Release cockpit-image-builder-94.3-1.el10_2 ALSA-2026:24331
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 25/100
Research direction
No source files, tests, or entry points are identified in the issue. Review the cockpit-image-builder package and the listed lodash CVEs first; done means the affected package release has been updated to address the security issues.
Written by the indexing model from the issue text.
Description
cockpit-image-builder security update
Severity: Important
Description
The image-builder-frontend generates custom images suitable for deploying systems or uploading to the cloud. It integrates into Cockpit as a frontend for osbuild.
Security Fix(es):
- lodash: prototype pollution in _.unset and _.omit functions (CVE-2025-13465)
- lodash: lodash: Arbitrary code execution via untrusted input in template imports (CVE-2026-4800)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected packages:
cockpit-image-builder-94.3-1.el10_2.noarch
cockpit-image-builder-94.3-1.el10_2.noarch
cockpit-image-builder-94.3-1.el10_2.noarch
cockpit-image-builder-94.3-1.el10_2.noarch
cockpit-image-builder-94.3-1.el10_2.noarch
- Dominant language
- No language data
- Stars
- 2
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from AlmaLinux/updates
-
Difficulty 1/5 Under an hour Newbie friendliness 85/100
-
Difficulty 1/5 Under an hour Newbie friendliness 60/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
All issues in AlmaLinux/updates
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
ssciwr/clang-format-wheel#167 ·
-
area/ci kind/bug priority/backlog triage/accepted
Difficulty 1/5 Under an hour Newbie friendliness 90/100
lexfrei/cloudflare-tunnel-gateway-controller#998 ·
Maintainers usually reply within 1 day
-
Publish solr-mcp to the official MCP Registry and the Docker MCP Catalog with the 1.0.0 releaseOpen
Difficulty 2/5 Half a day Newbie friendliness 62/100
Maintainers usually reply within 13 days
-
Difficulty 2/5 Under an hour Newbie friendliness 66/100
Maintainers usually reply within 1 day
-
[Package Request]: siGit Code v1.5.13Possibly taken @paydii claimed this 3 days ago. OpenNeeds-Triage
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
microsoft/winget-pkgs#447900 ·
Maintainers usually reply within 1 day