[CLSA-2026:1792137683] buildah: Fix of CVE-2025-11395
Type:
security
Severity:
Moderate
Release date:
2026-10-16 08:01:34 UTC
Description:
- CVE-2025-11395: oci-archive, storage/pkg/archive: prevent writes outside the destination when extracting a crafted tar archive
CVEs fixed:
Updated packages:
  • buildah-1.43.3-2.el9_8.tuxcare.els1.aarch64.rpm
    sha:3010c3d1643391c3ef1ee2ee275e246d5f1b6c7b29b5b8bede70a16898a530a3
  • buildah-1.43.3-2.el9_8.tuxcare.els1.x86_64.rpm
    sha:133b487abc8fc8b6b75280ac4c056a8909961f29cc380522df097bf6b5845e8a
  • buildah-tests-1.43.3-2.el9_8.tuxcare.els1.aarch64.rpm
    sha:ddbc0abc64482b44682e5f48f0708ec5d0840b62207921c211c6df3c9be11962
  • buildah-tests-1.43.3-2.el9_8.tuxcare.els1.x86_64.rpm
    sha:06edc48dd551a6cfd7f606d829f89e58daca0cf26bd1fb8994d1632125ad721a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.