{"id":"CVE-2025-24898","aliases":["ALSA-2025:7147","ALSA-2025:7160","ALSA-2025:7241","ALSA-2025:7313","ALSA-2025:7317","AZL-56427","DEBIAN-CVE-2025-24898","DLA-4049-1","EUVD-2025-0223","GHSA-rpmj-rpgj-qmpm","OESA-2025-1120","OESA-2025-1121","OESA-2026-3710","OESA-2026-3711","OESA-2026-3712","RHSA-2025:7147","RHSA-2025:7160","RHSA-2025:7241","RHSA-2025:7313","RHSA-2025:7317","RLSA-2025:7160","RLSA-2025:7241","RLSA-2025:7313","RLSA-2025:7317","RUSTSEC-2025-0004","SUSE-SU-2026:23036-1","SUSE-SU-2026:23070-1","UBUNTU-CVE-2025-24898","USN-7891-1","openSUSE-SU-2025:14814-1","openSUSE-SU-2026:21464-1"],"status":"published","title":"rust openssl ssl::select_next_proto use after free","description":"rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer but with a lifetime bound to the `client` argument. In situations where the `sever` buffer's lifetime is shorter than the `client` buffer's, this can cause a use after free. This could cause the server to crash or to return arbitrary memory contents to the client. The crate`openssl` version 0.10.70 fixes the signature of `ssl::select_next_proto` to properly constrain the output buffer's lifetime to that of both input buffers. Users are advised to upgrade. In standard usage of `ssl::select_next_proto` in the callback passed to `SslContextBuilder::set_alpn_select_callback`, code is only affected if the `server` buffer is constructed *within* the callback.","severity":{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00676,"percentile":0.52556,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2025-02-02T12:00:00Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"crates.io","package":"openssl","fixed_in":["0.10.70"],"sources":["ghsa","osv"]},{"ecosystem":"AlmaLinux:9","package":"rpm-ostree","fixed_in":["2025.5-1.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"rpm-ostree-libs","fixed_in":["2025.5-1.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"bootc","fixed_in":["1.1.6-3.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"system-reinstall-bootc","fixed_in":["1.1.6-3.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"bootupd","fixed_in":["0.2.27-3.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"keylime-agent-rust","fixed_in":["0.2.2-2.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"python3.12-cryptography","fixed_in":["41.0.7-2.el9"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"rust-openssl","fixed_in":["0.10.70-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"rust-openssl","fixed_in":["0.10.70-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"rust-openssl","fixed_in":["0.10.29-1+deb11u1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"three-eight-nine-ds-base","fixed_in":["389-ds-base-3.1.1-5.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"three-eight-nine-ds-base","fixed_in":["389-ds-base-3.1.1-5.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"rpm-ostree","fixed_in":["2022.16-13.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"rpm-ostree","fixed_in":["2024.4-9.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"rpm-ostree","fixed_in":["2024.4-9.oe2403sp3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rpm-ostree","fixed_in":["0:2025.5-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rpm-ostree-debuginfo","fixed_in":["0:2025.5-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rpm-ostree-debugsource","fixed_in":["0:2025.5-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rpm-ostree-libs","fixed_in":["0:2025.5-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rpm-ostree-libs-debuginfo","fixed_in":["0:2025.5-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bootc","fixed_in":["0:1.1.6-3.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bootc-debuginfo","fixed_in":["0:1.1.6-3.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bootc-debugsource","fixed_in":["0:1.1.6-3.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"system-reinstall-bootc","fixed_in":["0:1.1.6-3.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"system-reinstall-bootc-debuginfo","fixed_in":["0:1.1.6-3.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bootupd","fixed_in":["0:0.2.27-3.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bootupd-debuginfo","fixed_in":["0:0.2.27-3.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-bootupd","fixed_in":["0:0.2.27-3.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-bootupd-debugsource","fixed_in":["0:0.2.27-3.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"keylime-agent-rust","fixed_in":["0:0.2.2-2.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"keylime-agent-rust-debuginfo","fixed_in":["0:0.2.2-2.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"keylime-agent-rust-debugsource","fixed_in":["0:0.2.2-2.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.12-cryptography","fixed_in":["0:41.0.7-2.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.12-cryptography-debuginfo","fixed_in":["0:41.0.7-2.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.12-cryptography-debugsource","fixed_in":["0:41.0.7-2.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"bootc","fixed_in":["0:1.1.6-3.el9_6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"rust-bootupd","fixed_in":["0:0.2.27-3.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"keylime-agent-rust","fixed_in":["0:0.2.2-2.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"python3.12-cryptography","fixed_in":["0:41.0.7-2.el9"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"rust-openssl","fixed_in":["0.10.23-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"rust-openssl","fixed_in":["0.10.36-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"rust-openssl","fixed_in":["0.10.57-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"obs-service-cargo","fixed_in":["4.5.0-2.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"crates.io","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.10.0"},{"fixed":"0.10.70"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rpm-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.5-1.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rpm-ostree-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.5-1.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bootc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.6-3.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"system-reinstall-bootc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.6-3.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bootupd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.27-3.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"keylime-agent-rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.2-2.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3.12-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"41.0.7-2.el9"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.1.1-12"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.10.45-1","0.10.57-1","0.10.64-1","0.10.68-1","0.10.70-1","0.10.72-1","0.10.73-1","0.10.78-1","0.10.79-1","0.10.81-1"]},{"source":"osv","ecosystem":"Debian:13","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.70-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.70-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.29-1+deb11u1"}]}],"versions":["0.10.29-1"]},{"source":"osv","ecosystem":"crates.io","package":"openssl","ranges":[{"type":"SEMVER","events":[{"introduced":"0.10.0"},{"fixed":"0.10.70"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"three-eight-nine-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"389-ds-base-3.1.1-5.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"three-eight-nine-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"389-ds-base-3.1.1-5.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"rpm-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.16-13.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"rpm-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2024.4-9.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"rpm-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2024.4-9.oe2403sp3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rpm-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2025.5-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rpm-ostree-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2025.5-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rpm-ostree-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2025.5-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rpm-ostree-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2025.5-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rpm-ostree-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2025.5-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bootc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-3.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bootc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-3.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bootc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-3.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"system-reinstall-bootc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-3.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"system-reinstall-bootc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-3.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bootupd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.27-3.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bootupd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.27-3.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-bootupd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.27-3.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-bootupd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.27-3.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"keylime-agent-rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-2.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"keylime-agent-rust-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-2.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"keylime-agent-rust-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-2.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.12-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:41.0.7-2.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.12-cryptography-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:41.0.7-2.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3.12-cryptography-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:41.0.7-2.el9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"bootc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-3.el9_6"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"rust-bootupd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.27-3.el9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"keylime-agent-rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-2.el9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"python3.12-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:41.0.7-2.el9"}]}]},{"source":"osv","ecosystem":"crates.io","package":"openssl","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.10.70"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libkrun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.10-2.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"libkrun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.10-slfo.1.1_2.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.23-1ubuntu0.1~esm1"}]}],"versions":["0.10.23-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.36-1ubuntu0.1~esm1"}]}],"versions":["0.10.29-1","0.10.36-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.57-1ubuntu0.1~esm1"}]}],"versions":["0.10.45-1","0.10.57-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.23-1ubuntu0.1~esm1"}]}],"versions":["0.10.23-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.36-1ubuntu0.1~esm1"}]}],"versions":["0.10.29-1","0.10.36-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.57-1ubuntu0.1~esm1"}]}],"versions":["0.10.45-1","0.10.57-1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"obs-service-cargo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"libkrun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.10-160000.3.1"}]}],"bundled":8}],"products":[{"vendor":"rust-openssl","product":"rust-openssl"},{"vendor":"sfackler","product":"rust-openssl"}],"references":[{"url":"https://github.com/sfackler/rust-openssl/security/advisories/GHSA-rpmj-rpgj-qmpm","tags":["x_refsource_CONFIRM","advisory","web","article","report"]},{"url":"https://github.com/sfackler/rust-openssl/pull/2360","tags":["x_refsource_MISC","fix","web","article","report"]},{"url":"https://crates.io/crates/openssl","tags":["x_refsource_MISC","web","article","package","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/02/msg00009.html","tags":["web"]},{"url":"https://github.com/sfackler/rust-openssl/commit/f014afb230de4d77bc79dea60e7e58c2f47b60f2","tags":["web"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2025-0004.html","tags":["web","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24898","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-rpmj-rpgj-qmpm"},{"url":"https://access.redhat.com/errata/RHSA-2025:7147","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-24898","tags":["report"]},{"url":"https://bugzilla.redhat.com/2343573","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-7147.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7160","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-7160.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7241","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-7241.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7313","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-7313.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7317","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-7317.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/24xxx/CVE-2025-24898.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-24898","tags":["advisory"]},{"url":"https://github.com/sfackler/rust-openssl","tags":["package"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1120","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1121","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3710","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3711","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3712","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.6_release_notes/index","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2343573","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-59716","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-68131","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7147.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-24898","tags":["advisory","report"]},{"url":"https://issues.redhat.com/browse/RHEL-63018","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-66258","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-72862","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7160.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-71040","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7241.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7313.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7317.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:7160","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:7241","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:7313","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:7317","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623036-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1270198","tags":["report"]},{"url":"https://bugzilla.suse.com/1270429","tags":["report"]},{"url":"https://bugzilla.suse.com/1270470","tags":["report"]},{"url":"https://bugzilla.suse.com/1270582","tags":["report"]},{"url":"https://bugzilla.suse.com/1270683","tags":["report"]},{"url":"https://bugzilla.suse.com/1270721","tags":["report"]},{"url":"https://bugzilla.suse.com/1270831","tags":["report"]},{"url":"https://bugzilla.suse.com/1270877","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44662","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623070-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-24898","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7891-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-53159","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3416","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1271911","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-24898","title":"rust openssl ssl::select_next_proto use after free","description":"rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer but with a lifetime bound to the `client` argument. In situations where the `sever` buffer's lifetime is shorter than the `client` buffer's, this can cause a use after free. This could cause the server to crash or to return arbitrary memory contents to the client. The crate`openssl` version 0.10.70 fixes the signature of `ssl::select_next_proto` to properly constrain the output buffer's lifetime to that of both input buffers. Users are advised to upgrade. In standard usage of `ssl::select_next_proto` in the callback passed to `SslContextBuilder::set_alpn_select_callback`, code is only affected if the `server` buffer is constructed *within* the callback.","status":"published","published":"2025-02-03T17:57:39.558Z","modified":"2025-02-12T20:51:24.929Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:32:43.770144Z"}],"euvd":[{"id":"EUVD-2025-0223","description":"rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer but with a lifetime bound to the `client` argument. In situations where the `sever` buffer's lifetime is shorter than the `client` buffer's, this can cause a use after free. This could cause the server to crash or to return arbitrary memory contents to the client. The crate`openssl` version 0.10.70 fixes the signature of `ssl::select_next_proto` to properly constrain the output buffer's lifetime to that of both input buffers. Users are advised to upgrade. In standard usage of `ssl::select_next_proto` in the callback passed to `SslContextBuilder::set_alpn_select_callback`, code is only affected if the `server` buffer is constructed *within* the callback.","status":"published","published":"2025-02-03T17:57:39Z","modified":"2025-02-12T20:51:24Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-03T00:03:55.950052Z"}],"ghsa":[{"id":"GHSA-rpmj-rpgj-qmpm","title":"rust-openssl ssl::select_next_proto use after free","description":"### Impact\n`ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer but with a lifetime bound to the `client` argument. In situations where the `server` buffer's lifetime is shorter than the `client` buffer's, this can cause a use after free. This could cause the server to crash or to return arbitrary memory contents to the client.\n\n### Patches\n`openssl` 0.10.70 fixes the signature of `ssl::select_next_proto` to properly constrain the output buffer's lifetime to that of both input buffers.\n\n### Workarounds\nIn standard usage of `ssl::select_next_proto` in the callback passed to `SslContextBuilder::set_alpn_select_callback`, code is only affected if the `server` buffer is constructed *within* the callback. For example:\n\nNot vulnerable - the server buffer has a `'static` lifetime:\n```rust\nbuilder.set_alpn_select_callback(|_, client_protos| {\n    ssl::select_next_proto(b\"\\x02h2\", client_protos).ok_or_else(AlpnError::NOACK)\n});\n```\n\nNot vulnerable - the server buffer outlives the handshake:\n```rust\nlet server_protos = b\"\\x02h2\".to_vec();\nbuilder.set_alpn_select_callback(|_, client_protos| {\n    ssl::select_next_proto(\u0026server_protos, client_protos).ok_or_else(AlpnError::NOACK)\n});\n```\n\nVulnerable - the server buffer is freed when the callback returns:\n```rust\nbuilder.set_alpn_select_callback(|_, client_protos| {\n    let server_protos = b\"\\x02h2\".to_vec();\n    ssl::select_next_proto(\u0026server_protos, client_protos).ok_or_else(AlpnError::NOACK)\n});\n```\n\n### References\nhttps://github.com/sfackler/rust-openssl/pull/2360","status":"published","published":"2025-02-03T17:56:46Z","modified":"2025-02-11T09:30:32Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:38:30.754382Z"}],"nvd":[{"id":"CVE-2025-24898","description":"rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer but with a lifetime bound to the `client` argument. In situations where the `sever` buffer's lifetime is shorter than the `client` buffer's, this can cause a use after free. This could cause the server to crash or to return arbitrary memory contents to the client. The crate`openssl` version 0.10.70 fixes the signature of `ssl::select_next_proto` to properly constrain the output buffer's lifetime to that of both input buffers. Users are advised to upgrade. In standard usage of `ssl::select_next_proto` in the callback passed to `SslContextBuilder::set_alpn_select_callback`, code is only affected if the `server` buffer is constructed *within* the callback.","status":"published","published":"2025-02-03T18:15:43.077Z","modified":"2026-06-17T08:59:48.49Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:10:49.841519Z"}],"osv":[{"id":"CVE-2025-24898","title":"rust openssl ssl::select_next_proto use after free","description":"rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer but with a lifetime bound to the `client` argument. In situations where the `sever` buffer's lifetime is shorter than the `client` buffer's, this can cause a use after free. This could cause the server to crash or to return arbitrary memory contents to the client. The crate`openssl` version 0.10.70 fixes the signature of `ssl::select_next_proto` to properly constrain the output buffer's lifetime to that of both input buffers. Users are advised to upgrade. In standard usage of `ssl::select_next_proto` in the callback passed to `SslContextBuilder::set_alpn_select_callback`, code is only affected if the `server` buffer is constructed *within* the callback.","status":"published","published":"2025-02-03T17:57:39.558Z","modified":"2026-10-28T02:30:24.749601145Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:44:47.386092Z"},{"id":"DEBIAN-CVE-2025-24898","description":"rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer but with a lifetime bound to the `client` argument. In situations where the `sever` buffer's lifetime is shorter than the `client` buffer's, this can cause a use after free. This could cause the server to crash or to return arbitrary memory contents to the client. The crate`openssl` version 0.10.70 fixes the signature of `ssl::select_next_proto` to properly constrain the output buffer's lifetime to that of both input buffers. Users are advised to upgrade. In standard usage of `ssl::select_next_proto` in the callback passed to `SslContextBuilder::set_alpn_select_callback`, code is only affected if the `server` buffer is constructed *within* the callback.","status":"published","published":"2025-02-03T18:15:43.077Z","modified":"2026-09-01T20:05:44.736278934Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"GHSA-rpmj-rpgj-qmpm","title":"rust-openssl ssl::select_next_proto use after free","description":"### Impact\n`ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer but with a lifetime bound to the `client` argument. In situations where the `server` buffer's lifetime is shorter than the `client` buffer's, this can cause a use after free. This could cause the server to crash or to return arbitrary memory contents to the client.\n\n### Patches\n`openssl` 0.10.70 fixes the signature of `ssl::select_next_proto` to properly constrain the output buffer's lifetime to that of both input buffers.\n\n### Workarounds\nIn standard usage of `ssl::select_next_proto` in the callback passed to `SslContextBuilder::set_alpn_select_callback`, code is only affected if the `server` buffer is constructed *within* the callback. For example:\n\nNot vulnerable - the server buffer has a `'static` lifetime:\n```rust\nbuilder.set_alpn_select_callback(|_, client_protos| {\n    ssl::select_next_proto(b\"\\x02h2\", client_protos).ok_or_else(AlpnError::NOACK)\n});\n```\n\nNot vulnerable - the server buffer outlives the handshake:\n```rust\nlet server_protos = b\"\\x02h2\".to_vec();\nbuilder.set_alpn_select_callback(|_, client_protos| {\n    ssl::select_next_proto(\u0026server_protos, client_protos).ok_or_else(AlpnError::NOACK)\n});\n```\n\nVulnerable - the server buffer is freed when the callback returns:\n```rust\nbuilder.set_alpn_select_callback(|_, client_protos| {\n    let server_protos = b\"\\x02h2\".to_vec();\n    ssl::select_next_proto(\u0026server_protos, client_protos).ok_or_else(AlpnError::NOACK)\n});\n```\n\n### References\nhttps://github.com/sfackler/rust-openssl/pull/2360","status":"published","published":"2025-02-03T17:56:46Z","modified":"2026-09-10T03:50:06.186180196Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:46:56.281047Z"},{"id":"OESA-2025-1120","title":"three-eight-nine-ds-base security update","description":"389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration.\r\n\r\nSecurity Fix(es):\n\nrust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument\u0026apos;s buffer but with a lifetime bound to the `client` argument. In situations where the `sever` buffer\u0026apos;s lifetime is shorter than the `client` buffer\u0026apos;s, this can cause a use after free. This could cause the server to crash or to return arbitrary memory contents to the client. The crate`openssl` version 0.10.70 fixes the signature of `ssl::select_next_proto` to properly constrain the output buffer\u0026apos;s lifetime to that of both input buffers. Users are advised to upgrade. In standard usage of `ssl::select_next_proto` in the callback passed to `SslContextBuilder::set_alpn_select_callback`, code is only affected if the `server` buffer is constructed *within* the callback.(CVE-2025-24898)","status":"published","published":"2025-02-14T11:08:13Z","modified":"2026-08-18T01:18:46.806972678Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2025-1121","title":"three-eight-nine-ds-base security update","description":"389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration.\r\n\r\nSecurity Fix(es):\n\nrust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument\u0026apos;s buffer but with a lifetime bound to the `client` argument. In situations where the `sever` buffer\u0026apos;s lifetime is shorter than the `client` buffer\u0026apos;s, this can cause a use after free. This could cause the server to crash or to return arbitrary memory contents to the client. The crate`openssl` version 0.10.70 fixes the signature of `ssl::select_next_proto` to properly constrain the output buffer\u0026apos;s lifetime to that of both input buffers. Users are advised to upgrade. In standard usage of `ssl::select_next_proto` in the callback passed to `SslContextBuilder::set_alpn_select_callback`, code is only affected if the `server` buffer is constructed *within* the callback.(CVE-2025-24898)","status":"published","published":"2025-02-14T11:08:13Z","modified":"2026-08-18T01:18:46.740281416Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2026-3710","title":"rpm-ostree security update","description":"rpm-ostree is a hybrid image/package system.  It supports \u0026amp;quot;composing\u0026amp;quot; packages on a build server into an OSTree repository, which can then be replicated by client systems with atomic upgrades. Additionally, unlike many \u0026amp;quot;pure\u0026amp;quot; image systems, with rpm-ostree each client system can layer on additional packages, providing a \u0026amp;quot;best of both worlds\u0026amp;quot; approach.\r\n\r\nSecurity Fix(es):\n\nrust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument\u0026apos;s buffer but with a lifetime bound to the `client` argument. In situations where the `sever` buffer\u0026apos;s lifetime is shorter than the `client` buffer\u0026apos;s, this can cause a use after free. This could cause the server to crash or to return arbitrary memory contents to the client. The crate`openssl` version 0.10.70 fixes the signature of `ssl::select_next_proto` to properly constrain the output buffer\u0026apos;s lifetime to that of both input buffers. Users are advised to upgrade. In standard usage of `ssl::select_next_proto` in the callback passed to `SslContextBuilder::set_alpn_select_callback`, code is only affected if the `server` buffer is constructed *within* the callback.(CVE-2025-24898)","status":"published","published":"2026-09-14T16:33:37Z","modified":"2026-09-13T16:45:22.332782494Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3711","title":"rpm-ostree security update","description":"rpm-ostree is a hybrid image/package system.  It supports \u0026amp;quot;composing\u0026amp;quot; packages on a build server into an OSTree repository, which can then be replicated by client systems with atomic upgrades. Additionally, unlike many \u0026amp;quot;pure\u0026amp;quot; image systems, with rpm-ostree each client system can layer on additional packages, providing a \u0026amp;quot;best of both worlds\u0026amp;quot; approach.\r\n\r\nSecurity Fix(es):\n\nrust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument\u0026apos;s buffer but with a lifetime bound to the `client` argument. In situations where the `sever` buffer\u0026apos;s lifetime is shorter than the `client` buffer\u0026apos;s, this can cause a use after free. This could cause the server to crash or to return arbitrary memory contents to the client. The crate`openssl` version 0.10.70 fixes the signature of `ssl::select_next_proto` to properly constrain the output buffer\u0026apos;s lifetime to that of both input buffers. Users are advised to upgrade. In standard usage of `ssl::select_next_proto` in the callback passed to `SslContextBuilder::set_alpn_select_callback`, code is only affected if the `server` buffer is constructed *within* the callback.(CVE-2025-24898)","status":"published","published":"2026-09-14T16:33:37Z","modified":"2026-09-13T16:45:22.201750109Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3712","title":"rpm-ostree security update","description":"rpm-ostree is a hybrid image/package system.  It supports \u0026amp;quot;composing\u0026amp;quot; packages on a build server into an OSTree repository, which can then be replicated by client systems with atomic upgrades. Additionally, unlike many \u0026amp;quot;pure\u0026amp;quot; image systems, with rpm-ostree each client system can layer on additional packages, providing a \u0026amp;quot;best of both worlds\u0026amp;quot; approach.\r\n\r\nSecurity Fix(es):\n\nrust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument\u0026apos;s buffer but with a lifetime bound to the `client` argument. In situations where the `sever` buffer\u0026apos;s lifetime is shorter than the `client` buffer\u0026apos;s, this can cause a use after free. This could cause the server to crash or to return arbitrary memory contents to the client. The crate`openssl` version 0.10.70 fixes the signature of `ssl::select_next_proto` to properly constrain the output buffer\u0026apos;s lifetime to that of both input buffers. Users are advised to upgrade. In standard usage of `ssl::select_next_proto` in the callback passed to `SslContextBuilder::set_alpn_select_callback`, code is only affected if the `server` buffer is constructed *within* the callback.(CVE-2025-24898)","status":"published","published":"2026-09-14T16:33:38Z","modified":"2026-09-13T16:45:22.483759017Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"RHSA-2025:7147","title":"Red Hat Security Advisory: rpm-ostree security update","status":"published","published":"2025-05-13T10:05:03Z","modified":"2026-10-14T10:10:34Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:7160","title":"Red Hat Security Advisory: bootc security update","status":"published","published":"2025-05-13T10:05:04Z","modified":"2026-10-14T10:10:35Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:7241","title":"Red Hat Security Advisory: rust-bootupd security update","status":"published","published":"2025-05-13T10:05:05Z","modified":"2026-10-14T10:10:35Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:7313","title":"Red Hat Security Advisory: keylime-agent-rust security update","status":"published","published":"2025-05-14T10:06:04Z","modified":"2026-10-14T10:10:37Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:7317","title":"Red Hat Security Advisory: python3.12-cryptography security update","status":"published","published":"2025-05-14T10:06:05Z","modified":"2026-10-14T10:10:37Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RLSA-2025:7160","title":"Moderate: bootc security update","description":"Bootable container system\n\nSecurity Fix(es):\n\n* rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-04T00:49:46.306614Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:7241","title":"Moderate: rust-bootupd security update","description":"Bootloader updater\n\nSecurity Fix(es):\n\n* rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-04T00:49:46.793462Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:7313","title":"Moderate: keylime-agent-rust security update","description":"Rust agent for Keylime\n\nSecurity Fix(es):\n\n* rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-04T00:49:47.259416Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:7317","title":"Moderate: python3.12-cryptography security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-07T17:39:29.035351Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"UBUNTU-CVE-2025-24898","description":"rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer but with a lifetime bound to the `client` argument. In situations where the `sever` buffer's lifetime is shorter than the `client` buffer's, this can cause a use after free. This could cause the server to crash or to return arbitrary memory contents to the client. The crate`openssl` version 0.10.70 fixes the signature of `ssl::select_next_proto` to properly constrain the output buffer's lifetime to that of both input buffers. Users are advised to upgrade. In standard usage of `ssl::select_next_proto` in the callback passed to `SslContextBuilder::set_alpn_select_callback`, code is only affected if the `server` buffer is constructed *within* the callback.","status":"published","published":"2025-02-03T18:15:00Z","modified":"2026-02-04T02:29:01.052356Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T16:55:26.330196Z"},{"id":"ALSA-2025:7147","title":"Moderate: rpm-ostree security update","description":"The rpm-ostree tool binds together the RPM packaging model with the OSTree model of bootable file system trees. It provides commands that can be used both on client systems and on server-side composes. The rpm-ostree-client package provides commands for client systems to perform upgrades and rollbacks.  \n\nSecurity Fix(es):  \n\n  * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.\n","status":"published","published":"2025-05-13T00:00:00Z","modified":"2026-10-29T11:31:38.692147473Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:7160","title":"Moderate: bootc security update","description":"Bootable container system  \n\nSecurity Fix(es):  \n\n  * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.\n","status":"published","published":"2025-05-13T00:00:00Z","modified":"2026-10-29T11:31:38.456679088Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:7241","title":"Moderate: rust-bootupd security update","description":"Bootloader updater  \n\nSecurity Fix(es):  \n\n  * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.\n","status":"published","published":"2025-05-13T00:00:00Z","modified":"2026-10-29T11:32:29.321917975Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:7313","title":"Moderate: keylime-agent-rust security update","description":"Rust agent for Keylime  \n\nSecurity Fix(es):  \n\n  * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.\n","status":"published","published":"2025-05-13T00:00:00Z","modified":"2026-10-29T11:32:29.67995496Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:7317","title":"Moderate: python3.12-cryptography security update","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  \n\nSecurity Fix(es):  \n\n  * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.\n","status":"published","published":"2025-05-13T00:00:00Z","modified":"2026-10-29T11:32:29.717402466Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"AZL-56427","title":"CVE-2025-24898 affecting package 389-ds-base 3.1.1-12","description":"rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer but with a lifetime bound to the `client` argument. In situations where the `sever` buffer's lifetime is shorter than the `client` buffer's, this can cause a use after free. This could cause the server to crash or to return arbitrary memory contents to the client. The crate`openssl` version 0.10.70 fixes the signature of `ssl::select_next_proto` to properly constrain the output buffer's lifetime to that of both input buffers. Users are advised to upgrade. In standard usage of `ssl::select_next_proto` in the callback passed to `SslContextBuilder::set_alpn_select_callback`, code is only affected if the `server` buffer is constructed *within* the callback.","status":"published","published":"2025-02-03T18:15:43Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:21.162429Z"},{"id":"DLA-4049-1","title":"rust-openssl - security update","status":"published","published":"2025-02-11T00:00:00Z","modified":"2026-03-09T01:20:59.340923Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"openSUSE-SU-2025:14814-1","title":"obs-service-cargo-4.5.0-2.1 on GA media","description":"These are all security issues fixed in the obs-service-cargo-4.5.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-02-16T00:00:00Z","modified":"2026-02-04T03:55:34.414725Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2026:21464-1","title":"Security update for libkrun","description":"This update for libkrun fixes the following issues:\n\n- CVE-2025-24898: openssl: use-after-free in `ssl::select_next_proto` due to improper lifetime handling (bsc#1270429).\n- CVE-2026-41676: openssl: short buffer overflow via `Deriver:derive` and `PkeyCtxRef:derive` when using OpenSSL 1.1.1\n  (bsc#1270198).\n- CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length\n  (bsc#1270582).\n- CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in `aes::unwrap_key()` (bsc#1270683).\n- CVE-2026-41681: openssl: stack corruption due to `MdCtxRef::digest_final()` writing past caller buffer with no length\n  check (bsc#1270721).\n- CVE-2026-41898: openssl: information leak to network peers due to unchecked callback-returned length in PSK and\n  cookie generate trampolines (bsc#1270831).\n- CVE-2026-42327: openssl: undefined behavior in `X509Ref::ocsp_responders` when processing certificates with non-UTF-8\n  OCSP URLs (bsc#1270470).\n- CVE-2026-44662: openssl: heap buffer overflow when encrypting with AES key-wrap-with-padding (bsc#1270877).\n","status":"published","published":"2026-07-28T11:13:36Z","modified":"2026-07-30T18:24:15.376456836Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"RUSTSEC-2025-0004","title":"ssl::select_next_proto use after free","description":"In `openssl` versions before `0.10.70`, `ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer but with a lifetime bound to the `client` argument. In situations where the `server` buffer's lifetime is shorter than the `client` buffer's, this can cause a use after free. This could cause the server to crash or to return arbitrary memory contents to the client.\n\n`openssl` 0.10.70 fixes the signature of `ssl::select_next_proto` to properly constrain the output buffer's lifetime to that of both input buffers.\n\nIn standard usage of `ssl::select_next_proto` in the callback passed to `SslContextBuilder::set_alpn_select_callback`, code is only affected if the `server` buffer is constructed *within* the callback. For example:\n\nNot vulnerable - the server buffer has a `'static` lifetime:\n```rust\nbuilder.set_alpn_select_callback(|_, client_protos| {\n    ssl::select_next_proto(b\"\\x02h2\", client_protos).ok_or_else(AlpnError::NOACK)\n});\n```\n\nNot vulnerable - the server buffer outlives the handshake:\n```rust\nlet server_protos = b\"\\x02h2\".to_vec();\nbuilder.set_alpn_select_callback(|_, client_protos| {\n    ssl::select_next_proto(\u0026server_protos, client_protos).ok_or_else(AlpnError::NOACK)\n});\n```\n\nVulnerable - the server buffer is freed when the callback returns:\n```rust\nbuilder.set_alpn_select_callback(|_, client_protos| {\n    let server_protos = b\"\\x02h2\".to_vec();\n    ssl::select_next_proto(\u0026server_protos, client_protos).ok_or_else(AlpnError::NOACK)\n});\n```","status":"published","published":"2025-02-02T12:00:00Z","modified":"2026-10-12T18:00:12.406916247Z","updated_at":"2026-11-02T15:53:39.971022Z"},{"id":"SUSE-SU-2026:23036-1","title":"Security update for libkrun","description":"This update for libkrun fixes the following issues:\n\n- CVE-2025-24898: openssl: select_next_proto use after free in rust-openssl (bsc#1270429).\n- CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1\n  (bsc#1270198).\n- CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust-\n  openssl crate (bsc#1270582).\n- CVE-2026-41678: openssl: incorrect bounds assertion in aes key wrap in rust-openssl crate (bsc#1270683).\n- CVE-2026-41681: openssl: MdCtxRef::digest_final() writes past caller buffer with no length check in rust-openssl crate\n  (bsc#1270721).\n- CVE-2026-41898: openssl: unchecked callback-returned length in PSK and cookie generate trampolines can leak adjacent\n  memory in rust-openssl crate (bsc#1270831).\n- CVE-2026-42327: openssl: arbitrary code execution via specially crafted certificate in rust-openssl crate\n  (bsc#1270470).\n- CVE-2026-44662: openssl: heap buffer overflow when encrypting with AES key-wrap-with-padding in rust-openssl crate\n  (bsc#1270877).\n\nChanges for libkrun:\n\n- Update vendored openssl crate to version 0.10.81.\n","status":"published","published":"2026-07-28T17:32:56Z","modified":"2026-08-12T18:23:38.746176517Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23070-1","title":"Security update for libkrun","description":"This update for libkrun fixes the following issues:\n\n- CVE-2025-24898: openssl: use-after-free in `ssl::select_next_proto` due to improper lifetime handling (bsc#1270429).\n- CVE-2026-41676: openssl: short buffer overflow via `Deriver:derive` and `PkeyCtxRef:derive` when using OpenSSL 1.1.1\n  (bsc#1270198).\n- CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length\n  (bsc#1270582).\n- CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in `aes::unwrap_key()` (bsc#1270683).\n- CVE-2026-41681: openssl: stack corruption due to `MdCtxRef::digest_final()` writing past caller buffer with no length\n  check (bsc#1270721).\n- CVE-2026-41898: openssl: information leak to network peers due to unchecked callback-returned length in PSK and\n  cookie generate trampolines (bsc#1270831).\n- CVE-2026-42327: openssl: undefined behavior in `X509Ref::ocsp_responders` when processing certificates with non-UTF-8\n  OCSP URLs (bsc#1270470).\n- CVE-2026-44662: openssl: heap buffer overflow when encrypting with AES key-wrap-with-padding (bsc#1270877).\n","status":"published","published":"2026-07-30T08:54:20Z","modified":"2026-08-14T18:23:35.999154742Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"USN-7891-1","title":"rust-openssl vulnerabilities","description":"Matt Mastracci discovered that rust-openssl was incorrectly handling server\nlifetimes in certain functions. An attacker could possibly use this issue\nto cause a denial of service or run arbitrary memory content to the client.\n(CVE-2025-24898)\n\nIt was discovered that rust-openssl was incorrectly handling empty strings\nwhen setting the host in certain functions. An attacker could possibly use\nthis issue to cause a denial of service. This issue only affected\nUbuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-53159)\n\nIt was discovered that rust-openssl was incorrectly handling property\narguments in certain functions. An attacker could possibly use this\nissue to cause a denial of service. This issue only affected\nUbuntu 24.04 LTS. (CVE-2025-3416)","status":"published","published":"2025-11-26T12:56:31Z","modified":"2026-10-27T04:16:08.899188778Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}