This site requires JavaScript to be enabled to function correctly, please enable it.
Summary:
CVE-2026-34986 buildah: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object [fedora-all]
Product:
[Fedora] Fedora
Reporter:
Jon Moroney <jmoroney>
Component:
buildah Assignee:
Lokesh Mandvekar <lsm5>
Status:
NEW
---
QA Contact:
Fedora Extras Quality Assurance <extras-qa>
Severity:
high
Docs Contact:
Priority:
high
Version:
rawhide CC:
amurdaca, debarshir, dwalsh, fedoraproject, go-sig, jnovy, lsm5, nsella, pehunt, pholzing, tsweeney
Target Milestone:
--- Keywords:
Security, SecurityTracking
Target Release:
---
Hardware:
Unspecified
OS:
Unspecified
Whiteboard:
{"flaws": ["66bfe9c6-ad46-4510-a8dd-bd27e8f0247c"]}
Fixed In Version:
Doc Type:
---
Doc Text:
Story Points:
---
Clone Of:
Environment:
Last Closed:
Type:
---
Regression:
---
Mount Type:
---
Documentation:
---
CRM:
Verified Versions:
Category:
---
oVirt Team:
---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:
---
Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:
2455470