Description:
A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood.
Security Fix(es):
* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
| Architecture |
Package |
Checksum |
| aarch64 |
image-builder-31-4.el9_7.aarch64.rpm |
db5ec64132e4d14f3b43b71c410b38915b60571b818f05250f4de87033eed8d3 |
| ppc64le |
image-builder-31-4.el9_7.ppc64le.rpm |
cc6c3a760ae6874d09c009caafdb5865c772a7337e79e45416b8f0711be0eeee |
| s390x |
image-builder-31-4.el9_7.s390x.rpm |
cd1b547e7ad7a069339fdd39d87a6e70f31a2afcd02bab79f7b5772f524605a9 |
| x86_64 |
image-builder-31-4.el9_7.x86_64.rpm |
bcbe5267ca64ab4853d519382408b373df40e93383b6b7c222f73092b86891a8 |