ELSA-2025-19594

ELSA-2025-19594 - osbuild-composer security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2025-11-05

Description

[132.2-3.0.1]
- Switch to UEKR8 repositories for OL9.6 [Orabug: 37962207]
- Add support to create OpenScap images [JIRA: OLDIS-35301]
- Simplify repository names [JIRA: OLDIS-35893]
- Refactor patches to fix some naming and set a correct kernel for Oracle Linux [Orabug: 37253643]
- Support using OCI variables inside built images [JIRA: OLDIS-35302]
- Support using repository definitons with OCI variables [JIRA: OLDIS-38657]
- Update repositories to contain OCI variables
- Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123]
- Increase default /boot size to 1GB [Orabug: 36827079]
- Add support for OCI hybrid images [JIRA: OLDIS-33593]
- enable aarch64 OCI image builds [JIRA: OLDIS-33593]
- support for building OL8/9 images on Oracle Linux 9 [Orabug: 36400619]

[132.2-3]
- Fix json tailoring blueprint conversion
Resolves: RHEL-111314
- Fix unclosed logrus logging pipes
Resolves: RHEL-102832
- Update go-jose dependency
Resolves: RHEL-82968 (CVE-2025-27144)

Related CVEs

CVE-2025-27144

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	osbuild-composer-132.2-3.0.1.el9_6.src.rpm	9636d7c41538e5e4ed726ebcac5d07ce5fa63dad5fb1bcca73115aabcffd1d4c	-	ol9_aarch64_appstream
	osbuild-composer-132.2-3.0.1.el9_6.aarch64.rpm	216a908b73de3b04e50099830d7531bb19088f5ac6fa45fc64b27aa4e5dd90a0	-	ol9_aarch64_appstream
	osbuild-composer-core-132.2-3.0.1.el9_6.aarch64.rpm	8019c205eeb05705d5270c32091c43f327881477b6b9f8d145181e80640849f7	-	ol9_aarch64_appstream
	osbuild-composer-worker-132.2-3.0.1.el9_6.aarch64.rpm	d6697d758c5d0f80fbc0630a16d3f6bc86cf2b06ecc236e467255cd7a5f088d1	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	osbuild-composer-132.2-3.0.1.el9_6.src.rpm	9636d7c41538e5e4ed726ebcac5d07ce5fa63dad5fb1bcca73115aabcffd1d4c	-	ol9_x86_64_appstream
	osbuild-composer-132.2-3.0.1.el9_6.x86_64.rpm	d98dda86a3abf9ec9a6316dd4236abbdaca5da04086fb4681be6bacebfc6ecbc	-	ol9_x86_64_appstream
	osbuild-composer-core-132.2-3.0.1.el9_6.x86_64.rpm	1e2f7d4d61c442f96cf67247c9d95e753c102feb3e43d61bb2b8aa47317f0198	-	ol9_x86_64_appstream
	osbuild-composer-worker-132.2-3.0.1.el9_6.x86_64.rpm	f956c8e15a80ebd76fa3c5ef8df770bbf52a9a956b38650d35d3f4358683a824	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team