osbuild-composer-149-5.el9_7.ML.1

エラータID: AXSA:2026-493:06

Release date: 
Friday, April 24, 2026 - 16:54
Subject: 
osbuild-composer-149-5.el9_7.ML.1
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.

Security Fix(es):

* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2026-25679
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

Solution: 

Update packages.

CVEs: 
CVE-2026-25679
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
Additional Info: 

N/A

Download: 

SRPMS
  1. osbuild-composer-149-5.el9_7.ML.1.src.rpm
    MD5: 4cd3b8c5d939ce252329b070a3e5b669
    SHA-256: 0f9c741167b9f246cec7d995cd372bdb4f7eea030e99bca97b9138f9146127f0
    Size: 22.79 MB

Asianux Server 9 for x86_64
  1. osbuild-composer-149-5.el9_7.ML.1.x86_64.rpm
    MD5: cb9d25d160ab26d117b39c4feb0d315e
    SHA-256: 8b1f1e8ef7aa1072e0193bcff8716c1d9f0e3ee9d9a7d5bbfe0c1ac66b9e871d
    Size: 21.69 kB
  2. osbuild-composer-core-149-5.el9_7.ML.1.x86_64.rpm
    MD5: 14b5a85796044031a3705543ae629f98
    SHA-256: 3c91298fcf840496df9d2f89d5d4279b4b9a16b96e546df8dbf3cc5191d8ee26
    Size: 14.87 MB
  3. osbuild-composer-worker-149-5.el9_7.ML.1.x86_64.rpm
    MD5: 58df598a078d2078fac657c5aa80fbdf
    SHA-256: bb0acc56cc68dc0de018c11ba068d257eec8eea391857a8e9cfecc0a70709b5b
    Size: 24.73 MB