P5Verified

Red Hat Security Advisory: buildah security update

CVE-2025-11395, CVE-2026-15789, CVE-2026-33818, CVE-2026-56853, CVE-2026-56855, CVE-2026-56858, CVE-2026-56860, CVE-2026-56862 affects skopeo. EPSS 0.00362 (percentile 0.2769), scored 2026-10-03. Fixed version: 2:1.22.2-8.el9_8. Fixed version: 2:1.22.2-8.el9_8. Fixed version: 2:1.22.2-8.el9_8. Fixed version: 2:1.22.2-8.el9_8. Fixed version: 2:1.43.3-2.el9_8. Fixed version: 2:1.43.3-2.el9_8. Fixed version: 2:1.43.3-2.el9_8. Fixed version: 2:1.43.3-2.el9_8. Fixed version: 2:1.43.3-2.el9_8.

CVE: CVE-2025-11395, CVE-2026-15789, CVE-2026-33818, CVE-2026-56853, CVE-2026-56855, CVE-2026-56858, CVE-2026-56860, CVE-2026-56862
Product: skopeo
CCR priority: 0.1 /100 (P5)
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N · OSV.dev
EPSS: 0.00362 · percentile 0.2769 · 2026-10-03
KEV: no

Affected products

skopeo · Fixed version: 2:1.22.2-8.el9_8
skopeo-debuginfo · Fixed version: 2:1.22.2-8.el9_8
skopeo-debugsource · Fixed version: 2:1.22.2-8.el9_8
skopeo-tests · Fixed version: 2:1.22.2-8.el9_8
buildah · Fixed version: 2:1.43.3-2.el9_8
buildah-debuginfo · Fixed version: 2:1.43.3-2.el9_8
buildah-debugsource · Fixed version: 2:1.43.3-2.el9_8
buildah-tests · Fixed version: 2:1.43.3-2.el9_8
buildah-tests-debuginfo · Fixed version: 2:1.43.3-2.el9_8

Provenance

OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-11395.html