Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 428
Alerts This Week
Warning Icon 1 428

Oracle Linux 10 buildah Critical Security Notification ELSA-2026-38494

oracle
Calendar Grey July 22, 2026
Scroller Oracle
Updated buildah packages for Oracle Linux 10 address critical security issues to enhance system protection and stability.
Oracle Linux 10 has updated RPMs for buildah to address various CVEs, including fixes for CVE-2026-39822, as well as other security improvements and requirement drops.

Summary

[1.43.1-4.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.43.1-4] - rebuild for CVE-2026-39822 - Resolves: RHEL-193643 [2:1.43.1-3] - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Resolves: RHEL-186266 [2:1.43.1-2] - Rebuild for CVE-2026-25679 - Resolves: RHEL-158476

Topics%20covered

Topics Covered

security advisory buffer overflow remote exploit important Oracle buildah

SRPMs

http://oss.oracle.com/ol10/SRPMS-updates/buildah-1.43.1-4.0.1.el10_2.src.rpm

x86_64

buildah-1.43.1-4.0.1.el10_2.x86_64.rpm buildah-tests-1.43.1-4.0.1.el10_2.x86_64.rpm

aarch64

buildah-1.43.1-4.0.1.el10_2.aarch64.rpm buildah-tests-1.43.1-4.0.1.el10_2.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2026-39822

Topics%20covered

Topics Covered

security advisory buffer overflow remote exploit important Oracle buildah

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.