Skip to content
OpenAdvisories
Medium ELSA-2025-7147 1 CVE

Moderate: rpm-ostree security update (Oracle Linux 9)

Published May 16, 2025 · Updated May 16, 2025

Summary

[2025.5-1]
- Rebase to 2025.5
Resolves: #RHEL-78697

[2025.4-1]
- Rebase to 2025.4
Resolves: #RHEL-68131

[2025.3-1]
- Rebase to 2025.3
Resolves: #RHEL-68131

[2025.2-1]
- Rebase to 2025.2
Resolves: #RHEL-68131

[2025.1-1]
- Rebase to 2025.1
Resolves: #RHEL-68131

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 rpm-ostree 0:2025.5-1.el9
Oracle Linux · 9 rpm-ostree-libs 0:2025.5-1.el9

Vulnerabilities 1

  • Medium 6.3

    rust openssl ssl::select_next_proto use after free

    rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer but with a lifetime bound to the `client` argument. In situations where …