ELSA-2026-3898

ELSA-2026-3898 - osbuild-composer security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-03-06

Description

[101.4-4.0.1]
- Support using repository definitons with OCI variables [JIRA: OLDIS-38657]
- Update repositories to contain OCI variables
- Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123]
- Increase default /boot size to 1GB [Orabug: 36827079]
- support for building OL8/9 images on Oracle Linux 8 [Orabug: 36400619]

[101.4-4]
- Rebuilt to fix:
- CVE-2025-61726
- CVE-2025-68121
- RHEL-146097
- RHEL-149273

Related CVEs

CVE-2025-61726

CVE-2025-68121

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	osbuild-composer-101.4-4.0.1.el8_10.src.rpm	44aa074182a765e48584eecfe1b07a3c87448f2a690ffeed82dfbdf0f96aab77	-	ol8_aarch64_appstream
	osbuild-composer-101.4-4.0.1.el8_10.aarch64.rpm	2672ae264716bd4cd246a74ed0d6fb1b764192a9f4af8b0d0aa46cd554348746	-	ol8_aarch64_appstream
	osbuild-composer-core-101.4-4.0.1.el8_10.aarch64.rpm	e9d839b68c82fc5c5b2b2d7e3c6346d7a1aade09c61d52d9c85573b3c73cbdb8	-	ol8_aarch64_appstream
	osbuild-composer-worker-101.4-4.0.1.el8_10.aarch64.rpm	023f69ea98b96782c22f444777523a563caf29cb19c5e9d676bb28e7e20f600d	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	osbuild-composer-101.4-4.0.1.el8_10.src.rpm	44aa074182a765e48584eecfe1b07a3c87448f2a690ffeed82dfbdf0f96aab77	-	ol8_x86_64_appstream
	osbuild-composer-101.4-4.0.1.el8_10.x86_64.rpm	59ba31f43ccff974403240206f31c1bf996d59da2820e453e4ba92676825de39	-	ol8_x86_64_appstream
	osbuild-composer-core-101.4-4.0.1.el8_10.x86_64.rpm	46f27aef035a3e56c5a66c5b7b6b7f7c767c2a803fdbc923c9984616d605d79f	-	ol8_x86_64_appstream
	osbuild-composer-worker-101.4-4.0.1.el8_10.x86_64.rpm	a804694247a98ba69dacc765fb9e99b9e9685912982c66327b45eff15d0d0453	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team