RHSA-2026:1837

csafDEsuse_csaf

security update for osbuild-composer

view advisory published 2026-02-03

security update for osbuild-composer

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-58183US——
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse…
02

references

External citations — patches, advisories, analysis.

03

remediations (3)

  • Fixedosbuild-composer-0:149-4.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedosbuild-composer-core-0:149-4.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedosbuild-composer-worker-0:149-4.el10_1.x86_64 as component of SUSE Liberty Linux 10

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan