ELSA-2026-1380

ELSA-2026-1380 - osbuild-composer security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-01-28

Description

[101.4-2.0.1]
- Support using repository definitons with OCI variables [JIRA: OLDIS-38657]
- Update repositories to contain OCI variables
- Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123]
- Increase default /boot size to 1GB [Orabug: 36827079]
- support for building OL8/9 images on Oracle Linux 8 [Orabug: 36400619]

[101.4-2]
- Rebuilt to fix:
- CVE-2025-58183
- RHEL-125669

Related CVEs

CVE-2025-58183

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	osbuild-composer-101.4-2.0.1.el8_10.src.rpm	4a0d40251559e226cf643ced94ab64ae7af73fdffd5059df4a592696f4f995b0	-	ol8_aarch64_appstream
	osbuild-composer-101.4-2.0.1.el8_10.aarch64.rpm	ddbad5930b0f7ecbd1c05821841df6716351d853dd9be727e42d7b5ea99ecbda	-	ol8_aarch64_appstream
	osbuild-composer-core-101.4-2.0.1.el8_10.aarch64.rpm	121e955178c5319d86cfab7e402040e4586e1b242cc764614490302cf7523ab2	-	ol8_aarch64_appstream
	osbuild-composer-worker-101.4-2.0.1.el8_10.aarch64.rpm	170703ec165afd5270d8cd387a030ede9cd1bae6d1f03035d0572775d55bf37d	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	osbuild-composer-101.4-2.0.1.el8_10.src.rpm	4a0d40251559e226cf643ced94ab64ae7af73fdffd5059df4a592696f4f995b0	-	ol8_x86_64_appstream
	osbuild-composer-101.4-2.0.1.el8_10.x86_64.rpm	c9f26e9b7f04beaf93ccf5b4452a8a5b7dabc60269c0a3f107f14c6bfdf404c1	-	ol8_x86_64_appstream
	osbuild-composer-core-101.4-2.0.1.el8_10.x86_64.rpm	b235ae2126f6a66ce1ae1ae68f10f649675925a98456083c809b1fda0805b88c	-	ol8_x86_64_appstream
	osbuild-composer-worker-101.4-2.0.1.el8_10.x86_64.rpm	906e83c15c2b0f3c949ad0c4bb55c69785cb8ca2704c8a526fb5530797eb624e	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team