{"id":"EUVD-2025-0223","enisaUuid":"632a2374-2b9e-3035-8e98-da775228eafc","description":"rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument\u0027s buffer but with a lifetime bound to the `client` argument. In situations where the `sever` buffer\u0027s lifetime is shorter than the `client` buffer\u0027s, this can cause a use after free. This could cause the server to crash or to return arbitrary memory contents to the client. The crate`openssl` version 0.10.70 fixes the signature of `ssl::select_next_proto` to properly constrain the output buffer\u0027s lifetime to that of both input buffers. Users are advised to upgrade. In standard usage of `ssl::select_next_proto` in the callback passed to `SslContextBuilder::set_alpn_select_callback`, code is only affected if the `server` buffer is constructed *within* the callback.","datePublished":"Feb 3, 2025, 5:57:39 PM","dateUpdated":"Feb 12, 2025, 8:51:24 PM","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/sfackler/rust-openssl/security/advisories/GHSA-rpmj-rpgj-qmpm\nhttps://github.com/sfackler/rust-openssl/pull/2360\nhttps://crates.io/crates/openssl\n","aliases":"CVE-2025-24898\nGHSA-rpmj-rpgj-qmpm\n","assigner":"GitHub_M","epss":0.68,"enisaIdProduct":[{"id":"11ef9f04-a9f9-356b-8755-420641bca426","product":{"name":"rust-openssl","vendor":{"name":"rust-openssl"}},"product_version":"0.10.0, \u003c 0.10.70"}],"enisaIdVendor":[{"id":"730c5265-225a-3624-aaca-c79ce6609c6a","vendor":{"name":"sfackler"}}],"enisaIdVulnerability":[{"id":"07072a24-ef6c-3585-bac4-a97d69b0d102","vulnerability":{"id":"CVE-2025-24898","description":"rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument\u0027s buffer but with a lifetime bound to the `client` argument. In situations where the `sever` buffer\u0027s lifetime is shorter than the `client` buffer\u0027s, this can cause a use after free. This could cause the server to crash or to return arbitrary memory contents to the client. The crate`openssl` version 0.10.70 fixes the signature of `ssl::select_next_proto` to properly constrain the output buffer\u0027s lifetime to that of both input buffers. Users are advised to upgrade. In standard usage of `ssl::select_next_proto` in the callback passed to `SslContextBuilder::set_alpn_select_callback`, code is only affected if the `server` buffer is constructed *within* the callback.","datePublished":"Feb 3, 2025, 5:57:39 PM","dateUpdated":"Feb 12, 2025, 8:51:24 PM","status":"PUBLISHED","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/sfackler/rust-openssl/security/advisories/GHSA-rpmj-rpgj-qmpm\nhttps://github.com/sfackler/rust-openssl/pull/2360\nhttps://crates.io/crates/openssl\n","enisa_id":"EUVD-2025-0223\n","assigner":"GitHub_M","epss":0.68,"dataProcessed":"Nov 8, 2026, 7:16:31 AM","vulnerabilityProduct":[{"id":"197b203e-4c64-3dea-b7f4-0212cf95dd24","product":{"name":"rust-openssl","vendor":{"name":"rust-openssl"}},"product_version":"0.10.0, \u003c 0.10.70"},{"id":"66169158-aeb8-484b-b5d4-63b373e4987a","product":{"name":"rust-openssl","vendor":{"name":"rust-openssl"}},"product_version":"0.10.0, \u003c 0.10.70"}],"vulnerabilityVendor":[{"id":"a6a6f8b3-6b26-3c75-90e7-611115a8a033","vendor":{"name":"sfackler"}}]}},{"id":"7bef28dd-a6c1-3901-8cff-740b24461a76","vulnerability":{"id":"GHSA-rpmj-rpgj-qmpm","description":"rust-openssl ssl::select_next_proto use after free","datePublished":"Feb 3, 2025, 5:56:46 PM","dateUpdated":"Feb 11, 2025, 9:30:32 AM","baseScore":0.0,"references":"https://github.com/sfackler/rust-openssl/security/advisories/GHSA-rpmj-rpgj-qmpm\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-24898\nhttps://github.com/sfackler/rust-openssl/pull/2360\nhttps://github.com/sfackler/rust-openssl/commit/f014afb230de4d77bc79dea60e7e58c2f47b60f2\nhttps://crates.io/crates/openssl\nhttps://github.com/sfackler/rust-openssl\nhttps://lists.debian.org/debian-lts-announce/2025/02/msg00009.html\nhttps://rustsec.org/advisories/RUSTSEC-2025-0004.html\n","enisa_id":"EUVD-2025-0223\n","aliases":"GHSA-rpmj-rpgj-qmpm\nCVE-2025-24898\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:11:00 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"0b9c100f-77ea-3971-bb10-b3a25d0964a4","advisory":{"id":"RHSA-2025:7317","description":"Red Hat Security Advisory: python3.12-cryptography security update","summary":"An update for python3.12-cryptography is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"May 13, 2025, 8:48:39 AM","dateUpdated":"Nov 5, 2026, 3:29:35 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2025:7317\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7317.json\n","aliases":"CVE-2025-24898\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"01dca1c1-f3f9-3ae7-8cf1-e3cedec670ed","product":{"name":"python3.12-cryptography-0:41.0.7-2.el9.src","vendor":{"name":"Red Hat"}}},{"id":"2889e079-dff8-3012-b530-22e1a873c071","product":{"name":"python3.12-cryptography-0:41.0.7-2.el9.x86_64","vendor":{"name":"Red Hat"}}},{"id":"2daf218d-5c96-3902-b86e-939c04d622ab","product":{"name":"SUSE Liberty Linux 9","vendor":{"name":"SUSE"}}},{"id":"61a0a5e3-f566-3a67-9eca-fbfed5f9ce43","product":{"name":"python3.12-cryptography-debuginfo-0:41.0.7-2.el9.aarch64","vendor":{"name":"Red Hat"}}},{"id":"67fc00ac-17f1-3bce-81fc-cd715039c1ea","product":{"name":"python3.12-cryptography-debuginfo-0:41.0.7-2.el9.x86_64","vendor":{"name":"Red Hat"}}},{"id":"6c550cf5-1fa4-31c1-b7c9-26c0f9098269","product":{"name":"python3.12-cryptography-0:41.0.7-2.el9.aarch64","vendor":{"name":"Red Hat"}}},{"id":"949ea4b6-e9f8-3e37-8dd5-85f886ac40a1","product":{"name":"python3.12-cryptography-debugsource-0:41.0.7-2.el9.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"a2c26575-3f38-350c-b75a-d351197a48bd","product":{"name":"python3.12-cryptography-debugsource-0:41.0.7-2.el9.s390x","vendor":{"name":"Red Hat"}}},{"id":"bf569c6e-21cb-372a-bf0b-2b635ff8d6fa","product":{"name":"python3.12-cryptography-debuginfo-0:41.0.7-2.el9.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"c81990df-5d7e-30c2-9871-2bcfb036b7ed","product":{"name":"python3.12-cryptography-debuginfo-0:41.0.7-2.el9.s390x","vendor":{"name":"Red Hat"}}},{"id":"c9d8cc36-35e0-31ca-92a9-efbb3086f26c","product":{"name":"python3.12-cryptography-debugsource-0:41.0.7-2.el9.x86_64","vendor":{"name":"Red Hat"}}},{"id":"d31f57d6-e490-3ad8-ace8-16f1ef5c8baf","product":{"name":"Red Hat Enterprise Linux AppStream (v. 9)","vendor":{"name":"Red Hat"}}},{"id":"f8909122-f5a4-3f4d-8689-9f09db40051a","product":{"name":"python3.12-cryptography-debugsource-0:41.0.7-2.el9.aarch64","vendor":{"name":"Red Hat"}}},{"id":"fce94454-1b91-3061-aa04-93de9705f28d","product":{"name":"python3.12-cryptography-0:41.0.7-2.el9.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"fd65f5c9-605a-36eb-a507-f393d5dd16e7","product":{"name":"python3.12-cryptography-0:41.0.7-2.el9.s390x","vendor":{"name":"Red Hat"}}}]}},{"id":"20d30c3d-dac0-3408-9ed2-6b69db134b43","advisory":{"id":"SUSE-SU-2026:23036-1","description":"Security update for libkrun","summary":"Security update for libkrun","datePublished":"Jul 28, 2026, 5:32:56 PM","dateUpdated":"Sep 20, 2026, 6:40:32 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23036-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202623036-1/\nhttps://lists.suse.com/pipermail/sle-security-updates/2026-August/028217.html\nhttps://bugzilla.suse.com/1270198\nhttps://bugzilla.suse.com/1270429\nhttps://bugzilla.suse.com/1270470\nhttps://bugzilla.suse.com/1270582\nhttps://bugzilla.suse.com/1270683\nhttps://bugzilla.suse.com/1270721\nhttps://bugzilla.suse.com/1270831\nhttps://bugzilla.suse.com/1270877\nhttps://www.suse.com/security/cve/CVE-2025-24898/\nhttps://www.suse.com/security/cve/CVE-2026-41676/\nhttps://www.suse.com/security/cve/CVE-2026-41677/\nhttps://www.suse.com/security/cve/CVE-2026-41678/\nhttps://www.suse.com/security/cve/CVE-2026-41681/\nhttps://www.suse.com/security/cve/CVE-2026-41898/\nhttps://www.suse.com/security/cve/CVE-2026-42327/\nhttps://www.suse.com/security/cve/CVE-2026-44662/\n","aliases":"CVE-2025-24898\nCVE-2026-41676\nCVE-2026-41677\nCVE-2026-41678\nCVE-2026-41681\nCVE-2026-41898\nCVE-2026-42327\nCVE-2026-44662\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"00860ce7-f7f2-3aaa-ba49-423bde510818","product":{"name":"libkrun1-0:1.4.10-2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"12be8c8e-5d25-3455-93e2-580d6264e12c","product":{"name":"SUSE Linux Micro 6.0","vendor":{"name":"SUSE"}}},{"id":"3b218e82-4d02-3f12-847c-44dd200a3542","product":{"name":"libkrun1-0:1.4.10-2.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"645643ef-ec57-35e9-a5c8-7f31c1856663","advisory":{"id":"WID-SEC-W-2025-0366","description":"Vaultwarden: Schwachstelle ermöglicht Denial of Service oder Offenlegung von Informationen","summary":"Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Vaultwarden ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.","datePublished":"Feb 13, 2025, 11:00:00 PM","dateUpdated":"May 13, 2025, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0366.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2025-0366\n","aliases":"CVE-2025-24898\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"232b35fc-3904-3b72-a993-0f2cffd1f154","product":{"name":"Fedora Linux","vendor":{"name":"Fedora"}}},{"id":"42f8e649-e1f9-31ca-9a7c-171251f165a6","product":{"name":"1.33.2","vendor":{"name":"open source"}}},{"id":"9619e368-9176-3d69-bf9e-409a8bf13439","product":{"name":"vaultwarden","vendor":{"name":"dani-garcia"}}},{"id":"b0677eb7-84f5-3244-be17-2147988c248f","product":{"name":"Open Source Vaultwarden 1.33.2","vendor":{"name":"open source"}}},{"id":"be41231d-a326-35ce-827e-14ccc0706d8f","product":{"name":"Open Source Vaultwarden \u003c1.33.2","vendor":{"name":"open source"}}},{"id":"c8ca01cf-0a02-3a6d-9ab5-5bac5b6776e8","product":{"name":"Red Hat Enterprise Linux","vendor":{"name":"Red Hat"}}}]}},{"id":"75aa6b67-461c-31fc-a458-781224d47c0e","advisory":{"id":"openSUSE-SU-2026:21464-1","description":"Security update for libkrun","summary":"Security update for libkrun","datePublished":"Jul 28, 2026, 11:13:36 AM","dateUpdated":"Sep 17, 2026, 5:40:25 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21464-1.json\nhttps://bugzilla.suse.com/1270198\nhttps://bugzilla.suse.com/1270429\nhttps://bugzilla.suse.com/1270470\nhttps://bugzilla.suse.com/1270582\nhttps://bugzilla.suse.com/1270683\nhttps://bugzilla.suse.com/1270721\nhttps://bugzilla.suse.com/1270831\nhttps://bugzilla.suse.com/1270877\nhttps://bugzilla.suse.com/1271911\nhttps://www.suse.com/security/cve/CVE-2025-24898/\nhttps://www.suse.com/security/cve/CVE-2026-41676/\nhttps://www.suse.com/security/cve/CVE-2026-41677/\nhttps://www.suse.com/security/cve/CVE-2026-41678/\nhttps://www.suse.com/security/cve/CVE-2026-41681/\nhttps://www.suse.com/security/cve/CVE-2026-41898/\nhttps://www.suse.com/security/cve/CVE-2026-42327/\nhttps://www.suse.com/security/cve/CVE-2026-44662/\n","aliases":"CVE-2025-24898\nCVE-2026-41676\nCVE-2026-41677\nCVE-2026-41678\nCVE-2026-41681\nCVE-2026-41898\nCVE-2026-42327\nCVE-2026-44662\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"400d23aa-3db5-357d-87c7-fb8a4e4a019e","product":{"name":"libkrun1-0:1.4.10-160000.3.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"411607eb-084a-3dde-860b-eeab1651a1bf","product":{"name":"libkrun-sev-devel-0:1.4.10-160000.3.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"83b7ecaf-8750-3a6a-8351-a751a9cd857e","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"859d1a47-f0c4-3935-9f40-ea0648aa3e95","product":{"name":"libkrun-devel-0:1.4.10-160000.3.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"acc692d0-47fe-318f-85cb-0911c91f553d","product":{"name":"libkrun1-0:1.4.10-160000.3.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"af551d11-2607-3f08-80ac-28b7520c2386","product":{"name":"libkrun-devel-0:1.4.10-160000.3.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"f3b1dd5a-b5d3-3204-9a44-242bffd9f92d","product":{"name":"libkrun-sev1-0:1.4.10-160000.3.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"a1e20577-529a-3eca-ab59-45cca2e55019","advisory":{"id":"openSUSE-SU-2025:14814-1","description":"obs-service-cargo-4.5.0-2.1 on GA media","summary":"obs-service-cargo-4.5.0-2.1 on GA media","datePublished":"Feb 16, 2025, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 9:27:47 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_14814-1.json\nhttps://www.suse.com/security/cve/CVE-2025-24898/\n","aliases":"CVE-2025-24898\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"14de3a7f-624d-3ab4-9d29-85396b8192fe","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"1de3c401-38e2-3657-a970-0d4e6eab65da","product":{"name":"obs-service-cargo-4.5.0-2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"200fb874-4bd7-3ec4-80aa-34c6d98d7b42","product":{"name":"obs-service-cargo-4.5.0-2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"28fe03dd-76be-3799-89da-7acd5a141692","product":{"name":"obs-service-cargo-0:4.5.0-2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"2f1a0ef7-7164-3caa-acb4-6cc3bcf7c194","product":{"name":"obs-service-cargo-0:4.5.0-2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"5142f00f-df96-30ec-bb03-5a0ff361086b","product":{"name":"obs-service-cargo-0:4.5.0-2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"567d48bf-4e12-35ab-aa2d-d80fe37c79eb","product":{"name":"obs-service-cargo-0:4.5.0-2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"7d9b215a-b909-3594-b616-f2271b9996b4","product":{"name":"obs-service-cargo-4.5.0-2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"cd3a13ab-9eb6-3d62-9def-f9cfa3e34d09","product":{"name":"obs-service-cargo-4.5.0-2.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"b164bc3e-cb25-3dcd-be87-a4c98e4ae8af","advisory":{"id":"RHSA-2025:7147","description":"Red Hat Security Advisory: rpm-ostree security update","summary":"An update for rpm-ostree is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"May 13, 2025, 8:32:20 AM","dateUpdated":"Nov 5, 2026, 3:29:35 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2025:7147\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7147.json\n","aliases":"CVE-2025-24898\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"0aea4657-ab1e-3dfa-802c-c51e85951e85","product":{"name":"Red Hat Enterprise Linux AppStream (v. 9)","vendor":{"name":"Red Hat"}}},{"id":"10a72ec0-b671-346d-adfb-05637c68422b","product":{"name":"rpm-ostree-libs-debuginfo-0:2025.5-1.el9.x86_64","vendor":{"name":"Red Hat"}}},{"id":"13792d7f-8ea7-32e3-a4bd-f38569faffa2","product":{"name":"rpm-ostree-0:2025.5-1.el9.s390x","vendor":{"name":"Red Hat"}}},{"id":"144a0d29-1e4d-3fd7-8951-a971e76fa3fa","product":{"name":"rpm-ostree-0:2025.5-1.el9.aarch64","vendor":{"name":"Red Hat"}}},{"id":"19ff88f7-15d9-35ec-b634-e576e02386ba","product":{"name":"rpm-ostree-libs-0:2025.5-1.el9.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"231d568d-b09b-3f29-9ed3-b556801740e1","product":{"name":"rpm-ostree-debuginfo-0:2025.5-1.el9.i686","vendor":{"name":"Red Hat"}}},{"id":"283758cc-746f-3df0-a6dc-2d6229630806","product":{"name":"rpm-ostree-debuginfo-0:2025.5-1.el9.x86_64","vendor":{"name":"Red Hat"}}},{"id":"32146cad-50ef-3357-b1f7-4a5468d8f843","product":{"name":"rpm-ostree-0:2025.5-1.el9.x86_64","vendor":{"name":"Red Hat"}}},{"id":"34ee4437-d376-39d9-a63f-b369899df3be","product":{"name":"rpm-ostree-debugsource-0:2025.5-1.el9.i686","vendor":{"name":"Red Hat"}}},{"id":"3e2f2611-b24d-30d4-8c4c-a01c845f1d8f","product":{"name":"rpm-ostree-debugsource-0:2025.5-1.el9.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"4039b913-bff6-33d5-932a-494d51d17f79","product":{"name":"rpm-ostree-debuginfo-0:2025.5-1.el9.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"4954cf77-9f90-32e9-a58c-a6dd6f227be4","product":{"name":"rpm-ostree-libs-debuginfo-0:2025.5-1.el9.i686","vendor":{"name":"Red Hat"}}},{"id":"4c9871e9-6511-30c0-99a5-8ec50ee0f790","product":{"name":"rpm-ostree-debuginfo-0:2025.5-1.el9.aarch64","vendor":{"name":"Red Hat"}}},{"id":"5ec307c4-9d83-36e7-bf55-8cb3b80999e8","product":{"name":"rpm-ostree-libs-debuginfo-0:2025.5-1.el9.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"85020bd4-3406-3378-8ab8-e769f6370ea5","product":{"name":"rpm-ostree-debugsource-0:2025.5-1.el9.s390x","vendor":{"name":"Red Hat"}}},{"id":"97945671-4ff9-3816-90b3-b28480928a98","product":{"name":"rpm-ostree-libs-debuginfo-0:2025.5-1.el9.s390x","vendor":{"name":"Red Hat"}}},{"id":"a18529ae-c954-3d15-aa03-3b2c78b66a4d","product":{"name":"rpm-ostree-libs-0:2025.5-1.el9.x86_64","vendor":{"name":"Red Hat"}}},{"id":"a6dd59f8-eb21-3b62-b677-11618035a792","product":{"name":"rpm-ostree-libs-0:2025.5-1.el9.aarch64","vendor":{"name":"Red Hat"}}},{"id":"a7ea29b9-d08c-34d0-ab94-222fc0da097a","product":{"name":"rpm-ostree-debuginfo-0:2025.5-1.el9.s390x","vendor":{"name":"Red Hat"}}},{"id":"ad1d2e31-09f3-37e6-9cc0-59dc29450355","product":{"name":"rpm-ostree-0:2025.5-1.el9.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"beede618-cef7-3010-beb1-090a9d2fba27","product":{"name":"SUSE Liberty Linux 9","vendor":{"name":"SUSE"}}},{"id":"c345ed0b-b0ac-3c40-9eef-b9331d47a525","product":{"name":"rpm-ostree-0:2025.5-1.el9.src","vendor":{"name":"Red Hat"}}},{"id":"c38f7e26-b717-35c3-8d96-5749c12977d5","product":{"name":"rpm-ostree-libs-0:2025.5-1.el9.s390x","vendor":{"name":"Red Hat"}}},{"id":"d0915c70-8a7c-3f3f-854e-8f0db7665624","product":{"name":"rpm-ostree-libs-debuginfo-0:2025.5-1.el9.aarch64","vendor":{"name":"Red Hat"}}},{"id":"d9808d9b-7213-31ec-bec0-3a8b80ad5a45","product":{"name":"rpm-ostree-libs-0:2025.5-1.el9.i686","vendor":{"name":"Red Hat"}}},{"id":"e291ac58-019e-3dce-8590-4e8cf98c1530","product":{"name":"rpm-ostree-debugsource-0:2025.5-1.el9.aarch64","vendor":{"name":"Red Hat"}}},{"id":"e3a2a1ca-5dd1-390e-a3ae-165d69db6131","product":{"name":"rpm-ostree-debugsource-0:2025.5-1.el9.x86_64","vendor":{"name":"Red Hat"}}}]}},{"id":"cb5af19f-4e37-32a7-a6c7-83a3a3415ea2","advisory":{"id":"RHSA-2025:7313","description":"Red Hat Security Advisory: keylime-agent-rust security update","summary":"An update for keylime-agent-rust is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"May 13, 2025, 8:49:40 AM","dateUpdated":"Nov 5, 2026, 3:29:35 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2025:7313\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7313.json\n","aliases":"CVE-2025-24898\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"0b624fcb-efcf-38ca-8307-3b89c3aa6e74","product":{"name":"keylime-agent-rust-0:0.2.2-2.el9.src","vendor":{"name":"Red Hat"}}},{"id":"1ae72870-904b-3ab1-8540-6b388fd8d1e6","product":{"name":"keylime-agent-rust-debugsource-0:0.2.2-2.el9.s390x","vendor":{"name":"Red Hat"}}},{"id":"2cc2b8c9-326c-3f11-bcff-e4afd14b6f7d","product":{"name":"Red Hat Enterprise Linux AppStream (v. 9)","vendor":{"name":"Red Hat"}}},{"id":"36dad01c-0250-3a54-86ec-e243935c4a08","product":{"name":"keylime-agent-rust-debugsource-0:0.2.2-2.el9.x86_64","vendor":{"name":"Red Hat"}}},{"id":"4822eb08-8284-3df3-8935-aafb9b99063e","product":{"name":"keylime-agent-rust-0:0.2.2-2.el9.s390x","vendor":{"name":"Red Hat"}}},{"id":"4a49b34b-2b51-38bb-93b4-8f3551c2f5b0","product":{"name":"keylime-agent-rust-debugsource-0:0.2.2-2.el9.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"7c4bbe09-5951-39b5-8c55-ed007ad1283b","product":{"name":"keylime-agent-rust-0:0.2.2-2.el9.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"84114bb5-295c-3a53-92b5-45a0d42be282","product":{"name":"keylime-agent-rust-0:0.2.2-2.el9.aarch64","vendor":{"name":"Red Hat"}}},{"id":"8933aa61-437e-37b6-98f6-b6cf7d4b2a50","product":{"name":"keylime-agent-rust-debuginfo-0:0.2.2-2.el9.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"a32cecec-89a6-3642-bcd2-d89879d02470","product":{"name":"keylime-agent-rust-debuginfo-0:0.2.2-2.el9.x86_64","vendor":{"name":"Red Hat"}}},{"id":"ac42c99e-6e39-3466-a11b-c60f553c1393","product":{"name":"keylime-agent-rust-debugsource-0:0.2.2-2.el9.aarch64","vendor":{"name":"Red Hat"}}},{"id":"c4a8b20c-35d9-3d6a-95d5-1b2122c125a2","product":{"name":"keylime-agent-rust-debuginfo-0:0.2.2-2.el9.s390x","vendor":{"name":"Red Hat"}}},{"id":"d176efa4-5bdb-3d95-93c4-2ccdf72c836f","product":{"name":"keylime-agent-rust-debuginfo-0:0.2.2-2.el9.aarch64","vendor":{"name":"Red Hat"}}},{"id":"d4b22adf-02ac-3485-8529-825d5e69c60d","product":{"name":"keylime-agent-rust-0:0.2.2-2.el9.x86_64","vendor":{"name":"Red Hat"}}},{"id":"ec2f0aaf-f52a-3c2d-bb4f-f74cde219833","product":{"name":"SUSE Liberty Linux 9","vendor":{"name":"SUSE"}}}]}},{"id":"d5115f73-df31-348f-ac6c-46926ec8d86d","advisory":{"id":"msrc_CVE-2025-24898","description":"rust openssl ssl::select_next_proto use after free","datePublished":"Sep 3, 2025, 9:40:02 PM","dateUpdated":"Aug 12, 2026, 11:09:03 PM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-24898.json\n","aliases":"CVE-2025-24898\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"00e1dff0-4042-36e3-a878-a83b77784fc5","product":{"name":"azl3 rust 1.86.0-1","vendor":{"name":"Microsoft"}}},{"id":"228093bc-d003-37c8-8341-62ca2f2d70ea","product":{"name":"cbl2 rust 1.72.0-10","vendor":{"name":"Microsoft"}}},{"id":"299cecbf-69f6-3e86-9372-3dd2fb99e202","product":{"name":"azl3 python-cryptography 0:42.0.5-3.azl3","vendor":{"name":"Microsoft"}}},{"id":"51622ae1-e322-34af-b5eb-4b33380dca2c","product":{"name":"azl3 rust 0:1.86.0-1.azl3","vendor":{"name":"Microsoft"}}},{"id":"545a0fba-90d8-3ef0-8721-022c0e41380b","product":{"name":"azl3 rust 0:1.75.0-14.azl3","vendor":{"name":"Microsoft"}}},{"id":"8dead80a-2475-36fd-9527-ad0070325cd6","product":{"name":"2.0","vendor":{"name":"Smiths Medical"}}},{"id":"99de2d62-8ff9-317a-9062-6ab783810a53","product":{"name":"cbl2 rpm-ostree 0:2022.1-7.cbl2","vendor":{"name":"Microsoft"}}},{"id":"9a1252a7-cf05-38ad-ac8e-b12b045ab0f3","product":{"name":"cbl2 rpm-ostree 2022.1-7","vendor":{"name":"Microsoft"}}},{"id":"a6e29f62-83f1-3f89-bd48-70761fa10789","product":{"name":"cbl2 rust 0:1.72.0-10.cbl2","vendor":{"name":"Microsoft"}}},{"id":"aac77ed4-3077-3466-ab3e-0742aa2030d1","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}},{"id":"baad07b5-afb6-3d2e-9b39-45f13e857902","product":{"name":"azl3 python-cryptography 42.0.5-3","vendor":{"name":"Microsoft"}}},{"id":"c299ce55-9e0a-3b79-a4e6-98400556c2fe","product":{"name":"azl3 rpm-ostree 2024.4-3","vendor":{"name":"Microsoft"}}},{"id":"d0c89d90-15bd-3151-ba7d-b580e61761e6","product":{"name":"azl3 rust 1.75.0-14","vendor":{"name":"Microsoft"}}},{"id":"d57b511e-504d-37a8-8930-077610b7d297","product":{"name":"azl3 rpm-ostree 0:2024.4-3.azl3","vendor":{"name":"Microsoft"}}},{"id":"e6eb2a0d-0bcf-3b5d-b2d2-82e8004d90a6","product":{"name":"3.0","vendor":{"name":"Wind River"}}}]}},{"id":"d590a028-2cd1-3c9b-a4e6-5b12acfc7c83","advisory":{"id":"SUSE-SU-2026:23070-1","description":"Security update for libkrun","summary":"Security update for libkrun","datePublished":"Jul 30, 2026, 8:54:20 AM","dateUpdated":"Sep 16, 2026, 8:10:43 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23070-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202623070-1/\nhttps://lists.suse.com/pipermail/sle-updates/2026-August/049345.html\nhttps://bugzilla.suse.com/1270198\nhttps://bugzilla.suse.com/1270429\nhttps://bugzilla.suse.com/1270470\nhttps://bugzilla.suse.com/1270582\nhttps://bugzilla.suse.com/1270683\nhttps://bugzilla.suse.com/1270721\nhttps://bugzilla.suse.com/1270831\nhttps://bugzilla.suse.com/1270877\nhttps://www.suse.com/security/cve/CVE-2025-24898/\nhttps://www.suse.com/security/cve/CVE-2026-41676/\nhttps://www.suse.com/security/cve/CVE-2026-41677/\nhttps://www.suse.com/security/cve/CVE-2026-41678/\nhttps://www.suse.com/security/cve/CVE-2026-41681/\nhttps://www.suse.com/security/cve/CVE-2026-41898/\nhttps://www.suse.com/security/cve/CVE-2026-42327/\nhttps://www.suse.com/security/cve/CVE-2026-44662/\n","aliases":"CVE-2025-24898\nCVE-2026-41676\nCVE-2026-41677\nCVE-2026-41678\nCVE-2026-41681\nCVE-2026-41898\nCVE-2026-42327\nCVE-2026-44662\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"7de71cd2-a4f7-3a89-84a0-0831a9bdbe94","product":{"name":"libkrun1-1.4.10-slfo.1.1_2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"829444fc-a824-33f5-8959-306062ccc45b","product":{"name":"libkrun1-1.4.10-slfo.1.1_2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"a7078d70-d6d4-3d52-b203-514027b7917f","product":{"name":"SUSE Linux Micro 6.1","vendor":{"name":"SUSE"}}}]}},{"id":"ec0f7730-69b5-325e-8ba1-92b85a11edb5","advisory":{"id":"RHSA-2025:7160","description":"Red Hat Security Advisory: bootc security update","summary":"An update for bootc is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"May 13, 2025, 8:38:55 AM","dateUpdated":"Nov 5, 2026, 3:29:35 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2025:7160\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7160.json\n","aliases":"CVE-2025-24898\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"01304680-301c-3c94-922f-f218ef58417f","product":{"name":"system-reinstall-bootc-debuginfo-0:1.1.6-3.el9_6.x86_64","vendor":{"name":"Red Hat"}}},{"id":"0357f6e0-d57d-366d-8e68-c7af2457b6f7","product":{"name":"system-reinstall-bootc-0:1.1.6-3.el9_6.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"0b6a9f68-b0d4-3ab6-87a0-5c8b65f53cdf","product":{"name":"system-reinstall-bootc-0:1.1.6-3.el9_6.aarch64","vendor":{"name":"Red Hat"}}},{"id":"12eb54a0-1d7f-347e-b2a5-b7efe3cb5f54","product":{"name":"bootc-debugsource-0:1.1.6-3.el9_6.s390x","vendor":{"name":"Red Hat"}}},{"id":"1374b068-cc41-334f-864f-9daa1386085f","product":{"name":"bootc-0:1.1.6-3.el9_6.s390x","vendor":{"name":"Red Hat"}}},{"id":"16219ba7-3c96-3a99-b767-1555a2eebf36","product":{"name":"bootc-0:1.1.6-3.el9_6.x86_64","vendor":{"name":"Red Hat"}}},{"id":"411684cb-182b-38cb-949a-b97653f338a8","product":{"name":"bootc-0:1.1.6-3.el9_6.src","vendor":{"name":"Red Hat"}}},{"id":"520bb90a-0867-3d03-bad0-49433952b5e8","product":{"name":"bootc-debugsource-0:1.1.6-3.el9_6.aarch64","vendor":{"name":"Red Hat"}}},{"id":"5800942e-cbe2-343d-8eab-c256f62a6b30","product":{"name":"system-reinstall-bootc-debuginfo-0:1.1.6-3.el9_6.s390x","vendor":{"name":"Red Hat"}}},{"id":"6e383ea9-e5a1-36d7-80be-5534d5397b66","product":{"name":"bootc-0:1.1.6-3.el9_6.aarch64","vendor":{"name":"Red Hat"}}},{"id":"720a03fe-0360-395a-825f-049ca9bcbc97","product":{"name":"bootc-debuginfo-0:1.1.6-3.el9_6.s390x","vendor":{"name":"Red Hat"}}},{"id":"8110d7b0-bc4a-36bc-8aa9-5b23163b7056","product":{"name":"system-reinstall-bootc-0:1.1.6-3.el9_6.s390x","vendor":{"name":"Red Hat"}}},{"id":"8d7bf560-22d7-390e-a03e-e8049396448c","product":{"name":"SUSE Liberty Linux 9","vendor":{"name":"SUSE"}}},{"id":"90fdf3d3-1e45-39e6-89e6-e83ff69af4f9","product":{"name":"system-reinstall-bootc-debuginfo-0:1.1.6-3.el9_6.aarch64","vendor":{"name":"Red Hat"}}},{"id":"959eecf2-7c75-3e91-8bc0-b277f4d1333d","product":{"name":"bootc-debugsource-0:1.1.6-3.el9_6.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"a1491282-e724-3686-b598-8c78ac4c1058","product":{"name":"bootc-debugsource-0:1.1.6-3.el9_6.x86_64","vendor":{"name":"Red Hat"}}},{"id":"aca5acc0-3b41-34b4-864e-546a26a32f6b","product":{"name":"bootc-debuginfo-0:1.1.6-3.el9_6.aarch64","vendor":{"name":"Red Hat"}}},{"id":"acfe882a-2c7b-37e3-b61f-2256f6f82f43","product":{"name":"Red Hat Enterprise Linux AppStream (v. 9)","vendor":{"name":"Red Hat"}}},{"id":"b7b25449-d4c2-3028-a068-069c60f6f40e","product":{"name":"bootc-debuginfo-0:1.1.6-3.el9_6.x86_64","vendor":{"name":"Red Hat"}}},{"id":"bf3ad149-4a45-33fc-b071-1a1cab3a9f2c","product":{"name":"system-reinstall-bootc-debuginfo-0:1.1.6-3.el9_6.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"cef5aa66-316a-3f6c-a9dc-5fecff8c9997","product":{"name":"bootc-0:1.1.6-3.el9_6.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"d7914fd5-a159-3a1c-82c0-a33eac7a0745","product":{"name":"system-reinstall-bootc-0:1.1.6-3.el9_6.x86_64","vendor":{"name":"Red Hat"}}},{"id":"ed361eff-8c53-3843-bcbb-7dc80a47fa02","product":{"name":"bootc-debuginfo-0:1.1.6-3.el9_6.ppc64le","vendor":{"name":"Red Hat"}}}]}},{"id":"f5225e51-3c80-39e6-84f1-44067bf83210","advisory":{"id":"RHSA-2025:7241","description":"Red Hat Security Advisory: rust-bootupd security update","summary":"An update for rust-bootupd is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"May 13, 2025, 8:35:52 AM","dateUpdated":"Nov 5, 2026, 3:29:36 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2025:7241\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7241.json\n","aliases":"CVE-2025-24898\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"0b7f4f0b-c1f8-3056-8207-bd469f400647","product":{"name":"SUSE Liberty Linux 9","vendor":{"name":"SUSE"}}},{"id":"43eb639f-24b5-3e67-8f5d-66831597afca","product":{"name":"bootupd-0:0.2.27-3.el9.aarch64","vendor":{"name":"Red Hat"}}},{"id":"4b531a45-df49-3ad9-9916-164ae34695a8","product":{"name":"Red Hat Enterprise Linux AppStream (v. 9)","vendor":{"name":"Red Hat"}}},{"id":"4ce9f4bb-8c4e-30cb-ab71-ed890d915a70","product":{"name":"rust-bootupd-debugsource-0:0.2.27-3.el9.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"5ec2d71f-bbb1-3567-8230-b505b434f740","product":{"name":"rust-bootupd-0:0.2.27-3.el9.src","vendor":{"name":"Red Hat"}}},{"id":"69bffe3d-74ad-3fca-acbf-dcbbf1093d20","product":{"name":"bootupd-debuginfo-0:0.2.27-3.el9.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"981dac7d-ae75-3956-99ed-1945e4f68930","product":{"name":"rust-bootupd-debugsource-0:0.2.27-3.el9.x86_64","vendor":{"name":"Red Hat"}}},{"id":"ae569c22-973f-3a69-9d93-81d6e0445be7","product":{"name":"bootupd-debuginfo-0:0.2.27-3.el9.x86_64","vendor":{"name":"Red Hat"}}},{"id":"aebcbc84-2ec4-31df-a68a-d601882f8c7a","product":{"name":"bootupd-0:0.2.27-3.el9.x86_64","vendor":{"name":"Red Hat"}}},{"id":"b45a6e84-e6be-3652-beec-42eb0e025b7a","product":{"name":"rust-bootupd-debugsource-0:0.2.27-3.el9.aarch64","vendor":{"name":"Red Hat"}}},{"id":"b97bc94f-ea09-3949-aaff-74e7773c9756","product":{"name":"bootupd-debuginfo-0:0.2.27-3.el9.aarch64","vendor":{"name":"Red Hat"}}},{"id":"cfe1dae2-b67c-395d-b803-b6121f11313d","product":{"name":"bootupd-debuginfo-0:0.2.27-3.el9.s390x","vendor":{"name":"Red Hat"}}},{"id":"de00baf5-9fec-3523-965c-81091d6373f4","product":{"name":"bootupd-0:0.2.27-3.el9.s390x","vendor":{"name":"Red Hat"}}},{"id":"e11d5cab-bfdd-35f7-87f2-9a15f3b94ef5","product":{"name":"bootupd-0:0.2.27-3.el9.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"fc40b802-9aa4-325f-aa5e-a5672110c8d2","product":{"name":"rust-bootupd-debugsource-0:0.2.27-3.el9.s390x","vendor":{"name":"Red Hat"}}}]}}]}