[ALSA-2026:8456] Important: osbuild-composer security update
Type:
security
Severity:
important
Release date:
2026-04-24
Description:
A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 osbuild-composer-101.4-5.el8_10.alma.1.aarch64.rpm 2776b021a049e809527584c25d3a6f8c1a8484c023e8de1a5308d6a27cfc279a
aarch64 osbuild-composer-worker-101.4-5.el8_10.alma.1.aarch64.rpm b1f828bfb46b1df03a7da6ccabc82c68aef12adbde14d6c6ba07037221c8d6d7
aarch64 osbuild-composer-core-101.4-5.el8_10.alma.1.aarch64.rpm d60fb8833c6f33d1230958e3b224a7b764de71ca62963a35ebea32ad6e5ee74d
ppc64le osbuild-composer-worker-101.4-5.el8_10.alma.1.ppc64le.rpm 0e31a4d3d5379af53c49e7b5ddca07ef476400cc1dcdce0b07d8bb74ad9cf98b
ppc64le osbuild-composer-101.4-5.el8_10.alma.1.ppc64le.rpm aff636a4e11520571af81e77f9fed780314ae944ffbf219024aa5208e7563bf1
ppc64le osbuild-composer-core-101.4-5.el8_10.alma.1.ppc64le.rpm dfd62f7b6ef28779c35bbeaf0c72d0b419a221711ac7f71799e12a4f05daa4dc
s390x osbuild-composer-core-101.4-5.el8_10.alma.1.s390x.rpm 4f7d8bad5b66d5d712635b172b54e1021acd08c30ccc39da96443663645bcf64
s390x osbuild-composer-worker-101.4-5.el8_10.alma.1.s390x.rpm 69f2a6b09c54fa1e4f696d2eb1ef06d8a58c69da4f52658b3d6b653f1de9ca87
s390x osbuild-composer-101.4-5.el8_10.alma.1.s390x.rpm f089c1552cf8bab0dc83e84801d4b243753dfa362ab7c1cbfb916bcdc2b23d60
x86_64 osbuild-composer-core-101.4-5.el8_10.alma.1.x86_64.rpm 54d161b8ec4c132c0bfaf9486e351394309f387c2203981644822504e588f823
x86_64 osbuild-composer-worker-101.4-5.el8_10.alma.1.x86_64.rpm 85104bd09a8112c369fb7c1cc986e1c53fea921731634bc1986d1faa5fc0bae8
x86_64 osbuild-composer-101.4-5.el8_10.alma.1.x86_64.rpm e594009e24bfc5c62c16d19222d832ef337c107d623281e363d3bf673a522465
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.