Package: buildah (1.28.2+ds1-3+deb12u1+b3)

CLI tool to facilitate building OCI images

Other Packages Related to buildah:

dep: [uidmap]
programs to help use subuids
dep: [golang-github-containers-common] (>> 0.49.1)
Common files for github.com/containers repositories
dep: [libc6] (>= 2.34)
GNU C Library: Shared libraries
dep: [libdevmapper1.02.1] (>= 2:1.02.97)
Linux Kernel Device Mapper userspace library
dep: [libgpgme11] (>= 1.4.1)
GPGME - GnuPG Made Easy (library)
dep: [libseccomp2] (>= 2.5.0)
high level interface to Linux seccomp filter

rec: [fuse-overlayfs] (>= 0.7.1~)
implementation of overlay+shiftfs in FUSE for rootless containers
rec: [crun]
lightweight OCI runtime for running containers
rec: [runc]
Open Container Project - runtime

sug: [containers-storage]
CLI tools for handling how containers are stored on disk

Download buildah

Architecture	Package size	Installed size	Files	Package
amd64	5.9 MiB	20 MiB	list of files	Download
arm64	5.0 MiB	19 MiB	list of files	Download

Rutas de archivos del paquete (104)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/bin/buildah
/usr/share/bash-completion/completions/buildah
/usr/share/doc/buildah/buildah.1.md.gz
/usr/share/doc/buildah/buildah-add.1.md.gz
/usr/share/doc/buildah/buildah-build.1.md.gz
/usr/share/doc/buildah/buildah-commit.1.md.gz
/usr/share/doc/buildah/buildah-config.1.md.gz
/usr/share/doc/buildah/buildah-containers.1.md
/usr/share/doc/buildah/buildah-copy.1.md
/usr/share/doc/buildah/buildah-from.1.md.gz
/usr/share/doc/buildah/buildah-images.1.md.gz
/usr/share/doc/buildah/buildah-info.1.md
/usr/share/doc/buildah/buildah-inspect.1.md
/usr/share/doc/buildah/buildah-login.1.md
/usr/share/doc/buildah/buildah-logout.1.md
/usr/share/doc/buildah/buildah-manifest.1.md.gz
/usr/share/doc/buildah/buildah-manifest-add.1.md.gz
/usr/share/doc/buildah/buildah-manifest-annotate.1.md
/usr/share/doc/buildah/buildah-manifest-create.1.md
/usr/share/doc/buildah/buildah-manifest-exists.1.md
/usr/share/doc/buildah/buildah-manifest-inspect.1.md
/usr/share/doc/buildah/buildah-manifest-push.1.md
/usr/share/doc/buildah/buildah-manifest-remove.1.md
/usr/share/doc/buildah/buildah-manifest-rm.1.md
/usr/share/doc/buildah/buildah-mount.1.md
/usr/share/doc/buildah/buildah-pull.1.md.gz
/usr/share/doc/buildah/buildah-push.1.md.gz
/usr/share/doc/buildah/buildah-rename.1.md
/usr/share/doc/buildah/buildah-rm.1.md
/usr/share/doc/buildah/buildah-rmi.1.md
/usr/share/doc/buildah/buildah-run.1.md.gz
/usr/share/doc/buildah/buildah-source.1.md
/usr/share/doc/buildah/buildah-source-add.1.md
/usr/share/doc/buildah/buildah-source-create.1.md
/usr/share/doc/buildah/buildah-source-pull.1.md
/usr/share/doc/buildah/buildah-source-push.1.md
/usr/share/doc/buildah/buildah-tag.1.md
/usr/share/doc/buildah/buildah-umount.1.md
/usr/share/doc/buildah/buildah-unshare.1.md
/usr/share/doc/buildah/buildah-version.1.md
/usr/share/doc/buildah/changelog.Debian.amd64.gz
/usr/share/doc/buildah/changelog.Debian.arm64.gz
/usr/share/doc/buildah/changelog.Debian.gz
/usr/share/doc/buildah/changelog.gz
/usr/share/doc/buildah/copyright
/usr/share/doc/buildah/examples/cni-examples/100-buildah-bridge.conf
/usr/share/doc/buildah/examples/cni-examples/200-loopback.conf
/usr/share/doc/buildah/examples/cni-examples/README.md
/usr/share/doc/buildah/examples/policy.json
/usr/share/doc/buildah/examples/registries.conf
/usr/share/doc/buildah/README.Debian
/usr/share/doc/buildah/README.md.gz
/usr/share/doc/buildah/release-announcements/README.md
/usr/share/doc/buildah/release-announcements/v0.12.md
/usr/share/doc/buildah/release-announcements/v0.16.md
/usr/share/doc/buildah/release-announcements/v1.1.md
/usr/share/doc/buildah/release-announcements/v1.2.md.gz
/usr/share/doc/buildah/release-announcements/v1.3.md
/usr/share/doc/buildah/release-announcements/v1.4.md.gz
/usr/share/doc/buildah/release-announcements/v1.5.md.gz
/usr/share/doc/buildah/tutorials/01-intro.md.gz
/usr/share/doc/buildah/tutorials/02-registries-repositories.md.gz
/usr/share/doc/buildah/tutorials/03-on-build.md.gz
/usr/share/doc/buildah/tutorials/04-include-in-your-build-tool.md.gz
/usr/share/doc/buildah/tutorials/05-openshift-rootless-build.md.gz
/usr/share/doc/buildah/tutorials/README.md
/usr/share/man/man1/buildah.1.gz
/usr/share/man/man1/buildah-add.1.gz
/usr/share/man/man1/buildah-build.1.gz
/usr/share/man/man1/buildah-commit.1.gz
/usr/share/man/man1/buildah-config.1.gz
/usr/share/man/man1/buildah-containers.1.gz
/usr/share/man/man1/buildah-copy.1.gz
/usr/share/man/man1/buildah-from.1.gz
/usr/share/man/man1/buildah-images.1.gz
/usr/share/man/man1/buildah-info.1.gz
/usr/share/man/man1/buildah-inspect.1.gz
/usr/share/man/man1/buildah-login.1.gz
/usr/share/man/man1/buildah-logout.1.gz
/usr/share/man/man1/buildah-manifest.1.gz
/usr/share/man/man1/buildah-manifest-add.1.gz
/usr/share/man/man1/buildah-manifest-annotate.1.gz
/usr/share/man/man1/buildah-manifest-create.1.gz
/usr/share/man/man1/buildah-manifest-exists.1.gz
/usr/share/man/man1/buildah-manifest-inspect.1.gz
/usr/share/man/man1/buildah-manifest-push.1.gz
/usr/share/man/man1/buildah-manifest-remove.1.gz
/usr/share/man/man1/buildah-manifest-rm.1.gz
/usr/share/man/man1/buildah-mount.1.gz
/usr/share/man/man1/buildah-pull.1.gz
/usr/share/man/man1/buildah-push.1.gz
/usr/share/man/man1/buildah-rename.1.gz
/usr/share/man/man1/buildah-rm.1.gz
/usr/share/man/man1/buildah-rmi.1.gz
/usr/share/man/man1/buildah-run.1.gz
/usr/share/man/man1/buildah-source.1.gz
/usr/share/man/man1/buildah-source-add.1.gz
/usr/share/man/man1/buildah-source-create.1.gz
/usr/share/man/man1/buildah-source-pull.1.gz
/usr/share/man/man1/buildah-source-push.1.gz
/usr/share/man/man1/buildah-tag.1.gz
/usr/share/man/man1/buildah-umount.1.gz
/usr/share/man/man1/buildah-unshare.1.gz
/usr/share/man/man1/buildah-version.1.gz

Field source: Debian 12 (Bookworm) main amd64

Usar este paquete

OpenFactory puede arrancar este sistema operativo en una máquina virtual del navegador, o iniciar una construcción que incluye el nombre nativo del paquete de este registro.

Probar Debian 12 (Bookworm) en el navegador Construir una imagen que incluye buildah

Versiones, suites y repositorios

Cada fila es metadato del índice de paquetes para una versión, arquitectura, suite y repositorio. Nombres, URL y tamaños vienen de la fuente; un enlace es un punto de descarga que puede cambiar, no una redistribución de OpenFactory.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
1.28.2+ds1-3+deb12u1+b3	bookworm / main	amd64	Debian 12 · main · amd64	5.9 MiB	20 MiB	pool/main/g/golang-github-containers-buildah/buildah_1.28.2+ds1-3+deb12u1+b3_amd64.deb
1.28.2+ds1-3+deb12u1+b3	bookworm / main	arm64	Debian 12 · main · arm64	5.0 MiB	19 MiB	pool/main/g/golang-github-containers-buildah/buildah_1.28.2+ds1-3+deb12u1+b3_arm64.deb

Field source: Debian 12 (Bookworm) main amd64

Vulnerabilidades conocidas

La asociación de paquetes está en curso.

CVE	Gravedad	Impacto por versión
[CVE-2026-79705] Published: Sep 15, 2026, 12:00:00 AM UTC A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a crafted tar archive containing malicious symlinks can escape the target extraction directory and	Medium(4.5)	Desconocido Detalles (2) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Desconocido Version impact unknown nvd · golang-github-containers-buildah · debian · bookworm; pypi · golang-github-containers-buildah · debian · 12; pypi · golang-github-containers-buildah · debian · 13; pypi · golang-github-containers-buildah · debian · 14 `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Desconocido Version impact unknown nvd · golang-github-containers-buildah · debian · bookworm; pypi · golang-github-containers-buildah · debian · 12; pypi · golang-github-containers-buildah · debian · 13; pypi · golang-github-containers-buildah · debian · 14
[CVE-2026-44517] Published: Aug 21, 2026, 8:29:00 PM UTC golang-github-containers-buildah: CVE-2026-44517	Medium(6.3)	Desconocido Detalles (2) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Desconocido · Corregida: `1.43.2+ds1-1` Version impact unknown dsa · golang-github-containers-buildah · debian · bookworm; pypi · golang-github-containers-buildah · debian · 13; pypi · golang-github-containers-buildah · debian · 14 `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Desconocido · Corregida: `1.43.2+ds1-1` Version impact unknown dsa · golang-github-containers-buildah · debian · bookworm; pypi · golang-github-containers-buildah · debian · 13; pypi · golang-github-containers-buildah · debian · 14
[CVE-2024-9675] Published: Oct 9, 2024, 12:00:00 AM UTC golang-github-containers-buildah: CVE-2024-9675	High(7.8)	Desconocido La asociación de paquetes está en curso. Observado: Oct 27, 2026, 1:34:26 AM UTC Detalles (2) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12
[CVE-2024-9407] Published: Oct 1, 2024, 12:00:00 AM UTC golang-github-containers-buildah: CVE-2024-9407	Medium(5.3)	Desconocido La asociación de paquetes está en curso. Observado: Oct 27, 2026, 1:34:51 AM UTC Detalles (2) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12
[CVE-2024-1753] Published: Mar 18, 2024, 12:00:00 AM UTC golang-github-containers-buildah: CVE-2024-1753	High(8.6)	Desconocido La asociación de paquetes está en curso. Observado: Oct 28, 2026, 5:37:25 PM UTC Detalles (2) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12
[CVE-2024-11218] Published: Jan 1, 2024, 12:00:00 AM UTC golang-github-containers-buildah: CVE-2024-11218	High(8.6)	Desconocido La asociación de paquetes está en curso. Observado: Oct 28, 2026, 5:39:29 PM UTC Detalles (2) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12
[CVE-2022-4122] Published: Nov 22, 2022, 12:00:00 AM UTC golang-github-containers-buildah: CVE-2022-4122	Medium(5.9)	Desconocido La asociación de paquetes está en curso. Observado: Oct 23, 2026, 6:29:48 PM UTC Detalles (2) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm
[CVE-2022-4123] Published: Nov 22, 2022, 12:00:00 AM UTC golang-github-containers-buildah: CVE-2022-4123	Low(3.1)	Desconocido La asociación de paquetes está en curso. Observado: Oct 23, 2026, 6:29:49 PM UTC Detalles (2) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm
[CVE-2022-2990] Published: Aug 22, 2022, 12:00:00 AM UTC golang-github-containers-buildah: CVE-2022-2990	High(7.1)	Desconocido La asociación de paquetes está en curso. Observado: Oct 23, 2026, 6:26:27 PM UTC Detalles (2) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Corregida · Corregida: `1.28.0+ds1-2` dsa · golang-github-containers-buildah · debian · bookworm `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Corregida · Corregida: `1.28.0+ds1-2` dsa · golang-github-containers-buildah · debian · bookworm
[CVE-2022-27651] Published: Mar 30, 2022, 12:00:00 PM UTC golang-github-containers-buildah: CVE-2022-27651	Medium(5.9)	Desconocido La asociación de paquetes está en curso. Observado: Oct 23, 2026, 6:25:40 PM UTC Detalles (2) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Corregida · Corregida: `1.28.0+ds1-2` dsa · golang-github-containers-buildah · debian · bookworm `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Corregida · Corregida: `1.28.0+ds1-2` dsa · golang-github-containers-buildah · debian · bookworm
[CVE-2021-3602] Published: Jul 15, 2021, 2:00:00 PM UTC golang-github-containers-buildah: CVE-2021-3602	Medium(5.6)	Desconocido La asociación de paquetes está en curso. Observado: Oct 23, 2026, 5:58:39 PM UTC Detalles (2) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Corregida · Corregida: `1.22.3+ds1-1` dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Corregida · Corregida: `1.22.3+ds1-1` dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12
[CVE-2020-10696] Published: Mar 26, 2020, 12:00:00 AM UTC golang-github-containers-buildah: CVE-2020-10696	High(8.8)	Desconocido La asociación de paquetes está en curso. Observado: Oct 23, 2026, 5:46:17 PM UTC Detalles (2) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Corregida · Corregida: `1.11.6-2` dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Corregida · Corregida: `1.11.6-2` dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12

Última sincronización: Oct 29, 2026, 11:37:48 AM UTC

[Catálogo de CVE]

Sumas de comprobación

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1.28.2+ds1-3+deb12u1+b3 / amd64Observado Sep 1, 2026sha256 d12d6017f6ba…df63fbf5Resumen de la fuente

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumen de la fuente (sha256): d12d6017f6ba04d8e0f9c3327fc39375f866b05a731522be211057f6df63fbf5

Verificar descarga

printf '%s  %s\n' 'd12d6017f6ba04d8e0f9c3327fc39375f866b05a731522be211057f6df63fbf5' 'buildah_1.28.2+ds1-3+deb12u1+b3_amd64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main amd64

1.28.2+ds1-3+deb12u1+b3 / arm64Observado Sep 1, 2026sha256 50ef1f2333d5…cb39dd83Resumen de la fuente

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumen de la fuente (sha256): 50ef1f2333d5bf53e71db78d4f3aafdb9ed127e86895bb07b7864a00cb39dd83

Verificar descarga

printf '%s  %s\n' '50ef1f2333d5bf53e71db78d4f3aafdb9ed127e86895bb07b7864a00cb39dd83' 'buildah_1.28.2+ds1-3+deb12u1+b3_arm64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main arm64

Fuentes

Debian 12 (Bookworm) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prueba de firma
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Observed SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Result
match verified
Debian 12 (Bookworm) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prueba de firma
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Observed SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Result
match verified