Back Linuxsecurity

Oracle Linux 8 osbuild-composer Important Security Advisory ELSA-2026

Linuxsecurity •LinuxSecurity Advisories • September 14, 2026

Artifactory Alert: Chained flaws let attackers gain admin control. Check your version now ×

[101.5-1.0.1] - Bump to 101.5-1.0.1 - CVE-2026-32280 - CVE-2026-32282 - CVE-2026-32283 - CVE-2026-33186 - CVE-2026-34986

osbuild-composer-101.5-1.0.1.el8_10.x86_64.rpm osbuild-composer-core-101.5-1.0.1.el8_10.x86_64.rpm osbuild-composer-worker-101.5-1.0.1.el8_10.x86_64.rpm

osbuild-composer-101.5-1.0.1.el8_10.aarch64.rpm osbuild-composer-core-101.5-1.0.1.el8_10.aarch64.rpm osbuild-composer-worker-101.5-1.0.1.el8_10.aarch64.rpm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Oracle Linux Security Updates Address Critical Vulnerabilities Oracle has released multiple security updates for its Linux distributions, addressing several critical vulnerabilities. Key updates include patches for CVE-2026-59090 and CVE-2026-18301 in GIMP, and multiple CVEs in FreeRDP, libssh, and Grafana. Affected systems include Oracle Linux 8, 9, and 10, with vulnerabilities allowing for potential remote code execution and privilege escalation. The updates also resolve issues related to file handling and email verification in Grafana. Administrators are urged to apply these patches promptly to mitigate risks. The updates were published on September 3, 2026, and are part of ongoing efforts to maintain system security. Specific CVEs include CVE-2026-55194, CVE-2026-67288, and CVE-2026-18300, among others. 65 sources 46

Extracted Entities

CVEs (5)

CVE-2026-32280 CVE-2026-32282 CVE-2026-32283 CVE-2026-33186 CVE-2026-34986

Platforms (1)

Oracle Linux