ALSA-2026:29455 Important: buildah security update

🗓️ 24 Jun 2026 00:00:00Reported by GoogleType

osv🔗 osv.dev👁 14 Views

Buildah security update fixes multiple CVEs in Transport Layer Security, X509 certificates, Secure Shell, and URL parsing.

Reporter	Title	Published	Views	Family All 8210
OSV	CLEANSTART-2026-YK91867 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.4.0-r1, 8.4.0-r2, 8.4.0-r3, 8.4.0-r4	8 Jun 202612:52	–	osv
OSV	CLEANSTART-2026-YL47233 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 0.0.0_git20251231-r0, 0.0.0_git20251231-r1	1 Apr 202609:07	–	osv
OSV	CLEANSTART-2026-YM63226 gRPC-Go is the Go language implementation of gRPC	16 Apr 202600:41	–	osv
OSV	CLEANSTART-2026-YM99936 Security fixes in velero-plugin-for-aws 1.14.0-r1	30 Jul 202607:10	–	osv
OSV	CLEANSTART-2026-YN56551 Security fixes for CVE-2025-61729, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27142 applied in versions: 0.20.2-r1	1 Apr 202609:08	–	osv
OSV	CLEANSTART-2026-YO06374 Security fixes in cilium 1.18.9-r0	30 Jul 202607:10	–	osv
OSV	CLEANSTART-2026-YO19768 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 3.6.0-r0	1 Apr 202609:10	–	osv
OSV	CLEANSTART-2026-YO80035 Security fixes in descheduler 0.34.0-r2	30 Jul 202607:10	–	osv
OSV	CLEANSTART-2026-YP16651 Security fixes for CVE-2025-22868, CVE-2025-22869, CVE-2025-22872, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2025-68121, CVE-2026-1229, CVE-2026-29181, CVE-2026-32280, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-mh2q-q3fh-2475, ghsa-mqgf-5vvp-8fh8, ghsa-pjcq-xvwq-hhpj, ghsa-xmrv-pmrh-hhx2 applied in versions: 1.69.0-r0, 1.69.0-r1, 1.69.0-r2, 1.72.1-r1, 1.73.1-r0	18 May 202613:23	–	osv
OSV	CLEANSTART-2026-YQ65927 Security fixes in cilium 1.19.3-r0	30 Jul 202607:10	–	osv

Source	Link
access	www.access.redhat.com/errata/RHSA-2026:29455
access	www.access.redhat.com/security/cve/CVE-2026-25679
access	www.access.redhat.com/security/cve/CVE-2026-32280
access	www.access.redhat.com/security/cve/CVE-2026-32281
access	www.access.redhat.com/security/cve/CVE-2026-32283
access	www.access.redhat.com/security/cve/CVE-2026-39829
access	www.access.redhat.com/security/cve/CVE-2026-39830
bugzilla	www.bugzilla.redhat.com/2445356
bugzilla	www.bugzilla.redhat.com/2456333
bugzilla	www.bugzilla.redhat.com/2456338

25 Jun 2026 14:59Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5 - 9.1

EPSS0.00728

SSVC