P5Verified

Red Hat Security Advisory: buildah security update

CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39835, CVE-2026-42508, CVE-2026-46597 affects podman. EPSS 0.00623 (percentile 0.48032), scored 2026-10-03. Fixed version: 5:5.4.0-22.el9_6.5. Fixed version: 5:5.4.0-22.el9_6.5. Fixed version: 5:5.4.0-22.el9_6.5. Fixed version: 5:5.4.0-22.el9_6.5. Fixed version: 5:5.4.0-22.el9_6.5. Fixed version: 5:5.4.0-22.el9_6.5. Fixed version: 5:5.4.0-22.el9_6.5. Fixed version: 5:5.4.0-22.el9_6.5. Fixed version: 5:5.4.0-22.el9_6.5. Fixed version: 5:5.4.0-22.el9_6.5. Fixed version: 2:1.43.1-3.el10_2. Fixed version: 2:1.43.1-3.el10_2.

CVE: CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39835, CVE-2026-42508, CVE-2026-46597
Product: podman
CCR priority: 0.2 /100 (P5)
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · OSV.dev
EPSS: 0.00623 · percentile 0.48032 · 2026-10-03
KEV: no

Affected products

podman · Fixed version: 5:5.4.0-22.el9_6.5
podman-debuginfo · Fixed version: 5:5.4.0-22.el9_6.5
podman-debugsource · Fixed version: 5:5.4.0-22.el9_6.5
podman-docker · Fixed version: 5:5.4.0-22.el9_6.5
podman-plugins · Fixed version: 5:5.4.0-22.el9_6.5
podman-plugins-debuginfo · Fixed version: 5:5.4.0-22.el9_6.5
podman-remote · Fixed version: 5:5.4.0-22.el9_6.5
podman-remote-debuginfo · Fixed version: 5:5.4.0-22.el9_6.5
podman-tests · Fixed version: 5:5.4.0-22.el9_6.5
podman-tests-debuginfo · Fixed version: 5:5.4.0-22.el9_6.5
buildah · Fixed version: 2:1.43.1-3.el10_2
buildah-debuginfo · Fixed version: 2:1.43.1-3.el10_2
buildah-debugsource · Fixed version: 2:1.43.1-3.el10_2
buildah-tests · Fixed version: 2:1.43.1-3.el10_2
buildah-tests-debuginfo · Fixed version: 2:1.43.1-3.el10_2

Provenance

OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-39829.html