{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "Update buildah to 1.39.6\n- CVE-2025-52881: fix runc vulnerability by updating to runc v1.2.8\n- Update golang dependency to 1.22.9.tuxcare.els1\n- Remove patches for fixes included in upstream (CVE-2024-9341, CVE-2024-9407,\n CVE-2025-27144)", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/almalinux9.2esu/advisories/2025/clsa-2025_1764692266.json" }, { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2025:1764692266", "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1764692266" } ], "tracking": { "current_release_date": "2026-02-16T09:52:54Z", "generator": { "date": "2026-02-16T09:52:54Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2025:1764692266", "initial_release_date": "2025-12-02T16:18:16Z", "revision_history": [ { "date": "2025-12-02T16:18:16Z", "number": "1", "summary": "Initial version" }, { "date": "2026-02-16T09:52:54Z", "number": "2", "summary": "Update document" } ], "status": "final", "version": "2" }, "title": "buildah: Fix of 4 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.2", "product": { "name": "AlmaLinux 9.2", "product_id": "AlmaLinux-9.2", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.2:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "buildah-tests-1:1.39.6-1.el9_2.tuxcare.els1.x86_64", "product": { "name": "buildah-tests-1:1.39.6-1.el9_2.tuxcare.els1.x86_64", "product_id": "buildah-tests-1:1.39.6-1.el9_2.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/buildah-tests@1.39.6-1.el9_2.tuxcare.els1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "buildah-1:1.39.6-1.el9_2.tuxcare.els1.x86_64", "product": { "name": "buildah-1:1.39.6-1.el9_2.tuxcare.els1.x86_64", "product_id": "buildah-1:1.39.6-1.el9_2.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/buildah@1.39.6-1.el9_2.tuxcare.els1?arch=x86_64&epoch=1" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "buildah-tests-1:1.39.6-1.el9_2.tuxcare.els1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:buildah-tests-1:1.39.6-1.el9_2.tuxcare.els1.x86_64" }, "product_reference": "buildah-tests-1:1.39.6-1.el9_2.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "buildah-1:1.39.6-1.el9_2.tuxcare.els1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:buildah-1:1.39.6-1.el9_2.tuxcare.els1.x86_64" }, "product_reference": "buildah-1:1.39.6-1.el9_2.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-52881", "cwe": { "id": "CWE-61", "name": "UNIX Symbolic Link (Symlink) Following" }, "notes": [ { "category": "description", "text": "runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a racing container with shared mounts (we have also verified this attack is possible to exploit using a standard Dockerfile with docker buildx build as that also permits triggering parallel execution of containers with custom shared mounts configured). This redirect could be through symbolic links in a tmpfs or theoretically other methods such as regular bind-mounts. While similar, the mitigation applied for the related CVE, CVE-2019-19921, was fairly limited and effectively only caused runc to verify that when LSM labels are written they are actually procfs files. This issue is fixed in versions 1.2.8, 1.3.3, and 1.4.0-rc.3.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:buildah-1:1.39.6-1.el9_2.tuxcare.els1.x86_64", "AlmaLinux-9.2:buildah-tests-1:1.39.6-1.el9_2.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-52881" }, { "category": "external", "summary": "http://github.com/opencontainers/runc/commit/a41366e74080fa9f26a2cd3544e2801449697322", "url": "http://github.com/opencontainers/runc/commit/a41366e74080fa9f26a2cd3544e2801449697322" }, { "category": "external", "summary": "http://github.com/opencontainers/runc/commit/fdcc9d3cad2f85954a241ccb910a61aaa1ef47f3", "url": "http://github.com/opencontainers/runc/commit/fdcc9d3cad2f85954a241ccb910a61aaa1ef47f3" }, { "category": "external", "summary": "https://github.com/opencontainers/runc/blob/v1.4.0-rc.2/RELEASES.md", "url": "https://github.com/opencontainers/runc/blob/v1.4.0-rc.2/RELEASES.md" }, { "category": "external", "summary": "https://github.com/opencontainers/runc/commit/3f925525b44d247e390e529e772a0dc0c0bc3557", "url": "https://github.com/opencontainers/runc/commit/3f925525b44d247e390e529e772a0dc0c0bc3557" }, { "category": "external", "summary": "https://github.com/opencontainers/runc/commit/435cc81be6b79cdec73b4002c0dae549b2f6ae6d", "url": "https://github.com/opencontainers/runc/commit/435cc81be6b79cdec73b4002c0dae549b2f6ae6d" }, { "category": "external", "summary": "https://github.com/opencontainers/runc/commit/44a0fcf685db051c80b8c269812bb177f5802c58", "url": "https://github.com/opencontainers/runc/commit/44a0fcf685db051c80b8c269812bb177f5802c58" }, { "category": "external", "summary": "https://github.com/opencontainers/runc/commit/4b37cd93f86e72feac866442988b549b5b7bf3e6", "url": "https://github.com/opencontainers/runc/commit/4b37cd93f86e72feac866442988b549b5b7bf3e6" }, { "category": "external", "summary": "https://github.com/opencontainers/runc/commit/6fc191449109ea14bb7d61238f24a33fe08c651f", "url": "https://github.com/opencontainers/runc/commit/6fc191449109ea14bb7d61238f24a33fe08c651f" }, { "category": "external", "summary": "https://github.com/opencontainers/runc/commit/77889b56db939c323d29d1130f28f9aea2edb544", "url": "https://github.com/opencontainers/runc/commit/77889b56db939c323d29d1130f28f9aea2edb544" }, { "category": "external", "summary": "https://github.com/opencontainers/runc/commit/77d217c7c3775d8ca5af89e477e81568ef4572db", "url": "https://github.com/opencontainers/runc/commit/77d217c7c3775d8ca5af89e477e81568ef4572db" }, { "category": "external", "summary": "https://github.com/opencontainers/runc/commit/b3dd1bc562ed9996d1a0f249e056c16624046d28", "url": "https://github.com/opencontainers/runc/commit/b3dd1bc562ed9996d1a0f249e056c16624046d28" }, { "category": "external", "summary": "https://github.com/opencontainers/runc/commit/d40b3439a9614a86e87b81a94c6811ec6fa2d7d2", "url": "https://github.com/opencontainers/runc/commit/d40b3439a9614a86e87b81a94c6811ec6fa2d7d2" }, { "category": "external", "summary": "https://github.com/opencontainers/runc/commit/d61fd29d854b416feaaf128bf650325cd2182165", "url": "https://github.com/opencontainers/runc/commit/d61fd29d854b416feaaf128bf650325cd2182165" }, { "category": "external", "summary": "https://github.com/opencontainers/runc/commit/db19bbed5348847da433faa9d69e9f90192bfa64", "url": "https://github.com/opencontainers/runc/commit/db19bbed5348847da433faa9d69e9f90192bfa64" }, { "category": "external", "summary": "https://github.com/opencontainers/runc/commit/ed6b1693b8b3ae7eb0250a7e76fc888cdacf98c1", "url": "https://github.com/opencontainers/runc/commit/ed6b1693b8b3ae7eb0250a7e76fc888cdacf98c1" }, { "category": "external", "summary": "https://github.com/opencontainers/runc/commit/ff6fe1324663538167eca8b3d3eec61e1bd4fa51", "url": "https://github.com/opencontainers/runc/commit/ff6fe1324663538167eca8b3d3eec61e1bd4fa51" }, { "category": "external", "summary": "https://github.com/opencontainers/runc/commit/ff94f9991bd32076c871ef0ad8bc1b763458e480", "url": "https://github.com/opencontainers/runc/commit/ff94f9991bd32076c871ef0ad8bc1b763458e480" }, { "category": "external", "summary": "https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2", "url": "https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2" }, { "category": "external", "summary": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm", "url": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm" }, { "category": "external", "summary": "https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r", "url": "https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r" } ], "release_date": "2025-11-06T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-12-02T16:17:48.616014Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1764692266", "product_ids": [ "AlmaLinux-9.2:buildah-1:1.39.6-1.el9_2.tuxcare.els1.x86_64", "AlmaLinux-9.2:buildah-tests-1:1.39.6-1.el9_2.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1764692266" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:buildah-1:1.39.6-1.el9_2.tuxcare.els1.x86_64", "AlmaLinux-9.2:buildah-tests-1:1.39.6-1.el9_2.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }