Oracle Linux 9 ELSA-2026-9044 osbuild-composer Important CVE-2026-25679
oracle
April 22, 2026
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Summary
[149-5.0.1] - Add missing dependency over dracut-config-rescue for image-installer [ORABUG: 38587453] - Switch to UEKR8 repositories for OL9.6 [Orabug: 37962207] - Add support to create OpenScap images [JIRA: OLDIS-35301] - Simplify repository names [JIRA: OLDIS-35893] - Refactor patches to fix some naming and set a correct kernel for Oracle Linux [Orabug: 37253643] - Support using OCI variables inside built images [JIRA: OLDIS-35302] - Support using repository definitons with OCI variables [JIRA: OLDIS-38657] - Update repositories to contain OCI variables - Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123] - Increase default /boot size to 1GB [Orabug: 36827079] - Add support for OCI hybrid images [JIRA: OLDIS-33593] - enable aarch64 OCI image builds [JIRA: OLDIS-33593] - support for building OL8/9 images on Oracle Linux 9 [Orabug: 36400619] [149-5] - Rebuilt to fix: - CVE-2026-25679 - CVE-2026-27137 - RHEL-158741 - RHEL-158860
Topics Covered
SRPMs
http://oss.oracle.com/ol9/SRPMS-updates/osbuild-composer-149-5.0.1.el9_7.src.rpm
x86_64
osbuild-composer-149-5.0.1.el9_7.x86_64.rpm osbuild-composer-core-149-5.0.1.el9_7.x86_64.rpm osbuild-composer-worker-149-5.0.1.el9_7.x86_64.rpm
aarch64
osbuild-composer-149-5.0.1.el9_7.aarch64.rpm osbuild-composer-core-149-5.0.1.el9_7.aarch64.rpm osbuild-composer-worker-149-5.0.1.el9_7.aarch64.rpm
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Related CVEs:
CVE-2026-25679
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!