# CVE-2024-9355: osbuild-composer: A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood

CVE-2024-9355 is fixed in 23 products on 1 platform, first by RHSA-2024:7502, released October 2, 2024. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2024-9355
- Priority: High
- CVSS: 8.2 (Important)
- EPSS: 0.0030
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 2, 2024

## Description

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud.  It is compatible with composer-cli and cockpit-composer clients.  Security Fix(es):  * golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355)  * golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect (CVE-2024-45336)  * net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)  * golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)  * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)  * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)  * net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)  * html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)  * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)  * encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | delve RHEL 8 | 0:1.21.2-4.module+el8.10.0+22329+6cd5c9c6 | [RHSA-2024:7502](https://patchblox.com/security/data/fix/linux/rhsa-2024-7502.md) | Oct 2, 2024 |
| Linux | delve almalinux 8 | 1.21.2-4.module_el8.10.0+3895+92d465e0 | [ALSA-2024:7502](https://patchblox.com/security/data/fix/linux/alsa-2024-7502.md) | Oct 2, 2024 |
| Linux | delve ol 8 | 0:1.21.2-4.0.1.module+el8.10.0+90414+fc21c2ff | [ELSA-2024-7502](https://patchblox.com/security/data/fix/linux/elsa-2024-7502.md) | Oct 2, 2024 |
| Linux | delve rocky 8 | 0:1.21.2-4.module+el8.10.0+1868+7f5969f2 | [RLSA-2024:7502](https://patchblox.com/security/data/fix/linux/rlsa-2024-7502.md) | Oct 25, 2024 |
| Linux | git-lfs RHEL 9 | 0:3.6.1-1.el9 | [RHSA-2025:7256](https://patchblox.com/security/data/fix/linux/rhsa-2025-7256.md) | May 13, 2025 |
| Linux | git-lfs almalinux 9 | 3.6.1-1.el9 | [ALSA-2025:7256](https://patchblox.com/security/data/fix/linux/alsa-2025-7256.md) | May 13, 2025 |
| Linux | git-lfs ol 9 | 0:3.6.1-1.el9 | [ELSA-2025-7256](https://patchblox.com/security/data/fix/linux/elsa-2025-7256.md) | May 16, 2025 |
| Linux | git-lfs rocky 9 | 0:3.6.1-1.el9 | [RLSA-2025:7256](https://patchblox.com/security/data/fix/linux/rlsa-2025-7256.md) | Oct 4, 2025 |
| Linux | go-toolset RHEL 8 | 0:1.21.13-1.module+el8.10.0+22329+6cd5c9c6 | [RHSA-2024:7502](https://patchblox.com/security/data/fix/linux/rhsa-2024-7502.md) | Oct 2, 2024 |
| Linux | go-toolset RHEL 9 | 0:1.21.13-4.el9_4 | [RHSA-2024:7550](https://patchblox.com/security/data/fix/linux/rhsa-2024-7550.md) | Oct 2, 2024 |
| Linux | go-toolset almalinux 8 | 1.21.13-1.module_el8.10.0+3895+92d465e0 | [ALSA-2024:7502](https://patchblox.com/security/data/fix/linux/alsa-2024-7502.md) | Oct 2, 2024 |
| Linux | go-toolset almalinux 9 | 1.21.13-4.el9_4 | [ALSA-2024:7550](https://patchblox.com/security/data/fix/linux/alsa-2024-7550.md) | Oct 2, 2024 |
| Linux | go-toolset ol 8 | 0:1.21.13-1.module+el8.10.0+90414+fc21c2ff | [ELSA-2024-7502](https://patchblox.com/security/data/fix/linux/elsa-2024-7502.md) | Oct 2, 2024 |
| Linux | go-toolset ol 9 | 0:1.21.13-4.el9_4 | [ELSA-2024-7550](https://patchblox.com/security/data/fix/linux/elsa-2024-7550.md) | Oct 2, 2024 |
| Linux | go-toolset rocky 8 | 0:1.21.13-1.module+el8.10.0+1868+7f5969f2 | [RLSA-2024:7502](https://patchblox.com/security/data/fix/linux/rlsa-2024-7502.md) | Oct 25, 2024 |
| Linux | golang RHEL 8 | 0:1.21.13-3.module+el8.10.0+22345+acdd8d0e | [RHSA-2024:7502](https://patchblox.com/security/data/fix/linux/rhsa-2024-7502.md) | Oct 2, 2024 |
| Linux | golang RHEL 9 | 0:1.21.13-4.el9_4 | [RHSA-2024:7550](https://patchblox.com/security/data/fix/linux/rhsa-2024-7550.md) | Oct 2, 2024 |
| Linux | golang almalinux 8 | 1.21.13-3.module_el8.10.0+3900+bb1e1982 | [ALSA-2024:7502](https://patchblox.com/security/data/fix/linux/alsa-2024-7502.md) | Oct 2, 2024 |
| Linux | golang almalinux 9 | 1.21.13-4.el9_4 | [ALSA-2024:7550](https://patchblox.com/security/data/fix/linux/alsa-2024-7550.md) | Oct 2, 2024 |
| Linux | golang ol 8 | 0:1.21.13-3.module+el8.10.0+90414+fc21c2ff | [ELSA-2024-7502](https://patchblox.com/security/data/fix/linux/elsa-2024-7502.md) | Oct 2, 2024 |
| Linux | golang ol 9 | 0:1.21.13-4.el9_4 | [ELSA-2024-7550](https://patchblox.com/security/data/fix/linux/elsa-2024-7550.md) | Oct 2, 2024 |
| Linux | golang rocky 8 | 0:1.21.13-3.module+el8.10.0+1873+81c21cb9 | [RLSA-2024:7502](https://patchblox.com/security/data/fix/linux/rlsa-2024-7502.md) | Oct 25, 2024 |
| Linux | golang rocky 9 | 0:1.21.13-4.el9_4 | [RLSA-2024:7550](https://patchblox.com/security/data/fix/linux/rlsa-2024-7550.md) | Oct 25, 2024 |
| Linux | golang-bin RHEL 8 | 0:1.21.13-3.module+el8.10.0+22345+acdd8d0e | [RHSA-2024:7502](https://patchblox.com/security/data/fix/linux/rhsa-2024-7502.md) | Oct 2, 2024 |
| Linux | golang-bin RHEL 9 | 0:1.21.13-4.el9_4 | [RHSA-2024:7550](https://patchblox.com/security/data/fix/linux/rhsa-2024-7550.md) | Oct 2, 2024 |
| Linux | golang-bin almalinux 8 | 1.21.13-3.module_el8.10.0+3900+bb1e1982 | [ALSA-2024:7502](https://patchblox.com/security/data/fix/linux/alsa-2024-7502.md) | Oct 2, 2024 |
| Linux | golang-bin almalinux 9 | 1.21.13-4.el9_4 | [ALSA-2024:7550](https://patchblox.com/security/data/fix/linux/alsa-2024-7550.md) | Oct 2, 2024 |
| Linux | golang-bin ol 8 | 0:1.21.13-3.module+el8.10.0+90414+fc21c2ff | [ELSA-2024-7502](https://patchblox.com/security/data/fix/linux/elsa-2024-7502.md) | Oct 2, 2024 |
| Linux | golang-bin ol 9 | 0:1.21.13-4.el9_4 | [ELSA-2024-7550](https://patchblox.com/security/data/fix/linux/elsa-2024-7550.md) | Oct 2, 2024 |
| Linux | golang-docs RHEL 8 | 0:1.21.13-3.module+el8.10.0+22345+acdd8d0e | [RHSA-2024:7502](https://patchblox.com/security/data/fix/linux/rhsa-2024-7502.md) | Oct 2, 2024 |
| Linux | golang-docs RHEL 9 | 0:1.21.13-4.el9_4 | [RHSA-2024:7550](https://patchblox.com/security/data/fix/linux/rhsa-2024-7550.md) | Oct 2, 2024 |
| Linux | golang-docs almalinux 8 | 1.21.13-3.module_el8.10.0+3900+bb1e1982 | [ALSA-2024:7502](https://patchblox.com/security/data/fix/linux/alsa-2024-7502.md) | Oct 2, 2024 |
| Linux | golang-docs almalinux 9 | 1.21.13-4.el9_4 | [ALSA-2024:7550](https://patchblox.com/security/data/fix/linux/alsa-2024-7550.md) | Oct 2, 2024 |
| Linux | golang-docs ol 8 | 0:1.21.13-3.module+el8.10.0+90414+fc21c2ff | [ELSA-2024-7502](https://patchblox.com/security/data/fix/linux/elsa-2024-7502.md) | Oct 2, 2024 |
| Linux | golang-docs ol 9 | 0:1.21.13-4.el9_4 | [ELSA-2024-7550](https://patchblox.com/security/data/fix/linux/elsa-2024-7550.md) | Oct 2, 2024 |
| Linux | golang-misc RHEL 8 | 0:1.21.13-3.module+el8.10.0+22345+acdd8d0e | [RHSA-2024:7502](https://patchblox.com/security/data/fix/linux/rhsa-2024-7502.md) | Oct 2, 2024 |
| Linux | golang-misc RHEL 9 | 0:1.21.13-4.el9_4 | [RHSA-2024:7550](https://patchblox.com/security/data/fix/linux/rhsa-2024-7550.md) | Oct 2, 2024 |
| Linux | golang-misc almalinux 8 | 1.21.13-3.module_el8.10.0+3900+bb1e1982 | [ALSA-2024:7502](https://patchblox.com/security/data/fix/linux/alsa-2024-7502.md) | Oct 2, 2024 |
| Linux | golang-misc almalinux 9 | 1.21.13-4.el9_4 | [ALSA-2024:7550](https://patchblox.com/security/data/fix/linux/alsa-2024-7550.md) | Oct 2, 2024 |
| Linux | golang-misc ol 8 | 0:1.21.13-3.module+el8.10.0+90414+fc21c2ff | [ELSA-2024-7502](https://patchblox.com/security/data/fix/linux/elsa-2024-7502.md) | Oct 2, 2024 |
| Linux | golang-misc ol 9 | 0:1.21.13-4.el9_4 | [ELSA-2024-7550](https://patchblox.com/security/data/fix/linux/elsa-2024-7550.md) | Oct 2, 2024 |
| Linux | golang-src RHEL 8 | 0:1.21.13-3.module+el8.10.0+22345+acdd8d0e | [RHSA-2024:7502](https://patchblox.com/security/data/fix/linux/rhsa-2024-7502.md) | Oct 2, 2024 |
| Linux | golang-src RHEL 9 | 0:1.21.13-4.el9_4 | [RHSA-2024:7550](https://patchblox.com/security/data/fix/linux/rhsa-2024-7550.md) | Oct 2, 2024 |
| Linux | golang-src almalinux 8 | 1.21.13-3.module_el8.10.0+3900+bb1e1982 | [ALSA-2024:7502](https://patchblox.com/security/data/fix/linux/alsa-2024-7502.md) | Oct 2, 2024 |
| Linux | golang-src almalinux 9 | 1.21.13-4.el9_4 | [ALSA-2024:7550](https://patchblox.com/security/data/fix/linux/alsa-2024-7550.md) | Oct 2, 2024 |
| Linux | golang-src ol 8 | 0:1.21.13-3.module+el8.10.0+90414+fc21c2ff | [ELSA-2024-7502](https://patchblox.com/security/data/fix/linux/elsa-2024-7502.md) | Oct 2, 2024 |
| Linux | golang-src ol 9 | 0:1.21.13-4.el9_4 | [ELSA-2024-7550](https://patchblox.com/security/data/fix/linux/elsa-2024-7550.md) | Oct 2, 2024 |
| Linux | golang-tests RHEL 8 | 0:1.21.13-3.module+el8.10.0+22345+acdd8d0e | [RHSA-2024:7502](https://patchblox.com/security/data/fix/linux/rhsa-2024-7502.md) | Oct 2, 2024 |
| Linux | golang-tests RHEL 9 | 0:1.21.13-4.el9_4 | [RHSA-2024:7550](https://patchblox.com/security/data/fix/linux/rhsa-2024-7550.md) | Oct 2, 2024 |
| Linux | golang-tests almalinux 8 | 1.21.13-3.module_el8.10.0+3900+bb1e1982 | [ALSA-2024:7502](https://patchblox.com/security/data/fix/linux/alsa-2024-7502.md) | Oct 2, 2024 |
| Linux | golang-tests almalinux 9 | 1.21.13-4.el9_4 | [ALSA-2024:7550](https://patchblox.com/security/data/fix/linux/alsa-2024-7550.md) | Oct 2, 2024 |
| Linux | golang-tests ol 8 | 0:1.21.13-3.module+el8.10.0+90414+fc21c2ff | [ELSA-2024-7502](https://patchblox.com/security/data/fix/linux/elsa-2024-7502.md) | Oct 2, 2024 |
| Linux | golang-tests ol 9 | 0:1.21.13-4.el9_4 | [ELSA-2024-7550](https://patchblox.com/security/data/fix/linux/elsa-2024-7550.md) | Oct 2, 2024 |
| Linux | govulncheck-vulndb opensuse-leap 15.6 | 0.0.20241030T212825-150000.1.9.1 | [SUSE-SU-2024:3911-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3911-1.md) | Nov 5, 2024 |
| Linux | govulncheck-vulndb sles 15.6 | 0.0.20241030T212825-150000.1.9.1 | [SUSE-SU-2024:3911-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3911-1.md) | Nov 5, 2024 |
| Linux | grafana RHEL 8 | 0:9.2.10-20.el8_10 | [RHSA-2024:8327](https://patchblox.com/security/data/fix/linux/rhsa-2024-8327.md) | Oct 22, 2024 |
| Linux | grafana RHEL 9 | 0:9.2.10-19.el9_4 | [RHSA-2024:8678](https://patchblox.com/security/data/fix/linux/rhsa-2024-8678.md) | Oct 30, 2024 |
| Linux | grafana almalinux 8 | 9.2.10-20.el8_10 | [ALSA-2024:8327](https://patchblox.com/security/data/fix/linux/alsa-2024-8327.md) | Oct 22, 2024 |
| Linux | grafana almalinux 9 | 9.2.10-19.el9_4 | [ALSA-2024:8678](https://patchblox.com/security/data/fix/linux/alsa-2024-8678.md) | Oct 30, 2024 |
| Linux | grafana ol 8 | 0:9.2.10-20.el8_10 | [ELSA-2024-8327](https://patchblox.com/security/data/fix/linux/elsa-2024-8327.md) | Oct 22, 2024 |
| Linux | grafana ol 9 | 0:9.2.10-19.el9_4 | [ELSA-2024-8678](https://patchblox.com/security/data/fix/linux/elsa-2024-8678.md) | Oct 30, 2024 |
| Linux | grafana rocky 8 | 0:9.2.10-20.el8_10 | [RLSA-2024:8327](https://patchblox.com/security/data/fix/linux/rlsa-2024-8327.md) | Oct 25, 2024 |
| Linux | grafana rocky 9 | 0:9.2.10-19.el9_4 | [RLSA-2024:8678](https://patchblox.com/security/data/fix/linux/rlsa-2024-8678.md) | Nov 8, 2024 |
| Linux | grafana-pcp RHEL 8 | 0:5.1.1-9.el8_10 | [RHSA-2024:8847](https://patchblox.com/security/data/fix/linux/rhsa-2024-8847.md) | Nov 5, 2024 |
| Linux | grafana-pcp almalinux 8 | 5.1.1-9.el8_10 | [ALSA-2024:8847](https://patchblox.com/security/data/fix/linux/alsa-2024-8847.md) | Nov 5, 2024 |
| Linux | grafana-pcp ol 8 | 0:5.1.1-9.el8_10 | [ELSA-2024-8847](https://patchblox.com/security/data/fix/linux/elsa-2024-8847.md) | Nov 5, 2024 |
| Linux | grafana-pcp rocky 8 | 0:5.1.1-9.el8_10 | [RLSA-2024:8847](https://patchblox.com/security/data/fix/linux/rlsa-2024-8847.md) | Nov 8, 2024 |
| Linux | grafana-selinux RHEL 8 | 0:9.2.10-20.el8_10 | [RHSA-2024:8327](https://patchblox.com/security/data/fix/linux/rhsa-2024-8327.md) | Oct 22, 2024 |
| Linux | grafana-selinux RHEL 9 | 0:9.2.10-19.el9_4 | [RHSA-2024:8678](https://patchblox.com/security/data/fix/linux/rhsa-2024-8678.md) | Oct 30, 2024 |
| Linux | grafana-selinux almalinux 8 | 9.2.10-20.el8_10 | [ALSA-2024:8327](https://patchblox.com/security/data/fix/linux/alsa-2024-8327.md) | Oct 22, 2024 |
| Linux | grafana-selinux almalinux 9 | 9.2.10-19.el9_4 | [ALSA-2024:8678](https://patchblox.com/security/data/fix/linux/alsa-2024-8678.md) | Oct 30, 2024 |
| Linux | grafana-selinux ol 8 | 0:9.2.10-20.el8_10 | [ELSA-2024-8327](https://patchblox.com/security/data/fix/linux/elsa-2024-8327.md) | Oct 22, 2024 |
| Linux | grafana-selinux ol 9 | 0:9.2.10-19.el9_4 | [ELSA-2024-8678](https://patchblox.com/security/data/fix/linux/elsa-2024-8678.md) | Oct 30, 2024 |
| Linux | osbuild almalinux 9 | 141-1.el9.alma.1 | [ALSA-2025:7118](https://patchblox.com/security/data/fix/linux/alsa-2025-7118.md) | May 13, 2025 |
| Linux | osbuild ol 9 | 0:141-1.0.1.el9 | [ELSA-2025-7118](https://patchblox.com/security/data/fix/linux/elsa-2025-7118.md) | May 16, 2025 |
| Linux | osbuild-composer RHEL 8 | 0:101.5-2.el8_10 | [RHSA-2026:66016](https://patchblox.com/security/data/fix/linux/rhsa-2026-66016.md) | Sep 13, 2026 |
| Linux | osbuild-composer RHEL 9 | 0:132-1.el9 | [RHSA-2025:7118](https://patchblox.com/security/data/fix/linux/rhsa-2025-7118.md) | May 13, 2025 |
| Linux | osbuild-composer almalinux 8 | 101.5-2.el8_10.alma.1 | [ALSA-2026:66016](https://patchblox.com/security/data/fix/linux/alsa-2026-66016.md) | Sep 9, 2026 |
| Linux | osbuild-composer almalinux 9 | 132-1.el9.alma.1 | [ALSA-2025:7118](https://patchblox.com/security/data/fix/linux/alsa-2025-7118.md) | May 13, 2025 |
| Linux | osbuild-composer ol 9 | 0:132-1.0.2.el9 | [ELSA-2025-7118](https://patchblox.com/security/data/fix/linux/elsa-2025-7118.md) | May 16, 2025 |
| Linux | osbuild-composer rocky 8 | 0:101.5-2.el8_10.rocky.0.6 | [RLSA-2026:66016](https://patchblox.com/security/data/fix/linux/rlsa-2026-66016.md) | Sep 10, 2026 |
| Linux | osbuild-composer-core RHEL 8 | 0:101.5-2.el8_10 | [RHSA-2026:66016](https://patchblox.com/security/data/fix/linux/rhsa-2026-66016.md) | Sep 13, 2026 |
| Linux | osbuild-composer-core RHEL 9 | 0:132-1.el9 | [RHSA-2025:7118](https://patchblox.com/security/data/fix/linux/rhsa-2025-7118.md) | May 13, 2025 |
| Linux | osbuild-composer-core almalinux 8 | 101.5-2.el8_10.alma.1 | [ALSA-2026:66016](https://patchblox.com/security/data/fix/linux/alsa-2026-66016.md) | Sep 9, 2026 |
| Linux | osbuild-composer-core almalinux 9 | 132-1.el9.alma.1 | [ALSA-2025:7118](https://patchblox.com/security/data/fix/linux/alsa-2025-7118.md) | May 13, 2025 |
| Linux | osbuild-composer-core ol 9 | 0:132-1.0.2.el9 | [ELSA-2025-7118](https://patchblox.com/security/data/fix/linux/elsa-2025-7118.md) | May 16, 2025 |
| Linux | osbuild-composer-worker RHEL 8 | 0:101.5-2.el8_10 | [RHSA-2026:66016](https://patchblox.com/security/data/fix/linux/rhsa-2026-66016.md) | Sep 13, 2026 |
| Linux | osbuild-composer-worker RHEL 9 | 0:132-1.el9 | [RHSA-2025:7118](https://patchblox.com/security/data/fix/linux/rhsa-2025-7118.md) | May 13, 2025 |
| Linux | osbuild-composer-worker almalinux 8 | 101.5-2.el8_10.alma.1 | [ALSA-2026:66016](https://patchblox.com/security/data/fix/linux/alsa-2026-66016.md) | Sep 9, 2026 |
| Linux | osbuild-composer-worker almalinux 9 | 132-1.el9.alma.1 | [ALSA-2025:7118](https://patchblox.com/security/data/fix/linux/alsa-2025-7118.md) | May 13, 2025 |
| Linux | osbuild-composer-worker ol 9 | 0:132-1.0.2.el9 | [ELSA-2025-7118](https://patchblox.com/security/data/fix/linux/elsa-2025-7118.md) | May 16, 2025 |
| Linux | osbuild-depsolve-dnf almalinux 9 | 141-1.el9.alma.1 | [ALSA-2025:7118](https://patchblox.com/security/data/fix/linux/alsa-2025-7118.md) | May 13, 2025 |
| Linux | osbuild-depsolve-dnf ol 9 | 0:141-1.0.1.el9 | [ELSA-2025-7118](https://patchblox.com/security/data/fix/linux/elsa-2025-7118.md) | May 16, 2025 |
| Linux | osbuild-luks2 almalinux 9 | 141-1.el9.alma.1 | [ALSA-2025:7118](https://patchblox.com/security/data/fix/linux/alsa-2025-7118.md) | May 13, 2025 |
| Linux | osbuild-luks2 ol 9 | 0:141-1.0.1.el9 | [ELSA-2025-7118](https://patchblox.com/security/data/fix/linux/elsa-2025-7118.md) | May 16, 2025 |
| Linux | osbuild-lvm2 almalinux 9 | 141-1.el9.alma.1 | [ALSA-2025:7118](https://patchblox.com/security/data/fix/linux/alsa-2025-7118.md) | May 13, 2025 |
| Linux | osbuild-lvm2 ol 9 | 0:141-1.0.1.el9 | [ELSA-2025-7118](https://patchblox.com/security/data/fix/linux/elsa-2025-7118.md) | May 16, 2025 |
| Linux | osbuild-ostree almalinux 9 | 141-1.el9.alma.1 | [ALSA-2025:7118](https://patchblox.com/security/data/fix/linux/alsa-2025-7118.md) | May 13, 2025 |
| Linux | osbuild-ostree ol 9 | 0:141-1.0.1.el9 | [ELSA-2025-7118](https://patchblox.com/security/data/fix/linux/elsa-2025-7118.md) | May 16, 2025 |
| Linux | osbuild-selinux almalinux 9 | 141-1.el9.alma.1 | [ALSA-2025:7118](https://patchblox.com/security/data/fix/linux/alsa-2025-7118.md) | May 13, 2025 |
| Linux | osbuild-selinux ol 9 | 0:141-1.0.1.el9 | [ELSA-2025-7118](https://patchblox.com/security/data/fix/linux/elsa-2025-7118.md) | May 16, 2025 |
| Linux | python3-osbuild almalinux 9 | 141-1.el9.alma.1 | [ALSA-2025:7118](https://patchblox.com/security/data/fix/linux/alsa-2025-7118.md) | May 13, 2025 |
| Linux | python3-osbuild ol 9 | 0:141-1.0.1.el9 | [ELSA-2025-7118](https://patchblox.com/security/data/fix/linux/elsa-2025-7118.md) | May 16, 2025 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.