[CLSA-2026:1778254382] buildah: Fix of CVE-2026-25679
Type:
security
Severity:
Important
Release date:
2026-05-08 17:05:03 UTC
Description:
- rebuild on tuxcare9.6esu with newer golang version 1.25.7-1.el9_6.tuxcare.els2 to fix the following CVE: - CVE-2026-25679: fix insufficient validation of host/authority component in url.Parse - split golang BuildRequires by .el9_6 so each ELS platform pulls its own fixed golang version (el9_6 -> 1.25.7.els2, el9_2 -> 1.22.9.els6)
Updated packages:
  • buildah-1.39.6-1.el9_6.tuxcare.els7.x86_64.rpm
    sha:e51de5daf862f3879d2bd9609c9a0ae7390c130f9e445f5c82567420663a9fea
  • buildah-tests-1.39.6-1.el9_6.tuxcare.els7.x86_64.rpm
    sha:049a59c2ca553354a44965020c2bccb441b9a8221dda5cdf9ce6b64c9862ddcf
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.