[El-errata] ELSA-2026-90424 Important: Oracle Linux 9 buildah security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-90424

http://linux.oracle.com/errata/ELSA-2026-90424.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
buildah-1.43.4-2.0.1.el9_8.x86_64.rpm
buildah-tests-1.43.4-2.0.1.el9_8.x86_64.rpm

aarch64:
buildah-1.43.4-2.0.1.el9_8.aarch64.rpm
buildah-tests-1.43.4-2.0.1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/buildah-1.43.4-2.0.1.el9_8.src.rpm

Related CVEs:

CVE-2025-11395
CVE-2026-56855
CVE-2026-78667
CVE-2026-111943




Description of changes:

[1.43.4-2.0.1]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]

[2:1.43.4-2]
- Rebuild for CVE-2026-78667 and CVE-2026-111943
- Resolves: RHEL-279009
- Resolves: RHEL-287507

[2:1.43.4-1]
- Update to buildah 1.43.4 (c7061d00) - fix CVE-2026-56855
  (golang.org/x/crypto/ssh DoS) and CVE-2025-11395 (arbitrary file write in
  copier)
- Resolves: RHEL-256886 RHEL-121272