CLSA-2026-1782812169
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1782812169.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1782812169
- Upstream
CVE (2)
- Published
- 2026-06-30T09:36:27Z
- Modified
- 2026-10-26T09:43:52Z
- Summary
- buildah: Fix of 2 CVEs
- Details
-
- CVE-2026-39829: fix DoS in vendored golang.org/x/crypto/ssh public-key parsing (cap RSA moduli at 8192 bits, validate DSA parameters per FIPS 186-2); affects both el9_2 and el9_6
- CVE-2026-32281: rebuild el9_6 against golang >= 1.25.7-1.el9_6.tuxcare.els7 to fix DoS in crypto/x509 policy validation (Go >= 1.24 only; el9_2 builds with Go 1.22.9 and is not affected)
- References
Affected packages
TuxCare:AlmaLinux:9.6 / buildah
Package
- Name
- buildah
- Purl
- pkg:rpm/tuxcare/buildah?distro=almalinux-9.6