[ALSA-2026:9044] Important: osbuild-composer security update
Type:
security
Severity:
important
Release date:
2026-04-22
Description:
A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 osbuild-composer-149-5.el9_7.alma.3.aarch64.rpm 031f0a098425a9bf4a37edc03a2843da7b994b3e1d71847a3ab32f2b62b87a04
aarch64 osbuild-composer-core-149-5.el9_7.alma.3.aarch64.rpm 6f0f3a84e9d4e9b05b09de452d0de0971ea1d0698af56e45d43663d96800a631
aarch64 osbuild-composer-worker-149-5.el9_7.alma.3.aarch64.rpm 8f36ce2ac54d791f9ac62b87781e79fac523fb2dcd32e3c087100a9758c9eca8
ppc64le osbuild-composer-worker-149-5.el9_7.alma.3.ppc64le.rpm 1a33782e52efb0b363de07ec0522957a394023f2dc986ee08694030e104649b0
ppc64le osbuild-composer-149-5.el9_7.alma.3.ppc64le.rpm 9a74934f5d1c17e638cb51a0626d4b66dc4a885e854e3fa98c853c0750c37b25
ppc64le osbuild-composer-core-149-5.el9_7.alma.3.ppc64le.rpm cf6247274d5ce0cfec7672afd0dbb35d02b0a5c18519557456273c8498944cbf
s390x osbuild-composer-worker-149-5.el9_7.alma.3.s390x.rpm 5bcdcf38ce84047cedb9ec8eb4318ecf239c7faeaec9f1e64f995260e6865c09
s390x osbuild-composer-149-5.el9_7.alma.3.s390x.rpm 6c8ec499a6401a80897d7f6cf7bc00fdddba23550578cc1a65d9ca1b7e10af11
s390x osbuild-composer-core-149-5.el9_7.alma.3.s390x.rpm e55023037f7788adf9b874ea855c60ea087e76205ce3a088788bc0cf96305256
x86_64 osbuild-composer-149-5.el9_7.alma.3.x86_64.rpm 8225a315b90e53a1d079b866cee7b359491a834af6722f3d941c5aa1291888d1
x86_64 osbuild-composer-core-149-5.el9_7.alma.3.x86_64.rpm a9b359db5fcf161b318baf3bc17b5a14a66af47480b23643b3dda7f6e92c7b72
x86_64 osbuild-composer-worker-149-5.el9_7.alma.3.x86_64.rpm e2a89e4d6e65eb617229956407f9223444edf99fc7affa9c8199175099b3bae1
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.