 2:1.39.0-2 - TMT: initial enablement

Topics%20covered

Topics Covered

security advisory denial of service update Fedora security fix CISO buildah

Change Log

* Tue Mar 4 2025 Packit - 2:1.39.2-1 - Update to 1.39.2 upstream release * Wed Feb 26 2025 Packit - 2:1.39.1-1 - Update to 1.39.1 upstream release * Thu Feb 6 2025 Lokesh Mandvekar - 2:1.39.0-2 - TMT: initial enablement

References


[ 1 ] Bug #2347423 - CVE-2025-27144 go-jose: Go JOSE's Parsing Vulnerable to Denial of Service https://bugzilla.redhat.com/show_bug.cgi?id=2347423

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-f7524afa1f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: buildah
Product: Fedora 41
Version: 1.39.2
Release: 1.fc41
URL: https://buildah.io
Summary: A command line tool used for creating OCI Images

Topics%20covered

Topics Covered

security advisory denial of service update Fedora security fix CISO buildah

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here