ELSA-2025-7118

ELSA-2025-7118 - osbuild and osbuild-composer security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-05-16

Description

osbuild
[141-1.0.1]
- Add runner for ol8 and ol9 [Orabug: 36400619]

[141-1]
- New upstream release

[140-1]
- New upstream release

[139-1]
- New upstream release

[138-1]
- New upstream release

[137-1]
- New upstream release

[136-1]
- New upstream release

[135-1]
- New upstream release

[132-1]
- New upstream release

[131-1]
- New upstream release

[130-1]
- New upstream release

osbuild-composer
[132-1.0.1]
- Add support to create OpenScap images [JIRA: OLDIS-35301]
- Simplify repository names [JIRA: OLDIS-35893]
- Refactor patches to fix some naming and set a correct kernel for Oracle Linux [Orabug: 37253643]
- Support using OCI variables inside built images [JIRA: OLDIS-35302]
- Support using repository definitons with OCI variables [JIRA: OLDIS-38657]
- Update repositories to contain OCI variables
- Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123]
- Increase default /boot size to 1GB [Orabug: 36827079]
- Add support for OCI hybrid images [JIRA: OLDIS-33593]
- enable aarch64 OCI image builds [JIRA: OLDIS-33593]
- support for building OL8/9 images on Oracle Linux 9 [Orabug: 36400619]

[132-1]
- New upstream release

[131-1]
- New upstream release

[128-1]
- New upstream release

[127-1]
- New upstream release

[126-1]
- New upstream release

[125-1]
- New upstream release

[124-1]
- New upstream release

[123-1]
- New upstream release

[122-1]
- New upstream release

[121-1]
- New upstream release

[118-1]
- New upstream release

[117-1]
- New upstream release

[116-1]
- New upstream release

[115-1]
- New upstream release

[114-1]
- New upstream release

[113-1]
- New upstream release

[110-1]
- New upstream release

[109-1]
- New upstream release

[108-1]
- New upstream release

[104-1]
- New upstream release

[102-1]
- New upstream release

[101-1]
- New upstream release

[100-1]
- New upstream release

[99-1]
- New upstream release

[98-1]
- New upstream release

[96-1]
- New upstream release

[95-1]
- New upstream release

[94-1]
- New upstream release

[93-1]
- New upstream release

[92-1]
- New upstream release

[91-1]
- New upstream release

[89-1]
- New upstream release

[88-1]
- New upstream release

[87-1]
- New upstream release

[86-1]
- New upstream release

[85-1]
- New upstream release

[84-1]
- New upstream release

[82-1]
- New upstream release

[80-1]
- New upstream release

[79-1]
- New upstream release

[77-1]
- New upstream release

Related CVEs

CVE-2024-9355

CVE-2024-1394

CVE-2024-34158

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	osbuild-141-1.0.1.el9.src.rpm	c3241d79cd90f9144fd96ef21e0f31e3fef01da493d869f3ae618b83b1c04131	-	ol9_aarch64_appstream
	osbuild-composer-132-1.0.2.el9.src.rpm	ca99202cc3f3b00e09807301b178cf5c89a471a044f1f7b38e4b973f3da58a63	-	ol9_aarch64_appstream
	osbuild-141-1.0.1.el9.noarch.rpm	a8faafd5f50ee0ceb046245bc514f3c9878597f0ab0f70e6d3174b0bf3d31e85	-	ol9_aarch64_appstream
	osbuild-composer-132-1.0.2.el9.aarch64.rpm	33da5df388c7bb18892d543cd1c0fad4b407c9f910d722a69f649c61008d0fb7	-	ol9_aarch64_appstream
	osbuild-composer-core-132-1.0.2.el9.aarch64.rpm	35b700988a4db16d92931ba0425b9aa8065c7c4ffab91755835c860830fe87aa	-	ol9_aarch64_appstream
	osbuild-composer-worker-132-1.0.2.el9.aarch64.rpm	9d5139d37301f55e96e62f1ac0c490bc93f262af164b5210e22683019e76b365	-	ol9_aarch64_appstream
	osbuild-depsolve-dnf-141-1.0.1.el9.noarch.rpm	ad865f43801d0b36fe3ec725f9edd3e764acd2883352a38ca85f01f312802675	-	ol9_aarch64_appstream
	osbuild-luks2-141-1.0.1.el9.noarch.rpm	1899ae6716c49c6fa9e95d364d9d8b23e8ca82849f20447b70b460e3f5b6d0e7	-	ol9_aarch64_appstream
	osbuild-lvm2-141-1.0.1.el9.noarch.rpm	ec6e2ed6df8289e328d87614c4083747c83f5857b47f5eef3d079b65a8638e66	-	ol9_aarch64_appstream
	osbuild-ostree-141-1.0.1.el9.noarch.rpm	8c4d68ff75da414f9c593c348f9ecdcfbc45589407355014c5ee07a2797f3320	-	ol9_aarch64_appstream
	osbuild-selinux-141-1.0.1.el9.noarch.rpm	dfef81fab4ebf953dd44254fcba23661e1af84f4be18d9f9615e405c56739061	-	ol9_aarch64_appstream
	python3-osbuild-141-1.0.1.el9.noarch.rpm	7c3644c2b12a21e5d55095c887ac8be6f91ce75468573094b6911abc3323366d	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	osbuild-141-1.0.1.el9.src.rpm	c3241d79cd90f9144fd96ef21e0f31e3fef01da493d869f3ae618b83b1c04131	-	ol9_x86_64_appstream
	osbuild-composer-132-1.0.2.el9.src.rpm	ca99202cc3f3b00e09807301b178cf5c89a471a044f1f7b38e4b973f3da58a63	-	ol9_x86_64_appstream
	osbuild-141-1.0.1.el9.noarch.rpm	a8faafd5f50ee0ceb046245bc514f3c9878597f0ab0f70e6d3174b0bf3d31e85	-	ol9_x86_64_appstream
	osbuild-composer-132-1.0.2.el9.x86_64.rpm	78ba2a135fdd8aaba436de407a7b7af6b2ec18d157c7ba64fb61718a4f446040	-	ol9_x86_64_appstream
	osbuild-composer-core-132-1.0.2.el9.x86_64.rpm	79c56e8aa9b8a371afb894d52813a2bbdb9b911dd993317cd282a1897613fcad	-	ol9_x86_64_appstream
	osbuild-composer-worker-132-1.0.2.el9.x86_64.rpm	825bc92a21d4ad72d4d876308f31090a1f53a6cfbb627ccfe2123d5d3c181309	-	ol9_x86_64_appstream
	osbuild-depsolve-dnf-141-1.0.1.el9.noarch.rpm	ad865f43801d0b36fe3ec725f9edd3e764acd2883352a38ca85f01f312802675	-	ol9_x86_64_appstream
	osbuild-luks2-141-1.0.1.el9.noarch.rpm	1899ae6716c49c6fa9e95d364d9d8b23e8ca82849f20447b70b460e3f5b6d0e7	-	ol9_x86_64_appstream
	osbuild-lvm2-141-1.0.1.el9.noarch.rpm	ec6e2ed6df8289e328d87614c4083747c83f5857b47f5eef3d079b65a8638e66	-	ol9_x86_64_appstream
	osbuild-ostree-141-1.0.1.el9.noarch.rpm	8c4d68ff75da414f9c593c348f9ecdcfbc45589407355014c5ee07a2797f3320	-	ol9_x86_64_appstream
	osbuild-selinux-141-1.0.1.el9.noarch.rpm	dfef81fab4ebf953dd44254fcba23661e1af84f4be18d9f9615e405c56739061	-	ol9_x86_64_appstream
	python3-osbuild-141-1.0.1.el9.noarch.rpm	7c3644c2b12a21e5d55095c887ac8be6f91ce75468573094b6911abc3323366d	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team