Summary
osbuild
[110-1]
- New upstream release
[109-1]
- New upstream release
[106-1]
- New upstream release
[105-1]
- New upstream release
[104-2]
- Fix unit tests in RHEL CI by backporting upstream fixes
[104-1]
- New upstream release
[101-1]
- New upstream release
[100-2]
- Change unit-test timeout from 3h to 4h
[100-1]
- New upstream release
[96-1]
- New upstream release
[95-1]
- New upstream release
[94-1]
- New upstream release
osbuild-composer
[101-1]
- New upstream release
[100-1]
- New upstream release
[99-1]
- New upstream release
[98-1]
- New upstream release
[96-1]
- New upstream release
[95-1]
- New upstream release
[94-1]
- New upstream release
[93-1]
- New upstream release
[92-1]
- New upstream release
[91-1]
- New upstream release
[90-1]
- New upstream release
[89-1]
- New upstream release
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | osbuild | 0:110-1.0.1.el8 |
| Oracle Linux · 8 | osbuild-composer | 0:101-1.el8 |
| Oracle Linux · 8 | osbuild-composer-core | 0:101-1.el8 |
| Oracle Linux · 8 | osbuild-composer-worker | 0:101-1.el8 |
| Oracle Linux · 8 | osbuild-depsolve-dnf | 0:110-1.0.1.el8 |
| Oracle Linux · 8 | osbuild-luks2 | 0:110-1.0.1.el8 |
| Oracle Linux · 8 | osbuild-lvm2 | 0:110-1.0.1.el8 |
| Oracle Linux · 8 | osbuild-ostree | 0:110-1.0.1.el8 |
| Oracle Linux · 8 | osbuild-selinux | 0:110-1.0.1.el8 |
| Oracle Linux · 8 | python3-osbuild | 0:110-1.0.1.el8 |
Vulnerabilities 1
-
Medium 6.1
Osbuild-composer: race condition may disable gpg verification for package repositories
A flaw was found in osbuild-composer. A condition can be triggered that disables GPG verification for package repositories, which can expose the build phase to a Man-in-the-Middle attack, allowing untrusted code to be installed into an image being built.