ELSA-2026-8456

ELSA-2026-8456 - osbuild-composer security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-04-21

Description

[101.4-5.0.1]
- Support using repository definitons with OCI variables [JIRA: OLDIS-38657]
- Update repositories to contain OCI variables
- Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123]
- Increase default /boot size to 1GB [Orabug: 36827079]
- support for building OL8/9 images on Oracle Linux 8 [Orabug: 36400619]

[101.4-5]
- Rebuilt to fix:
- CVE-2026-25679
- CVE-2026-27137

Related CVEs

CVE-2026-25679

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	osbuild-composer-101.4-5.0.1.el8_10.src.rpm	7547b37a8f0fef78dc1a3708c1f267cd9e4659ceab68b4b090ac15b65fbd57db	-	ol8_aarch64_appstream
	osbuild-composer-101.4-5.0.1.el8_10.aarch64.rpm	7a78ebdf1a0508ef6fb7ad8642c12935a8a50f93993cf47a73863f551acb9081	-	ol8_aarch64_appstream
	osbuild-composer-core-101.4-5.0.1.el8_10.aarch64.rpm	a0e032f7c1d9e42dd2052ae90571c45aa2f8a6e2e5f19270ef1a8195b7125fa2	-	ol8_aarch64_appstream
	osbuild-composer-worker-101.4-5.0.1.el8_10.aarch64.rpm	11e21e6d7d9ac712de364380e8b6d2a9b9edd2f033c2a3b6128e601fa4c1bde4	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	osbuild-composer-101.4-5.0.1.el8_10.src.rpm	7547b37a8f0fef78dc1a3708c1f267cd9e4659ceab68b4b090ac15b65fbd57db	-	ol8_x86_64_appstream
	osbuild-composer-101.4-5.0.1.el8_10.x86_64.rpm	0fe10ef49d04e36b60d7757c51268feb80690a17ee156af2677f5fad3041ba54	-	ol8_x86_64_appstream
	osbuild-composer-core-101.4-5.0.1.el8_10.x86_64.rpm	3fdec29ed2203c6ce248129a728b180c6e6d7c7dcabfedb601d461143a54eb97	-	ol8_x86_64_appstream
	osbuild-composer-worker-101.4-5.0.1.el8_10.x86_64.rpm	96a03e8bc8ccf4f4e246a55a7cfc76cb998b2c39cb3867be95bb449ac1ca7bb8	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team