Red Hat Security Advisory: osbuild and osbuild-composer security update

02 / AFFECTED SOFTWARE

Affected packages

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

05 / REFERENCES

Further evidence

• https://access.redhat.com/errata/RHSA-2025:7118
• https://access.redhat.com/security/cve/CVE-2024-1394
• https://access.redhat.com/security/cve/CVE-2024-34158
• https://access.redhat.com/security/cve/CVE-2024-9355
• https://access.redhat.com/security/updates/classification/#important
• https://bugzilla.redhat.com/show_bug.cgi?id=2262921
• https://bugzilla.redhat.com/show_bug.cgi?id=2310529
• https://bugzilla.redhat.com/show_bug.cgi?id=2315719
• https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.6_release_notes/index
• https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136
• https://github.com/golang-fips/openssl/pull/198
• https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6
• https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f
• https://go.dev/cl/611240
• https://go.dev/issue/69141
• https://groups.google.com/g/golang-dev/c/S9POB9NCTdk
• https://issues.redhat.com/browse/RHEL-16396
• https://issues.redhat.com/browse/RHEL-4570
• https://issues.redhat.com/browse/RHEL-4617
• https://issues.redhat.com/browse/RHEL-4636
• https://issues.redhat.com/browse/RHEL-56049
• https://issues.redhat.com/browse/RHEL-78659
• https://nvd.nist.gov/vuln/detail/CVE-2024-1394
• https://nvd.nist.gov/vuln/detail/CVE-2024-34158
• https://nvd.nist.gov/vuln/detail/CVE-2024-9355
• https://pkg.go.dev/vuln/GO-2024-2660
• https://pkg.go.dev/vuln/GO-2024-3107
• https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7118.json
• https://vuln.go.dev/ID/GO-2024-2660.json
• https://www.cve.org/CVERecord?id=CVE-2024-1394
• https://www.cve.org/CVERecord?id=CVE-2024-34158
• https://www.cve.org/CVERecord?id=CVE-2024-9355