RHSA-2026:4532 | Mondoo Vulnerability Intelligence

RHSA-2026:4532

HIGH8.2

Red Hat Security Advisory: buildah security update

Published Mar 13, 2026

Modified Yesterday

Fix available

Affected Packages

buildah

Red Hat rhel_e4s 9.2 appstream

Fixed in:

1:1.29.5-1.el9_2.2

buildah-debuginfo

Red Hat rhel_e4s 9.2 appstream

Fixed in:

1:1.29.5-1.el9_2.2

buildah-debugsource

Red Hat rhel_e4s 9.2 appstream

Fixed in:

1:1.29.5-1.el9_2.2

buildah-tests

Red Hat rhel_e4s 9.2 appstream

Fixed in:

1:1.29.5-1.el9_2.2

buildah-tests-debuginfo

Red Hat rhel_e4s 9.2 appstream

Fixed in:

1:1.29.5-1.el9_2.2

References(37)

https://access.redhat.com/errata/RHSA-2026:4532

https://access.redhat.com/security/cve/CVE-2025-47913

https://access.redhat.com/security/cve/CVE-2025-52881

https://access.redhat.com/security/cve/CVE-2025-58183

https://access.redhat.com/security/cve/CVE-2025-65637

https://access.redhat.com/security/updates/classification/#important

https://bugzilla.redhat.com/show_bug.cgi?id=2404715

https://bugzilla.redhat.com/show_bug.cgi?id=2407258

https://bugzilla.redhat.com/show_bug.cgi?id=2414943

https://bugzilla.redhat.com/show_bug.cgi?id=2418900

https://github.com/advisories/GHSA-hcg3-q754-cr77

https://github.com/mjuanxd/logrus-dos-poc

https://github.com/mjuanxd/logrus-dos-poc/blob/main/README.md

https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm

https://github.com/opencontainers/selinux/pull/237

https://github.com/sirupsen/logrus/issues/1370

https://github.com/sirupsen/logrus/pull/1376

https://github.com/sirupsen/logrus/releases/tag/v1.8.3

https://github.com/sirupsen/logrus/releases/tag/v1.9.1

https://github.com/sirupsen/logrus/releases/tag/v1.9.3

https://go.dev/cl/700295

https://go.dev/cl/709861

https://go.dev/issue/75178

https://go.dev/issue/75677

https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

RequiredUI:R

Scope

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Upstream

CVE-2025-47913 CVE-2025-52881 CVE-2025-58183 CVE-2025-65637

Related

GO-2025-4014 GO-2025-4116

Ecosystems

Red Hat rhel_e4s 9.2 appstream

Timeline

PublishedMar 13, 2026

ModifiedMar 14, 2026