Red Hat Security AdvisoryRHSA-2026:2687
osbuild-composer security update
Released 2026-02-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) osbuild-composer-46.3-5.el8_6, osbuild-composer-core-46.3-5.el8_6, osbuild-composer-dnf-json-46.3-5.el8_6 +1
- Red Hat Enterprise Linux AppStream E4S (v.8.6) osbuild-composer-46.3-5.el8_6, osbuild-composer-core-46.3-5.el8_6, osbuild-composer-dnf-json-46.3-5.el8_6 +1
- Red Hat Enterprise Linux AppStream TUS (v.8.6) osbuild-composer-46.3-5.el8_6, osbuild-composer-core-46.3-5.el8_6, osbuild-composer-dnf-json-46.3-5.el8_6 +1
Fixes 1 record
Priority LOW 34
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00675 · Published 2025-12-04 · Partial fix · 1.8.3, 1.9.1 +1 CWE-400