gpp_maybe Security update for buildah

SUSE-SLES-16.0-1162

This update for buildah fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266648). - CVE-2026-39829: golang.org/x/crypto/ssh: pathological RSA/DSA parameters may cause DoS (bsc#1266191). - CVE-2026-39830: golang.org/x/crypto/ssh: client can cause server deadlock on unexpected responses (bsc#1266191). - CVE-2026-46598: golang.org/x/crypto/ssh: pathological inputs can lead to client panic/agent (bsc#1266191).

• Release Date
  Jul 6 2026
• References
  Bugzilla: 1266191, 1266648
  CVEs: CVE-2026-39821, CVE-2026-39829, CVE-2026-39830, CVE-2026-46598
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  buildah
  Tool for building OCI containers

  1.39.5-160000.2.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  buildah
  Tool for building OCI containers

  1.39.5-160000.2.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  buildah
  Tool for building OCI containers

  1.39.5-160000.2.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  buildah
  Tool for building OCI containers

  1.39.5-160000.2.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  buildah
  Tool for building OCI containers

  1.39.5-160000.2.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  buildah
  Tool for building OCI containers

  1.39.5-160000.2.1 lock rpm