OESA-2025-1059 buildah security update

🗓️ 17 Jan 2025 11:08:09Reported by GoogleType

osv🔗 osv.dev👁 27 Views

Buildah security update fixes Go TLS, parsing, group handling, and regex DoS vulnerabilities.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: CVE-2022-2879, CVE-2022-41715, CVE-2022-2880, CVE-2022-41717, CVE-2022-41716 may affect IBM CICS TX Advanced	16 Mar 202315:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Go may affect IBM CICS TX Standard	24 Feb 202310:43	–	ibm
IBM Security Bulletins	Security Bulletin:IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from openssl, pcre2 and Golang Go	31 Aug 202216:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to a machine-in-the-middle attack due to Apache MINA SSHD (CVE-2023-48795)	4 Apr 202417:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	1 Dec 202316:06	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties affects IBM Watson Machine Learning Accelerator 3.5.0 for Cloud Pak for Data 4.6.5	8 Feb 202419:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, Golang Go, HTTP/2, NGINX, OpenSSH, Linux kernel might affect IBM Spectrum Protect Plus	4 Feb 202518:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Datapower Operations Dashboard is vulnerable to a machine-in-the-middle attack CVE-2023-48795	11 Mar 202414:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to multiple ansible-operator and opm vulnerabilities	20 Feb 202419:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm

Source	Link
openeuler	www.openeuler.org/zh/security/security-bulletins/detail/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-34558
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-1962
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-2990
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-41715
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-41723
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-24534
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-24536
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-24537
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-24538

18 Aug 2026 01:18Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.19.8

EPSS0.93547

buildah tls vulnerability parsing vulnerability group handling regex denial of service