Description
Duplicate of CVE-2026-32286
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | osbuild-composer +2 | 165.1-2.el10_2 | RHSA-2026:22450 |
| RHEL 9 | osbuild-composer +2 | 165.1-2.el9_8 | RHSA-2026:22714 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | osbuild-composer | 165.1-2.el10_2.rocky.0.1 | RLSA-2026:22450 |
| Rocky Linux 9 | osbuild-composer | 165.1-2.el9_8.rocky.0.1 | RLSA-2026:22714 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | alloy | 1.16.1-150700.15.20.1 | SUSE-SU-2026:2438-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | alloy | 1.16.0-2.1 | openSUSE-SU-2026:10669-1 |
| openSUSE Tumbleweed | teleport | 17.7.23-1.1 | openSUSE-SU-2026:10684-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | osbuild-composer +2 | 176-1.0.1.el10_2 | ELSA-2026-22450 |
| Oracle Linux 9 | osbuild-composer +2 | 175-1.0.1.el9_8 | ELSA-2026-22714 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | bento | 1.16.1-r1 | — |
| Wolfi rolling | flyte | 1.16.4-r3 | — |
| Wolfi rolling | grafana-alloy | 1.15.0-r0 | — |
| Wolfi rolling | harbor-2.14 +3 | 2.14.3-r4 | — |
| Wolfi rolling | hydra | 26.2.0-r0 | — |
| Wolfi rolling | kots | 1.129.4-r5 | — |
| Wolfi rolling | migrate | 4.19.1-r8 | — |
| Wolfi rolling | splunk-otel-collector | 0.148.0-r0 | — |
| Wolfi rolling | src | 7.0.2-r0 | — |
| Wolfi rolling | steampipe | 2.4.0-r4 | — |
| Wolfi rolling | telegraf-1.38 | 1.38.1-r2 | — |
| Wolfi rolling | teleport-18.6 +1 | 18.6.8-r8 | — |
| Wolfi rolling | trillian-logserver +1 | 1.7.3-r0 | — |
Advisories 9
- RHSA-2026:22450 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:22714 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- ELSA-2026-22450 Important: osbuild-composer security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Aug 13, 2026
- ELSA-2026-22714 Important: osbuild-composer security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Aug 5, 2026
- SUSE-SU-2026:2438-1 Security update for alloy SUSE / openSUSE Security Updates · Jun 18, 2026
- RLSA-2026:22714 Important: osbuild-composer security update Rocky Linux Security Advisories · Jun 11, 2026
- RLSA-2026:22450 Important: osbuild-composer security update Rocky Linux Security Advisories · Jun 5, 2026
- openSUSE-SU-2026:10684-1 teleport-17.7.23-1.1 on GA media SUSE / openSUSE Security Updates · May 5, 2026
- openSUSE-SU-2026:10669-1 alloy-1.16.0-2.1 on GA media SUSE / openSUSE Security Updates · May 5, 2026