Oracle 9 osbuild-composer Important Bug Fix Advisory ELSA-2026

Back Linuxsecurity

Oracle 9 osbuild-composer Important Bug Fix Advisory ELSA-2026

Linuxsecurity •LinuxSecurity Advisories • August 5, 2026

Share: View original

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

[175-1.0.1] - Track github upstream

[175-1.0.1] - Track github upstream

osbuild-composer-175-1.0.1.el9_8.x86_64.rpm osbuild-composer-core-175-1.0.1.el9_8.x86_64.rpm osbuild-composer-worker-175-1.0.1.el9_8.x86_64.rpm

osbuild-composer-175-1.0.1.el9_8.x86_64.rpm osbuild-composer-core-175-1.0.1.el9_8.x86_64.rpm osbuild-composer-worker-175-1.0.1.el9_8.x86_64.rpm

osbuild-composer-175-1.0.1.el9_8.aarch64.rpm osbuild-composer-core-175-1.0.1.el9_8.aarch64.rpm osbuild-composer-worker-175-1.0.1.el9_8.aarch64.rpm

osbuild-composer-175-1.0.1.el9_8.aarch64.rpm osbuild-composer-core-175-1.0.1.el9_8.aarch64.rpm osbuild-composer-worker-175-1.0.1.el9_8.aarch64.rpm

Related CVEs: CVE-2026-32280 CVE-2026-32281

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Oracle Linux 9 osbuild-composer Security Patch Released Oracle released an important security patch for osbuild-composer in Oracle Linux 9 on August 6, 2026, addressing multiple vulnerabilities. The patch resolves critical issues linked to CVEs including CVE-2025-61726, CVE-2025-68121, and CVE-2026-4427. These vulnerabilities could allow privilege escalation and system-wide damage if exploited. The affected packages include osbuild-composer and its core and worker components for both x86_64 and aarch64 architectures. Security professionals are advised to audit Linux privileges to mitigate risks. The patch is crucial for maintaining system integrity and preventing potential exploits. Users should apply the updates promptly to safeguard their systems. 4 sources 71

Extracted Entities

CVEs (2)

CVE-2026-32280 CVE-2026-32281

CWE Weaknesses (1)

CWE-269 - Improper Privilege Management

Platforms (1)