Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 735
Alerts This Week
Warning Icon 1 735

Oracle Linux 9 ELSA-2026-3753 osbuild-composer Important Fixes

oracle
Calendar Grey March 9, 2026
Oracle Linux Logo Esm H88
Important security advisory for Oracle Linux addressing several issues with osbuild-composer. Immediate updates recommended.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

[149-4.0.1] - Add missing dependency over dracut-config-rescue for image-installer [ORABUG: 38587453] - Switch to UEKR8 repositories for OL9.6 [Orabug: 37962207] - Add support to create OpenScap images [JIRA: OLDIS-35301] - Simplify repository names [JIRA: OLDIS-35893] - Refactor patches to fix some naming and set a correct kernel for Oracle Linux [Orabug: 37253643] - Support using OCI variables inside built images [JIRA: OLDIS-35302] - Support using repository definitons with OCI variables [JIRA: OLDIS-38657] - Update repositories to contain OCI variables - Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123] - Increase default /boot size to 1GB [Orabug: 36827079] - Add support for OCI hybrid images [JIRA: OLDIS-33593] - enable aarch64 OCI image builds [JIRA: OLDIS-33593] - support for building OL8/9 images on Oracle Linux 9 [Orabug: 36400619] [149-4] - Rebuilt to fix: - CVE-2025-61726 - CVE-2025-61728 - CVE-2025-61729 - CVE-2025-68121 - RHEL-146868 - RHEL-147086 ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security issue patch important Oracle Linux osbuild-composer

SRPMs

http://oss.oracle.com/ol9/SRPMS-updates/osbuild-composer-149-4.0.1.el9_7.src.rpm

x86_64

osbuild-composer-149-4.0.1.el9_7.x86_64.rpm osbuild-composer-core-149-4.0.1.el9_7.x86_64.rpm osbuild-composer-worker-149-4.0.1.el9_7.x86_64.rpm

aarch64

osbuild-composer-149-4.0.1.el9_7.aarch64.rpm osbuild-composer-core-149-4.0.1.el9_7.aarch64.rpm osbuild-composer-worker-149-4.0.1.el9_7.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2025-61726 CVE-2025-61728 CVE-2025-61729 CVE-2025-68121

Topics%20covered

Topics Covered

security advisory security issue patch important Oracle Linux osbuild-composer

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.