Skip to content
OpenAdvisories
Medium ELSA-2025-7160 1 CVE

Moderate: bootc security update (Oracle Linux 9)

Published May 16, 2025 · Updated May 16, 2025

Summary

[1.1.6-3]
- Backport https://github.com/containers/bootc/pull/1167
- Resolves: #RHEL-82293

[1.1.5-2]
- Sync specfile from upstream
- Resolves: #RHEL-80264
- Resolves: #RHEL-81981

[1.1.5-1]
- Update to 1.1.5
- Resolves: #RHEL-77733

[1.1.4-2]
- Cherry pick patches for bootc-status-updated
- Resolves: #RHEL-72862

[1.1.4-1]
- Update to 1.1.4
Resolves: #RHEL-72862

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 bootc 0:1.1.6-3.el9_6
Oracle Linux · 9 system-reinstall-bootc 0:1.1.6-3.el9_6

Vulnerabilities 1

  • Medium 6.3

    rust openssl ssl::select_next_proto use after free

    rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer but with a lifetime bound to the `client` argument. In situations where …