ELSA-2026-2124

ELSA-2026-2124 - osbuild-composer security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-02-06

Description

[101.4-3.0.1]
- Support using repository definitons with OCI variables [JIRA: OLDIS-38657]
- Update repositories to contain OCI variables
- Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123]
- Increase default /boot size to 1GB [Orabug: 36827079]
- support for building OL8/9 images on Oracle Linux 8 [Orabug: 36400619]

[101.4-3]
- Rebuilt to fix:
- CVE-2025-61729
- RHEL-140539

Related CVEs

CVE-2025-61729

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	osbuild-composer-101.4-3.0.1.el8_10.src.rpm	cb7daeb8e43cf6591b3099ebf5a89116d4f0c33d943c051dc71e3556333f37c3	-	ol8_aarch64_appstream
	osbuild-composer-101.4-3.0.1.el8_10.aarch64.rpm	9ff11968f496632d1eeb9f08e3d50057d7f6f4442d90ae90440b091cd580f776	-	ol8_aarch64_appstream
	osbuild-composer-core-101.4-3.0.1.el8_10.aarch64.rpm	e63a98ac7596dfeeeb8945594d320be27504caec9d491e44571a4463ed78fb56	-	ol8_aarch64_appstream
	osbuild-composer-worker-101.4-3.0.1.el8_10.aarch64.rpm	28a4ae4834bfa808d841335faeb639f38bd07e1e7f8605dfb5859b98171285c4	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	osbuild-composer-101.4-3.0.1.el8_10.src.rpm	cb7daeb8e43cf6591b3099ebf5a89116d4f0c33d943c051dc71e3556333f37c3	-	ol8_x86_64_appstream
	osbuild-composer-101.4-3.0.1.el8_10.x86_64.rpm	2f4c3327989a28537fc8a98603901b551acb3429da2d12f60495b20315895afe	-	ol8_x86_64_appstream
	osbuild-composer-core-101.4-3.0.1.el8_10.x86_64.rpm	86be76493bc860b0fba754f016ea4976627ef0c759bec4113655ac41ab4bd9d6	-	ol8_x86_64_appstream
	osbuild-composer-worker-101.4-3.0.1.el8_10.x86_64.rpm	8ae49a2373d50c2aaaaf78dcc53abded6a478cb61a1dc0fac497b0992ee15283	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team