OESA-2026-2944 rpm-ostree security update

rpm-ostree is a hybrid image/package system. It supports "composing" packages on a build server into an OSTree repository, which can then be replicated by client systems with atomic upgrades. Additionally, unlike many "pure" image systems, with rpm-ostree each client system can layer on additiona...

CVE-2023-53159 vulnerabilities

Vulnerabilities for packages: berg...

CVE-2023-53159

creationtimestamp| type| source ---|---|--- 2025-07-28 09:49:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luzcuawbnb2d 2025-07-28 12:45:59+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3luzmq3o7c22j 2025-11-27 22:50:41+00:00| seen|...

CVE-2023-53159

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::sethost...

CVE-2023-53159

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::sethost...

Medium: rust

Issue Overview: The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::sethost. CVE-2023-53159 Affected Packages: rust Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference...