Packages / Debian 12 (Bookworm) / Source / devel / golang-github-containers-buildah

Source Package: golang-github-containers-buildah (1.28.2+ds1-3+deb12u1+b3)

CLI tool to facilitate building OCI images

The following binary packages are built from this source package:

buildah
CLI tool to facilitate building OCI images
golang-github-containers-buildah-dev
tool to facilitate building OCI images

Vulnerabilidades conocidas

La asociación de paquetes está en curso.

CVE	Gravedad	Impacto por versión
[CVE-2026-79705] Published: Sep 15, 2026, 12:00:00 AM UTC A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a crafted tar archive containing malicious symlinks can escape the target extraction directory and	Medium(4.5)	Desconocido Detalles (4) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Desconocido Version impact unknown nvd · golang-github-containers-buildah · debian · bookworm; pypi · golang-github-containers-buildah · debian · 12; pypi · golang-github-containers-buildah · debian · 13; pypi · golang-github-containers-buildah · debian · 14 `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Desconocido Version impact unknown nvd · golang-github-containers-buildah · debian · bookworm; pypi · golang-github-containers-buildah · debian · 12; pypi · golang-github-containers-buildah · debian · 13; pypi · golang-github-containers-buildah · debian · 14 `1.28.2+ds1-3+deb12u1` · all · bookworm Desconocido Version impact unknown nvd · golang-github-containers-buildah · debian · bookworm; pypi · golang-github-containers-buildah · debian · 12; pypi · golang-github-containers-buildah · debian · 13; pypi · golang-github-containers-buildah · debian · 14 `1.28.2+ds1-3+deb12u1` · all · bookworm Desconocido Version impact unknown nvd · golang-github-containers-buildah · debian · bookworm; pypi · golang-github-containers-buildah · debian · 12; pypi · golang-github-containers-buildah · debian · 13; pypi · golang-github-containers-buildah · debian · 14
[CVE-2026-44517] Published: Aug 21, 2026, 8:29:00 PM UTC golang-github-containers-buildah: CVE-2026-44517	Medium(6.3)	Desconocido Detalles (4) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Desconocido · Corregida: `1.43.2+ds1-1` Version impact unknown dsa · golang-github-containers-buildah · debian · bookworm; pypi · golang-github-containers-buildah · debian · 13; pypi · golang-github-containers-buildah · debian · 14 `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Desconocido · Corregida: `1.43.2+ds1-1` Version impact unknown dsa · golang-github-containers-buildah · debian · bookworm; pypi · golang-github-containers-buildah · debian · 13; pypi · golang-github-containers-buildah · debian · 14 `1.28.2+ds1-3+deb12u1` · all · bookworm Desconocido · Corregida: `1.43.2+ds1-1` Version impact unknown dsa · golang-github-containers-buildah · debian · bookworm; pypi · golang-github-containers-buildah · debian · 13; pypi · golang-github-containers-buildah · debian · 14 `1.28.2+ds1-3+deb12u1` · all · bookworm Desconocido · Corregida: `1.43.2+ds1-1` Version impact unknown dsa · golang-github-containers-buildah · debian · bookworm; pypi · golang-github-containers-buildah · debian · 13; pypi · golang-github-containers-buildah · debian · 14
[CVE-2024-9675] Published: Oct 9, 2024, 12:00:00 AM UTC golang-github-containers-buildah: CVE-2024-9675	High(7.8)	Desconocido La asociación de paquetes está en curso. Observado: Oct 27, 2026, 1:34:26 AM UTC Detalles (4) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1` · all · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1` · all · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12
[CVE-2024-9407] Published: Oct 1, 2024, 12:00:00 AM UTC golang-github-containers-buildah: CVE-2024-9407	Medium(5.3)	Desconocido La asociación de paquetes está en curso. Observado: Oct 27, 2026, 1:34:51 AM UTC Detalles (4) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1` · all · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1` · all · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12
[CVE-2024-1753] Published: Mar 18, 2024, 12:00:00 AM UTC golang-github-containers-buildah: CVE-2024-1753	High(8.6)	Desconocido La asociación de paquetes está en curso. Observado: Oct 28, 2026, 5:37:25 PM UTC Detalles (4) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1` · all · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1` · all · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12
[CVE-2024-11218] Published: Jan 1, 2024, 12:00:00 AM UTC golang-github-containers-buildah: CVE-2024-11218	High(8.6)	Desconocido La asociación de paquetes está en curso. Observado: Oct 28, 2026, 5:39:29 PM UTC Detalles (4) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1` · all · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1` · all · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12
[CVE-2022-4122] Published: Nov 22, 2022, 12:00:00 AM UTC golang-github-containers-buildah: CVE-2022-4122	Medium(5.9)	Desconocido La asociación de paquetes está en curso. Observado: Oct 23, 2026, 6:29:48 PM UTC Detalles (4) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm `1.28.2+ds1-3+deb12u1` · all · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm `1.28.2+ds1-3+deb12u1` · all · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm
[CVE-2022-4123] Published: Nov 22, 2022, 12:00:00 AM UTC golang-github-containers-buildah: CVE-2022-4123	Low(3.1)	Desconocido La asociación de paquetes está en curso. Observado: Oct 23, 2026, 6:29:49 PM UTC Detalles (4) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm `1.28.2+ds1-3+deb12u1` · all · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm `1.28.2+ds1-3+deb12u1` · all · bookworm Afectada dsa · golang-github-containers-buildah · debian · bookworm
[CVE-2022-2990] Published: Aug 22, 2022, 12:00:00 AM UTC golang-github-containers-buildah: CVE-2022-2990	High(7.1)	Desconocido La asociación de paquetes está en curso. Observado: Oct 23, 2026, 6:26:27 PM UTC Detalles (4) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Corregida · Corregida: `1.28.0+ds1-2` dsa · golang-github-containers-buildah · debian · bookworm `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Corregida · Corregida: `1.28.0+ds1-2` dsa · golang-github-containers-buildah · debian · bookworm `1.28.2+ds1-3+deb12u1` · all · bookworm Corregida · Corregida: `1.28.0+ds1-2` dsa · golang-github-containers-buildah · debian · bookworm `1.28.2+ds1-3+deb12u1` · all · bookworm Corregida · Corregida: `1.28.0+ds1-2` dsa · golang-github-containers-buildah · debian · bookworm
[CVE-2022-27651] Published: Mar 30, 2022, 12:00:00 PM UTC golang-github-containers-buildah: CVE-2022-27651	Medium(5.9)	Desconocido La asociación de paquetes está en curso. Observado: Oct 23, 2026, 6:25:40 PM UTC Detalles (4) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Corregida · Corregida: `1.28.0+ds1-2` dsa · golang-github-containers-buildah · debian · bookworm `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Corregida · Corregida: `1.28.0+ds1-2` dsa · golang-github-containers-buildah · debian · bookworm `1.28.2+ds1-3+deb12u1` · all · bookworm Corregida · Corregida: `1.28.0+ds1-2` dsa · golang-github-containers-buildah · debian · bookworm `1.28.2+ds1-3+deb12u1` · all · bookworm Corregida · Corregida: `1.28.0+ds1-2` dsa · golang-github-containers-buildah · debian · bookworm
[CVE-2021-3602] Published: Jul 15, 2021, 2:00:00 PM UTC golang-github-containers-buildah: CVE-2021-3602	Medium(5.6)	Desconocido La asociación de paquetes está en curso. Observado: Oct 23, 2026, 5:58:39 PM UTC Detalles (4) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Corregida · Corregida: `1.22.3+ds1-1` dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Corregida · Corregida: `1.22.3+ds1-1` dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1` · all · bookworm Corregida · Corregida: `1.22.3+ds1-1` dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1` · all · bookworm Corregida · Corregida: `1.22.3+ds1-1` dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12
[CVE-2020-10696] Published: Mar 26, 2020, 12:00:00 AM UTC golang-github-containers-buildah: CVE-2020-10696	High(8.8)	Desconocido La asociación de paquetes está en curso. Observado: Oct 23, 2026, 5:46:17 PM UTC Detalles (4) `1.28.2+ds1-3+deb12u1+b3` · amd64 · bookworm Corregida · Corregida: `1.11.6-2` dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1+b3` · arm64 · bookworm Corregida · Corregida: `1.11.6-2` dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1` · all · bookworm Corregida · Corregida: `1.11.6-2` dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12 `1.28.2+ds1-3+deb12u1` · all · bookworm Corregida · Corregida: `1.11.6-2` dsa · golang-github-containers-buildah · debian · bookworm; dsa · golang-github-containers-buildah · debian · 12

Última sincronización: Oct 29, 2026, 11:38:24 AM UTC

[Catálogo de CVE]

Fuentes

Debian 12 (Bookworm) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prueba de firma
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Observed SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Result
match verified
Debian 12 (Bookworm) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prueba de firma
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Observed SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Result
match verified