[El-errata] ELSA-2026-0437 Important: Oracle Linux 9 buildah security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-0437

http://linux.oracle.com/errata/ELSA-2026-0437.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
buildah-1.41.8-1.0.1.el9_7.x86_64.rpm
buildah-tests-1.41.8-1.0.1.el9_7.x86_64.rpm

aarch64:
buildah-1.41.8-1.0.1.el9_7.aarch64.rpm
buildah-tests-1.41.8-1.0.1.el9_7.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/buildah-1.41.8-1.0.1.el9_7.src.rpm

Related CVEs:

CVE-2025-47913




Description of changes:

[1.41.8-1.0.1]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]

[2:1.41.8-1]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.41
  (https://github.com/containers/buildah/commit/f85ff89)
- fixes "CVE-2025-47913 buildah: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS [rhel-9.7.z]"
- Resolves: RHEL-134792

[2:1.41.7-1]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.41
  (https://github.com/containers/buildah/commit/e363f79)
- fixes "Bump to runc v1.2.9 or v1.3.4 to get CVE and regression fixes - Buildah [rhel-9.7.z]"
- Resolves: RHEL-132846