Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

buildah: TLS 1.3 Deadlock on TuxCare 9.6

published 5 months ago
Summary

A bug in the buildah package for TuxCare 9.6 can cause a deadlock in the TLS 1.3 protocol. This can happen when a user tries to update a TLS key. To fix the issue, update the buildah package to the latest version, which includes a new version of the Go programming language.

Original advisory text
buildah: Fix of CVE-2026-32283
- rebuild on tuxcare9.6esu with newer golang version 1.25.7-1.el9_6.tuxcare.els4
- CVE-2026-32283: fix TLS 1.3 deadlock in crypto/tls handleKeyUpdate
References
Timeline
Published19 May 2026
Updated29 May 2026
First seen29 May 2026
Sources
CLSA-2026-1779182426 · OSV
Track software like this
Free during beta