{"id":"CVE-2025-3416","aliases":["AZL-61804","DEBIAN-CVE-2025-3416","EUVD-2025-10375","GHSA-mgh2-hf68-73c8","OESA-2026-2944","OESA-2026-2945","OESA-2026-2946","SUSE-SU-2025:01591-1","SUSE-SU-2025:01619-1","SUSE-SU-2025:01631-1","SUSE-SU-2025:01662-1","SUSE-SU-2025:01662-2","SUSE-SU-2025:01806-1","SUSE-SU-2025:01807-1","SUSE-SU-2025:01818-1","SUSE-SU-2025:02017-1","SUSE-SU-2025:02166-1","SUSE-SU-2025:02809-1","SUSE-SU-2025:02810-1","SUSE-SU-2025:02811-1","SUSE-SU-2025:02896-1","SUSE-SU-2025:03298-1","SUSE-SU-2025:03306-1","SUSE-SU-2025:03307-1","SUSE-SU-2025:03445-1","SUSE-SU-2025:1560-1","SUSE-SU-2025:1570-1","SUSE-SU-2025:20352-1","SUSE-SU-2025:20365-1","SUSE-SU-2025:20407-1","SUSE-SU-2025:20429-1","SUSE-SU-2025:20463-1","SUSE-SU-2025:20474-1","SUSE-SU-2025:20716-1","SUSE-SU-2025:20717-1","SUSE-SU-2025:20783-1","SUSE-SU-2025:20858-1","SUSE-SU-2025:3783-1","SUSE-SU-2025:3784-1","SUSE-SU-2025:3785-1","SUSE-SU-2025:3786-1","SUSE-SU-2026:0620-1","SUSE-SU-2026:22917-1","SUSE-SU-2026:23071-1","SUSE-SU-2026:3022-1","UBUNTU-CVE-2025-3416","USN-7891-1","openSUSE-SU-2025:0152-1","openSUSE-SU-2025:15056-1","openSUSE-SU-2025:15057-1","openSUSE-SU-2025:15060-1","openSUSE-SU-2025:15061-1","openSUSE-SU-2025:15062-1","openSUSE-SU-2025:15063-1","openSUSE-SU-2025:15065-1","openSUSE-SU-2025:15066-1","openSUSE-SU-2025:15068-1","openSUSE-SU-2025:15071-1","openSUSE-SU-2025:15173-1","openSUSE-SU-2025:15217-1","openSUSE-SU-2025:15238-1","openSUSE-SU-2025:15346-1","openSUSE-SU-2026:11475-1","openSUSE-SU-2026:11818-1","openSUSE-SU-2026:11838-1","openSUSE-SU-2026:21560-1","openSUSE-SU-2026:21605-1","openSUSE-SU-2026:22189-1"],"status":"published","title":"Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`","description":"A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.","severity":{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00526,"percentile":0.44859,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2025-04-08T18:24:22Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Debian:13","package":"rust-openssl","fixed_in":["0.10.72-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"rust-openssl","fixed_in":["0.10.72-1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"s390-tools","fixed_in":["2.31.0-150600.8.16.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"s390-tools","fixed_in":["2.31.0-150600.8.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"s390-tools","fixed_in":["2.31.0-150400.7.31.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"s390-tools","fixed_in":["2.31.0-150400.7.31.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"s390-tools","fixed_in":["2.31.0-150400.7.31.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"s390-tools","fixed_in":["2.31.0-150400.7.31.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP6","package":"python-cryptography","fixed_in":["41.0.3-150600.23.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"python-cryptography","fixed_in":["41.0.3-150600.23.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python-cryptography","fixed_in":["41.0.3-150600.23.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"389-ds","fixed_in":["2.2.10~git99.aa5d0ecbf-150600.8.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"389-ds","fixed_in":["2.2.10~git99.aa5d0ecbf-150600.8.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"389-ds","fixed_in":["2.2.10~git99.aa5d0ecbf-150500.3.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"389-ds","fixed_in":["2.2.10~git99.aa5d0ecbf-150500.3.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"389-ds","fixed_in":["2.2.10~git99.aa5d0ecbf-150500.3.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"389-ds","fixed_in":["2.2.10~git99.aa5d0ecbf-150500.3.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-cryptography","fixed_in":["41.0.3-150400.16.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"s390-tools","fixed_in":["2.37.0-150700.4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"cargo-c","fixed_in":["0.10.3~git0.ee7d7ef-150600.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"s390-tools","fixed_in":["2.31.0-2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"s390-tools","fixed_in":["2.31.0-slfo.1.1_2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"python-cryptography","fixed_in":["42.0.4-2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"afterburn","fixed_in":["5.8.2-1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"python-cryptography","fixed_in":["42.0.4-slfo.1.1_2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"afterburn","fixed_in":["5.8.2-slfo.1.1_1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"rust-openssl","fixed_in":["0.10.57-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP6","package":"kanidm","fixed_in":["1.6.2~git0.a20663ea8-bp156.29.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"kanidm","fixed_in":["1.6.2~git0.a20663ea8-bp156.29.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"389-ds","fixed_in":["3.1.2~git90.2bc7250be-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"cargo-c","fixed_in":["0.10.3~git0.ee7d7ef-3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"kanidm","fixed_in":["1.6.0~git0.d7ae0f336-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"rustup","fixed_in":["1.28.1~0-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"sccache","fixed_in":["0.9.1~22-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"tealdeer","fixed_in":["1.7.1-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"wasm-bindgen","fixed_in":["0.2.97~0-3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"ldap-proxy","fixed_in":["0.1.0~90-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"sequoia-octopus-librnp","fixed_in":["1.11.0-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"afterburn","fixed_in":["5.7.0.git103.bae893c-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"s390-tools","fixed_in":["2.37.0-4.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libetebase","fixed_in":["0.5.8-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"rust-keylime","fixed_in":["0.2.7+117-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.1.1-12"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.10.45-1","0.10.57-1","0.10.64-1","0.10.68-1","0.10.70-1","0.10.72-1","0.10.73-1","0.10.78-1","0.10.79-1","0.10.81-1"]},{"source":"osv","ecosystem":"Debian:13","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.72-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.72-1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"rpm-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.16-11.oe2203sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"rpm-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2024.4-7.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"rpm-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2024.4-7.oe2403sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python-maturin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-150600.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"s390-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.0-150600.8.16.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"s390-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.0-150600.8.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"s390-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.0-150400.7.31.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"s390-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.0-150400.7.31.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"s390-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.0-150400.7.31.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"s390-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.0-150400.7.31.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP6","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"41.0.3-150600.23.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"41.0.3-150600.23.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"41.0.3-150600.23.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10~git99.aa5d0ecbf-150600.8.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10~git99.aa5d0ecbf-150600.8.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10~git99.aa5d0ecbf-150500.3.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10~git99.aa5d0ecbf-150500.3.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10~git99.aa5d0ecbf-150500.3.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10~git99.aa5d0ecbf-150500.3.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"41.0.3-150400.16.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"s390-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.0-150700.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"himmelblau","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.17+git.0.1ebdab0-150700.3.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"rust-keylime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.7+141-150400.3.7.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"rust-keylime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.7+141-150400.3.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"rust-keylime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.7+141-150500.3.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"rustup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0~0-150600.10.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"rustup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0~0-150600.10.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"rustup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0~0-150600.10.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"sevctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-150700.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"sevctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-150600.4.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"sevctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-150600.4.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"snpguest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.2-150600.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"snpguest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.2-150600.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cargo-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.3~git0.ee7d7ef-150600.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"s390-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.0-2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"s390-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.0-slfo.1.1_2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"42.0.4-2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"afterburn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"42.0.4-slfo.1.1_2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"afterburn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.2-slfo.1.1_1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"sevctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"rust-keylime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8+12-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"sevctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-slfo.1.1_3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"rust-keylime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8+12-slfo.1.1_1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"afterburn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.0.git21.a73f509-150300.3.5.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"afterburn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.0.git21.a73f509-150500.3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"afterburn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.0.git21.a73f509-150400.3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"afterburn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.0.git21.a73f509-150400.3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"snpguest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.0-150700.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"afterburn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0.git73.b97f772-1.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"afterburn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0.git73.b97f772-slfo.1.1_1.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0~0-150600.10.11.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0~0-150600.10.11.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0~0-150600.10.11.1"}]}],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.57-1ubuntu0.1~esm1"}]}],"versions":["0.10.45-1","0.10.57-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.23-1ubuntu0.1~esm1"}]}],"versions":["0.10.23-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.36-1ubuntu0.1~esm1"}]}],"versions":["0.10.29-1","0.10.36-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.57-1ubuntu0.1~esm1"}]}],"versions":["0.10.45-1","0.10.57-1"],"bundled":3},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"kanidm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2~git0.a20663ea8-bp156.29.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kanidm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2~git0.a20663ea8-bp156.29.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2~git90.2bc7250be-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cargo-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.3~git0.ee7d7ef-3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kanidm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0~git0.d7ae0f336-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rustup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.1~0-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1~22-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"tealdeer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"wasm-bindgen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.97~0-3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ldap-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.0~90-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"sequoia-octopus-librnp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"afterburn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.0.git103.bae893c-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"s390-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.0-4.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"flake-pilot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.19-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libetebase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.8-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rust-keylime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.7+117-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kak-lsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.2-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"shadowsocks-rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.0-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"pijul","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0~beta.23-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"kak-lsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.2-bp160.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"forgejo-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-bp160.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"shadowsocks-libev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.6-bp160.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"shadowsocks-rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.0-bp160.1.1"}]}],"bundled":6}],"products":[{"vendor":"red hat","product":"red hat directory server 11"},{"vendor":"red hat","product":"red hat directory server 12"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"red hat","product":"red hat trusted artifact signer"},{"vendor":"red hat","product":"red hat trusted profile analyzer"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2025-3416","tags":["vdb-entry","x_refsource_REDHAT","advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357560","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://github.com/sfackler/rust-openssl","tags":["package","report"]},{"url":"https://github.com/sfackler/rust-openssl/commit/87085bd67896b7f92e6de35d081f607a334beae4","tags":["fix","report"]},{"url":"https://github.com/sfackler/rust-openssl/pull/2390","tags":["fix","report"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2025-0022.html","tags":["advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3416","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-mgh2-hf68-73c8"},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/3xxx/CVE-2025-3416.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-3416","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2944","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53159","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12224","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2945","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2946","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501591-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1242631","tags":["report"]},{"url":"https://bugzilla.suse.com/1243177","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4574","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501619-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1242622","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501631-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501662-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501662-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501806-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1241016","tags":["report"]},{"url":"https://bugzilla.suse.com/1241988","tags":["report"]},{"url":"https://bugzilla.suse.com/1242666","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501807-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501818-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502017-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502166-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1242648","tags":["report"]},{"url":"https://bugzilla.suse.com/1244202","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5791","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502809-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1210344","tags":["report"]},{"url":"https://bugzilla.suse.com/1223234","tags":["report"]},{"url":"https://bugzilla.suse.com/1229952","tags":["report"]},{"url":"https://bugzilla.suse.com/1230029","tags":["report"]},{"url":"https://bugzilla.suse.com/1242623","tags":["report"]},{"url":"https://bugzilla.suse.com/1243861","tags":["report"]},{"url":"https://bugzilla.suse.com/1247193","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-26964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-12224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-32650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58266","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502810-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502811-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502896-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1243428","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503298-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1242617","tags":["report"]},{"url":"https://bugzilla.suse.com/1243862","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503306-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1242618","tags":["report"]},{"url":"https://bugzilla.suse.com/1243860","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503307-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503445-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1242601","tags":["report"]},{"url":"https://bugzilla.suse.com/1243869","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251560-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251570-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1242675","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520352-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520365-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520407-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520429-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1244675","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520463-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520474-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1242665","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520716-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520717-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1248006","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-58266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55159","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520783-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520858-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253783-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1196972","tags":["report"]},{"url":"https://bugzilla.suse.com/1243850","tags":["report"]},{"url":"https://bugzilla.suse.com/1244199","tags":["report"]},{"url":"https://bugzilla.suse.com/1250471","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24713","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253784-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253785-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253786-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260620-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1257877","tags":["report"]},{"url":"https://bugzilla.suse.com/1257927","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25727","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622917-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1270175","tags":["report"]},{"url":"https://bugzilla.suse.com/1270483","tags":["report"]},{"url":"https://bugzilla.suse.com/1270555","tags":["report"]},{"url":"https://bugzilla.suse.com/1270651","tags":["report"]},{"url":"https://bugzilla.suse.com/1270787","tags":["report"]},{"url":"https://bugzilla.suse.com/1270817","tags":["report"]},{"url":"https://bugzilla.suse.com/1270886","tags":["report"]},{"url":"https://bugzilla.suse.com/1270949","tags":["report"]},{"url":"https://bugzilla.suse.com/1271348","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45784","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623071-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263022-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1210346","tags":["report"]},{"url":"https://bugzilla.suse.com/1223238","tags":["report"]},{"url":"https://bugzilla.suse.com/1229955","tags":["report"]},{"url":"https://bugzilla.suse.com/1242611","tags":["report"]},{"url":"https://bugzilla.suse.com/1243868","tags":["report"]},{"url":"https://bugzilla.suse.com/1257923","tags":["report"]},{"url":"https://bugzilla.suse.com/1270206","tags":["report"]},{"url":"https://bugzilla.suse.com/1270512","tags":["report"]},{"url":"https://bugzilla.suse.com/1270559","tags":["report"]},{"url":"https://bugzilla.suse.com/1270693","tags":["report"]},{"url":"https://bugzilla.suse.com/1270736","tags":["report"]},{"url":"https://bugzilla.suse.com/1270869","tags":["report"]},{"url":"https://bugzilla.suse.com/1270938","tags":["report"]},{"url":"https://bugzilla.suse.com/1270948","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-3416","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-3416","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7891-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-53159","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-24898","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2EUIAMLXNYWTKCVT23S2PH3T6GCUDMXN/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1242642","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GF7UPUPLTSVKTSYSG56E2JBZZMCXDICC/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GWWXIVQHEGH2OZ4UCFYYRS5F6NLAKJWW/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVDS567IPAUV6VTHEDGVSEBOHWB22YVY/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VX4Q35ILA273KGA3CPOW3LDUNKP24X3Y/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U4VQZJTALXIMVDT34YA3FHICAWRJKPES/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3OT4WHMT45ZP25LJLDX42CIM3GTZ7NOC/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Y7PSP66HTZD3NUBAD2IMYMVM4A2RUAJ7/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DIE3N26PES6TZQEPKRM2GK6L3QTVE3FW/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-50237","tags":["web"]},{"url":"https://bugzilla.suse.com/1242654","tags":["report"]},{"url":"https://bugzilla.suse.com/1248048","tags":["report"]},{"url":"https://bugzilla.suse.com/1274502","tags":["report"]},{"url":"https://bugzilla.suse.com/1242683","tags":["report"]},{"url":"https://bugzilla.suse.com/1248047","tags":["report"]},{"url":"https://bugzilla.suse.com/1274529","tags":["report"]},{"url":"https://bugzilla.suse.com/1242615","tags":["report"]},{"url":"https://bugzilla.suse.com/1274441","tags":["report"]},{"url":"https://bugzilla.suse.com/1282208","tags":["report"]},{"url":"https://bugzilla.suse.com/1284025","tags":["report"]},{"url":"https://bugzilla.suse.com/1284975","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93602","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-3416","title":"Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`","description":"A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.","status":"published","published":"2025-04-08T18:24:22.102Z","modified":"2026-11-06T14:50:58.16Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-416"],"updated_at":"2026-11-06T15:28:32.799664Z"}],"euvd":[{"id":"EUVD-2025-10375","description":"A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.","status":"published","published":"2025-04-08T18:24:22Z","modified":"2026-11-06T14:50:58Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-06T16:05:20.373498Z"}],"ghsa":[{"id":"GHSA-mgh2-hf68-73c8","title":"A flaw was found in OpenSSL's handling of the properties argument in certain functions. This...","description":"A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.","status":"published","published":"2025-04-08T21:31:40Z","modified":"2025-04-08T21:31:52Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:00:52.300715Z"}],"nvd":[{"id":"CVE-2025-3416","description":"A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.","status":"published","published":"2025-04-08T19:15:53.717Z","modified":"2026-11-06T15:17:05.43Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-06T18:00:49.930273Z"}],"osv":[{"id":"AZL-61804","title":"CVE-2025-3416 affecting package 389-ds-base 3.1.1-12","description":"A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.","status":"published","published":"2025-04-08T19:15:53Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-05T16:41:21.518778Z"},{"id":"CVE-2025-3416","title":"Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`","description":"A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.","status":"published","published":"2025-04-08T18:24:22.102Z","modified":"2026-11-08T02:30:58.275087795Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-416"],"updated_at":"2026-11-07T03:07:56.270712Z"},{"id":"DEBIAN-CVE-2025-3416","description":"A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.","status":"published","published":"2025-04-08T19:15:53.717Z","modified":"2026-11-07T09:47:22.990194809Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-07T10:14:39.995311Z"},{"id":"OESA-2026-2944","title":"rpm-ostree security update","description":"rpm-ostree is a hybrid image/package system.  It supports \u0026amp;quot;composing\u0026amp;quot; packages on a build server into an OSTree repository, which can then be replicated by client systems with atomic upgrades. Additionally, unlike many \u0026amp;quot;pure\u0026amp;quot; image systems, with rpm-ostree each client system can layer on additional packages, providing a \u0026amp;quot;best of both worlds\u0026amp;quot; approach.\r\n\r\nSecurity Fix(es):\n\nThe openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.(CVE-2023-53159)\n\nImproper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to another hostname.(CVE-2024-12224)\n\nA flaw was found in OpenSSL\u0026apos;s handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.(CVE-2025-3416)","status":"published","published":"2026-07-09T11:11:51Z","modified":"2026-08-18T01:21:16.853105916Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-2945","title":"rpm-ostree security update","description":"rpm-ostree is a hybrid image/package system.  It supports \u0026amp;quot;composing\u0026amp;quot; packages on a build server into an OSTree repository, which can then be replicated by client systems with atomic upgrades. Additionally, unlike many \u0026amp;quot;pure\u0026amp;quot; image systems, with rpm-ostree each client system can layer on additional packages, providing a \u0026amp;quot;best of both worlds\u0026amp;quot; approach.\r\n\r\nSecurity Fix(es):\n\nImproper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to another hostname.(CVE-2024-12224)\n\nA flaw was found in OpenSSL\u0026apos;s handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.(CVE-2025-3416)","status":"published","published":"2026-07-09T11:11:51Z","modified":"2026-08-18T01:21:16.757291272Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-2946","title":"rpm-ostree security update","description":"rpm-ostree is a hybrid image/package system.  It supports \u0026amp;quot;composing\u0026amp;quot; packages on a build server into an OSTree repository, which can then be replicated by client systems with atomic upgrades. Additionally, unlike many \u0026amp;quot;pure\u0026amp;quot; image systems, with rpm-ostree each client system can layer on additional packages, providing a \u0026amp;quot;best of both worlds\u0026amp;quot; approach.\r\n\r\nSecurity Fix(es):\n\nImproper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to another hostname.(CVE-2024-12224)\n\nA flaw was found in OpenSSL\u0026apos;s handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.(CVE-2025-3416)","status":"published","published":"2026-07-09T11:11:51Z","modified":"2026-08-18T01:21:16.799024871Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"UBUNTU-CVE-2025-3416","description":"A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.","status":"published","published":"2025-04-08T19:15:00Z","modified":"2026-02-04T03:48:32.983233Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T16:55:28.829873Z"},{"id":"openSUSE-SU-2025:0152-1","title":"Security update for kanidm","description":"This update for kanidm fixes the following issues:\n\n- Update to version 1.6.2~git0.a20663ea8:\n  * Release 1.6.2\n  * fix: clippy\n  * maint: typo in log message\n  * Set kid manually to prevent divergence\n  * Order keys in application JWKS / Fix rotation bug\n  * Fix toml issues with strings\n\n- Update to version 1.6.1~git0.2e4429eca:\n  * Release 1.6.1\n  * Resolve reload of oauth2 on startup (#3604)\n\n- CVE-2025-3416: Fixed openssl use after free (boo#1242642)\n\n- Update to version 1.6.0~git0.d7ae0f336:\n  * Release 1.6.0\n  * Avoid openssl for md4\n  * Fixes #3586, inverts the navbar button color (#3593)\n  * Release 1.6.0-pre\n  * chore: Release Notes (#3588)\n  * Do not require instances to exist during optional config load (#3591)\n  * Fix std::fmt::Display for some objects (#3587)\n  * Drop fernet in favour of JWE (#3577)\n  * docs: document how to configure oauth2 for opkssh (#3566)\n  * Add kanidm_ssh_authorizedkeys_direct to client deb (#3585)\n  * Bump the all group in /pykanidm with 2 updates (#3581)\n  * Update dependencies, fix a bunch of clippy lints (#3576)\n  * Support spaces in ssh key comments (#3575)\n  * 20250402 3423 proxy protocol (#3542)\n  * fix(web): Preserve SSH key content on form validation error (#3574)\n  * Bump the all group in /pykanidm with 3 updates (#3572)\n  * Bump the all group in /pykanidm with 2 updates (#3564)\n  * Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)\n  * Improve token handling (#3553)\n  * Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)\n  * Update fs4 and improve klock handling (#3551)\n  * Less footguns (#3552)\n  * Unify unix config parser (#3533)\n  * Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)\n  * Bump the all group in /pykanidm with 8 updates (#3547)\n  * implement notify-reload protocol (#3540)\n  * Allow versioning of server configs (#3515)\n  * 20250314 remove protected plugin (#3504)\n  * Bump the all group with 10 updates (#3539)\n  * Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)\n  * Bump the all group in /pykanidm with 4 updates (#3537)\n  * Add max_ber_size to freeipa sync (#3530)\n  * Bump the all group in /pykanidm with 5 updates (#3524)\n  * Update Concread\n  * Update developer_ethics.md (#3520)\n  * Update examples.md (#3519)\n  * Make schema indexing a boolean instead of index types (#3517)\n  * Add missing lld dependency and fix syntax typo (#3490)\n  * Update shell.nix to work with stable nixpkgs (#3514)\n  * Improve unixd tasks channel comments (#3510)\n  * Update kanidm_ppa_automation reference to latest (#3512)\n  * Add set-description to group tooling (#3511)\n  * packaging: Add kanidmd deb package, update documentation (#3506)\n  * Bump the all group in /pykanidm with 5 updates (#3508)\n  * 20250313 unixd system cache (#3501)\n  * Support rfc2307 memberUid in sync operations. (#3466)\n  * Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)\n  * Update Traefik config example to remove invalid label (#3500)\n  * Add uid/gid allocation table (#3498)\n  * 20250225 ldap testing in testkit (#3460)\n  * Bump the all group in /pykanidm with 5 updates (#3494)\n  * Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)\n  * Handle form-post as a response mode (#3467)\n  * book: fix english (#3487)\n  * Correct paths with Kanidm Tools Container (#3486)\n  * 20250225 improve test performance (#3459)\n  * Bump the all group in /pykanidm with 8 updates (#3484)\n  * Use lld by default on linux (#3477)\n  * 20250213 patch used wrong acp (#3432)\n  * Android support (#3475)\n  * Changed all CI/CD builds to locked (#3471)\n  * Make it a bit clearer that providers are needed (#3468)\n  * Fix incorrect credential generation in radius docs (#3465)\n  * Add crypt formats for password import (#3458)\n  * build: Create daemon image from scratch (#3452)\n  * address webfinger doc feedbacks (#3446)\n  * Bump the all group across 1 directory with 5 updates (#3453)\n  * [htmx] Admin ui for groups and users management (#3019)\n  * Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)\n  * Accept invalid certs and fix token_cache_path (#3439)\n  * Accept lowercase ldap pwd hashes (#3444)\n  * TOTP label verification (#3419)\n  * Rewrite WebFinger docs (#3443)\n  * doc: fix formatting of URL table, remove Caddyfile instructions (#3442)\n  * book: add OAuth2 Proxy example (#3434)\n  * Exempt idm_admin and admin from denied names. (#3429)\n  * Book fixes (#3433)\n  * ci: uniform Docker builds (#3430)\n  * 20240213 3413 domain displayname (#3425)\n  * Correct path to kanidm config example in documentation. (#3424)\n  * Support redirect uris with query parameters (#3422)\n  * Update to 1.6.0-dev (#3418)\n  * Remove white background from square logo. (#3417)\n  * feat: Added webfinger implementation (#3410)\n  * Bump the all group in /pykanidm with 7 updates (#3412)\n\n- Update to version 1.5.0~git2.21c2a1bd0:\n  * fix: documentation fail (#3555)\n","status":"published","published":"2025-05-12T16:01:48Z","modified":"2026-02-04T03:30:29.105646Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:15056-1","title":"389-ds-3.1.2~git90.2bc7250be-1.1 on GA media","description":"These are all security issues fixed in the 389-ds-3.1.2~git90.2bc7250be-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-07T00:00:00Z","modified":"2026-03-23T04:52:48.656424Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15057-1","title":"cargo-c-0.10.3~git0.ee7d7ef-3.1 on GA media","description":"These are all security issues fixed in the cargo-c-0.10.3~git0.ee7d7ef-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-07T00:00:00Z","modified":"2026-03-23T04:52:48.71903Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15060-1","title":"kanidm-1.6.0~git0.d7ae0f336-1.1 on GA media","description":"These are all security issues fixed in the kanidm-1.6.0~git0.d7ae0f336-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-07T00:00:00Z","modified":"2026-03-23T04:53:21.942357Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15061-1","title":"rustup-1.28.1~0-2.1 on GA media","description":"These are all security issues fixed in the rustup-1.28.1~0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-07T00:00:00Z","modified":"2026-03-23T04:53:22.071479Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15062-1","title":"sccache-0.9.1~22-2.1 on GA media","description":"These are all security issues fixed in the sccache-0.9.1~22-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-07T00:00:00Z","modified":"2026-03-23T04:53:22.022733Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15063-1","title":"tealdeer-1.7.1-2.1 on GA media","description":"These are all security issues fixed in the tealdeer-1.7.1-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-07T00:00:00Z","modified":"2026-03-23T04:53:22.047307Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15065-1","title":"wasm-bindgen-0.2.97~0-3.1 on GA media","description":"These are all security issues fixed in the wasm-bindgen-0.2.97~0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-07T00:00:00Z","modified":"2026-03-23T04:53:22.010558Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15066-1","title":"ldap-proxy-0.1.0~90-1.1 on GA media","description":"These are all security issues fixed in the ldap-proxy-0.1.0~90-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-08T00:00:00Z","modified":"2026-02-05T05:17:53.441335Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15068-1","title":"sequoia-octopus-librnp-1.11.0-2.1 on GA media","description":"These are all security issues fixed in the sequoia-octopus-librnp-1.11.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-08T00:00:00Z","modified":"2026-02-04T02:29:10.216407Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15071-1","title":"afterburn-5.7.0.git103.bae893c-1.1 on GA media","description":"These are all security issues fixed in the afterburn-5.7.0.git103.bae893c-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-09T00:00:00Z","modified":"2026-03-23T04:53:22.001776Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15173-1","title":"s390-tools-2.37.0-4.1 on GA media","description":"These are all security issues fixed in the s390-tools-2.37.0-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-27T00:00:00Z","modified":"2026-03-23T04:53:27.179332Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15217-1","title":"flake-pilot-3.1.19-1.1 on GA media","description":"These are all security issues fixed in the flake-pilot-3.1.19-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:30.41793Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15238-1","title":"libetebase-devel-0.5.8-1.1 on GA media","description":"These are all security issues fixed in the libetebase-devel-0.5.8-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:32.477881Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15346-1","title":"keylime-ima-policy-0.2.7+117-1.1 on GA media","description":"These are all security issues fixed in the keylime-ima-policy-0.2.7+117-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-15T00:00:00Z","modified":"2026-03-23T04:53:39.763688Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2026:11475-1","title":"kak-lsp-21.0.2-1.1 on GA media","description":"These are all security issues fixed in the kak-lsp-21.0.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-09T00:00:00Z","modified":"2026-08-10T08:15:09.341957382Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:11818-1","title":"shadowsocks-rust-1.25.0-1.1 on GA media","description":"These are all security issues fixed in the shadowsocks-rust-1.25.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-18T00:00:00Z","modified":"2026-09-19T18:23:08.222452077Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:11838-1","title":"pijul-1.0.0~beta.23-1.1 on GA media","description":"These are all security issues fixed in the pijul-1.0.0~beta.23-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-21T00:00:00Z","modified":"2026-09-22T18:23:09.516374248Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:21560-1","title":"Security update for kak-lsp","description":"This update for kak-lsp fixes the following issues:\n\nChanges in kak-lsp:\n\n- Update to version 21.0.2:\n  * Fix a regression that broke compatibility with Kakoune versions\n    older than 2026.05.21\n  * Add a default configuration for Hare, using hare-lsp\n  * Fix hangs after editing a file without a trailing newline, such\n    as an empty file\n  * Use nixd instead of nil as the default language server for nix\n  * Fix buffer-sync corruption when .editorconfig sets\n    insert_final_newline = false\n- Refresh the vendored registry. Recording the state of the open\n  vendored-crate CVEs against it, none of which this package is\n  affected by:\n  * CVE-2026-25541 (boo#1274502): bytes is 1.12.1, above the 1.11.1\n    fix\n  * CVE-2025-3416 (boo#1242654): the openssl crate is 0.10.81, above\n    the 0.10.72 fix; it was already 0.10.80 before this update\n  * CVE-2025-55159 (boo#1248048): slab is 0.4.12, above the 0.4.11\n    fix; only 0.4.10 was ever affected and this package never\n    shipped it\n\n- Update to version 20.0.0:\n  * v20.0.0\n  * Update changelog\n  * Fix tinymist documentation URL\n  * Fix tinymist preview config key. `previewFeature` only works for the vscode plugin\n  * Encode brackets for file paths\n  * feat: swift/sourcekit-lsp support\n  * Paal �ye-Str�mme Copyright Waiver\n  * Make sure buffer synchronization works even when finaleol is missing\n  * workspace/executeCommand: don't panic on invalid args JSON\n  * servers.kak: update markdown-oxide root markers\n  * Inline lsp-initial-goto-position\n  * Fix function_casts_as_integer warning\n  * lsp-capabilities: remove stale default mappings\n  * changelog new erlang default server\n  * fix(ci/commit-new-release.sh): interpolate version number\n  * Change default language server for erlang\n  * lsp-inlay-hint-apply-*: fix crash when no hints avail\n  * Add inlay hint textedit support\n  * start new cycle\n\n- Update to version 19.0.1:\n  * v19.0.1\n  * Don't print Hover: prefix if there are no diagnostics\n  * Changelog for regression fix\n  * Fix lsp-find-error incorrectly handling --previous flag\n  * ci/commit-new-release.sh: support jj\n  * start new cycle\n\n- Update to version 18.2.0:\n  * v18.2.0\n  * Update changelog\n  * Remove misleading debug log in SessionRenamed hook\n  * Make *diagnostics* buffer one-line-per diagnostics\n  * test/gopls-dynamic-settings.sh: fix for recent gopls\n  * clippy\n  * controller: consume entire request before checking for user errors\n  * Add support vuejs\n  * Fix crash on invalid text edit ranges\n  * Send initializationOptions and workspace/didChangeConfiguration as expected by jdtls\n  * cargo update\n  * Fix type inference errors with deranged 0.4.1\n  * Fix symbol name prefix for breadcrumbs\n  * Work around breaking change in deranged crate\n  * Simplify recursive breadcrumbs calculation\n  * Language-specific SymbolKind rendering\n  * lsp-goto-document-symbol: remove symbol kind suffix\n  * start new cycle\n\n- Update to version 18.1.3:\n  * v18.1.3\n  * Use the right language ID when [language.foo] is in effect\n  * Remove unused line-specs option\n  * Better variable name for code lens line-specs value\n  * lsp-object: don't send documentSymbol to servers that don't support it\n  * Include language server name in stderr logs\n  * Use rust-analyzer from PATH\n  * Work around lsp-rename didChange failing when using window scope\n  * Send texlab-specific requests only to servers that support them\n  * Fix dart language server command\n  * Add kak-lsp server PID to the closing log message\n  * Report more diagnostics information, in multiple lines\n  * Fix regression causing spurious/missing server name in hover\n  * Address clippy lints\n  * Config knob to override magic single-instance setting\n  * Back out \"Add curly underline to DiagnosticError face\"\n  * start new cycle\n\n\n- Update to version 18.1.2:\n  * Silence errors from non-default hooks\n  * Fix languageId for JSX/TSX files\n  * Silence deprecation warning\n  * Add curly underline to DiagnosticError face\n\n- Update to version 18.1.1:\n  * Make crash reporting optional for now\n  * Touch up installation instructions in readme\n  * Make force-exit code paths safer\n  * Extract function\n  * Rework \"Prevent buffer content logic from reading to much\"\n  * Don't send debug log about excessive progress reports to editor\n  * Make test/clangd-invalid-utf8.sh compatible with older clangd\n  * Fix crash when legacy \"language\" config option uses language IDs\n  * Set LAST_CLIENT earlier\n  * test/clangd-invalid-utf8.sh: fix for modern clang\n  * Add biome to CSS and GraphQL\n  * On crash, disable LSP hooks in current buffer\n  * Simplify sentry integration\n  * Work around crash on unsaved files after server restart\n  * Add context to crash report message\n  * Include formatted panic info and backtrace in crash report\n  * Crash reporting via sentry.io\n  * Make the default panic message a little less intimidating\n  * Generalize option change hook parsing code\n  * Back out \"Fix fake textDocument/didOpen for unsaved files\"\n  * Back out \"Make sure to call textDocument/didOpen when lsp_servers is set after BufCreate\"\n  * Prevent buffer content logic from reading to much\n  * Fix crash on \u003cc-c\u003e during -sync command\n  * Make sure to call textDocument/didOpen when lsp_servers is set after BufCreate\n  * Add commented config for tailwindcss-language-server\n  * Fix fake textDocument/didOpen for unsaved files\n  * Stop logging the lsp-show-error call\n  * Fix garbage languageId being sent on lsp-workspace-symbol\n  * Clean up editor command dispatch code\n  * Rename command sender type\n  * Fix corruption applying text edits to non-buffer, non-ASCII files\n  * Separate out function for applying text edits to in-memory data structure\n  * Apply clippy lints\n  * Update unit tests\n  * Consolidate error reporting\n  * Work around missing error on missing code lens after server restart\n  * Type for client name\n  * Rework editor-command sending\n  * Remove most uses of EditorMeta::session\n  * Remove vestiges of multi-session code\n  * Bravely remove obsolete command_fifo, make response_fifo handling more robust\n  * Fix flaky test/gopls-goto-definition.sh\n  * Remove unused function\n  * Add more details to fifo log\n  * Remove unused parameter\n  * Use a separate field for requests pending initialization resp. textDocument/didChange\n  * Fix hang when sync request is used in hook when LSP is disabled\n  * Fix lsp-did-change not being sent for lsp-code-actions-sync\n  * Fix lingering sync state when lsp is disabled\n  * Remove unused lsp-with-option command\n  * Stop printing panic backtrace twice\n  * Add badges for latest release and chat networks\n  * Fix stacktrace being printed on EPIPE, remove redundant error output\n  * Call out feedback/support channels a bit more\n  * Stop linking to the Wiki page for installing servers\n  * Only set javascriptreact/typescriptreact language ID for jsx/tsx files\n\n- Update to version 18.1.0:\n  * Fix mixed-up order in tailwindcss example\n  * Fix bell in modeline not being cleared on ShowMessage notifications\n  * Fix patttern typo\n  * Add markdown-oxide language-server\n  * Add ruby-lsp language-server\n  * Fix stale quoting in lsp-do-send-sync\n  * Add log statements for raw request, handle EWOULDBLOCK/EAGAIN\n  * Use write instead of %val{selection} to send buffer contents\n  * Use a nonblocking fifo instead of pykak-style alternating fifos\n  * Address clippy lint\n  * Extend macOS workarounds to buffer synchronization\n  * Fail early again on missing language.foo.command field\n  * Also use elixir-ls on eex files\n  * Fail startup if session state files already exists\n  * Don't create session state if session is already running\n  * Escalate failure if kak-lsp daemon fails to start\n  * Don't clean up parent of session directories\n  * Do not briefly start kak-lsp on KakEnd if lsp-enable has never been called\n  * Fix typo in lsp-exit\n  * Rectify inconsistent quoting in recommended mappings\n  * Don't block when language servers are slow to exit\n  * Work around hang due to lost fifo on macOS\n  * Restyle --help output\n  * Fix test/clangd-diagnostic-gutter.sh flakiness\n  * Fix test/run not finding python on macOS\n  * Remove bad text edit assertion\n  * Braces in commented out code must match too\n  * The correct validation setting for CSS is `css.validate = true`\n  * Add CSS, HTML and JSON options, add Haskell's static-ls\n  * Workaround macOS waitid() not zeroing si_signo\n  * Fix waitid() being called unnecessarily\n  * Fix formatting spuriously moving cursor with vscode-html-language-server\n  * Fix Rust version\n  * Workaround HTML/CSS language servers not enabling formatting\n  * Workaround HTML/CSS language server crashing due to missing validProperties\n  * Fix crash interpreting text edit without trailing newline\n  * Clean up a debug log\n  * Remove dependency on Rust 1.80\n  * Fix regression causing crash when language server command fails exec()\n  * Don't send SIGTERM to language server, remove obsolete wait()\n  * Simplify sending of initialization options\n  * Fix regression causing hangs on restart\n  * Fix regression causing server configuration to be sent as initialization option\n  * Fix regression causing \"kak -p\" to become a zombie\n  * Remove \"set-option -add\" from most commented default configs\n  * Back out \"lsp-start to wait until existing server has exited\"\n  * Fix race conditions reading kak-lsp PID file\n  * Send SIGTERM, not SIGKILL to shut down inert language server\n  * Speed up language server shutdown\n  * lsp-exit to wait until the session directory is removed\n  * Remove shell calls from async request sending\n  * Drain fifo on exit to unblock Kakoune\n  * Remove unnecssary environment variable\n  * Refactor temporary directory cleanup logic\n  * lsp-start to wait until existing server has exited\n  * Wait for PID file creation after start\n  * Move fifo into a per-session directory\n  * Remove errant semicolon\n  * Remove shell calls for code-actions and highlight-references hooks\n  * Move hook definition out of the way\n  * Stop using temporary file also for textDocument/didChange and textDocument/didOpen\n  * typst: add default configuration\n  * Mohamad Makki Copyright Waiver\n  * Update manual installation instructions for ARM macOS\n\n- Update to version 18.0.3:\n  * Update changelog for release\n  * Disable CI runs for a special \"docs\" branch\n  * Scala Metals: turn off Unicode icons until Kakoune can handle emoji width\n  * Simply use stdout instead of fd 3 for request sending\n  * Remove redundant fifo re-creation\n  * Elide temporary file when writing to fifo\n  * Fix escaping if session name starts with a dash\n  * Move loop-invariant set-option out of the loop\n  * Fix window/showMessageRequest ID deserialization\n  * lsp-disable: unset LSP modeline\n  * Fix eslint workaround\n  * Fix crash when \"language\" key is used in legacy kak-lsp.toml\n  * julia lsp configuration: move root_globs\n  * minor: fix typo in julia lsp config\n  * cargo update\n  * cargo clippy\n  * Fix crash in lsp-selection-range\n  * Show error instead of crashing if lsp_servers root is not an absolute path\n  * Block LSP requests after KakEnd to work around delay on bad config\n  * lsp-do-send: also block SIGINT once we have acquired the fifo\n  * README: update \"Pre-built binaries\" section\n  * Fix state transition when lsp-enable{,-window} are accidentally mixed\n  * Remove shell call from lsp-if-no-servers\n  * Remove misleading \"set-option -add lsp_server\" from default hooks\n  * lsp-object: fix crash on invalid param, improve docs\n\n- Update to version 18.0.2:\n  * v18.0.2\n  * README: link to troubleshooting section\n  * Fix stale comment in test\n  * Update changelog\n  * Show panics in an info box\n  * Generate a core dump when crashing via a Rust panic\n  * lsp-definition: explain fallback in error message\n  * Fix crash in lsp-highlight-references\n  * Log kak-lsp daemon PID on startup\n  * Removed redundant error check\n","status":"published","published":"2026-08-10T16:06:46Z","modified":"2026-08-12T18:23:42.677936968Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"openSUSE-SU-2026:21605-1","title":"Security update for forgejo-cli","description":"This update for forgejo-cli fixes the following issues:\n\nChanges in forgejo-cli:\n\n- Update vendored bytes crate to 1.12.1\n  * CVE-2026-25541: Fixed an integer overflow in BytesMut::reserve that could\n    corrupt the tracked capacity and lead to out-of-bounds slices (boo#1274529).\n\n- update to 0.6.0:\n  * Localization!\n    - forgejo-cli has gained localization support!\n      You can now use it in your preferred language, just like\n      Forgejo itself.\n      Currently de-DE and zh-Hans are included, with several more\n      being in-progress.\n      See the project on Codeberg Translate if you want to help out\n      with any languages you know!\n      https://translate.codeberg.org/projects/forgejo-cli/forgejo-cli/\n  * Additions\n    - (!586) fj issue/pr view assignees to see who is assigned to\n      an issue or pull request\n    - (!582) --avatar/--unset-avatar options on fj repo edit\n    - (!554) fj repo star-status to check if you've starred a repo\n    - (!547) --cwd option to set the working directory a command is\n      run in\n    - (!533, !561) Commands to watch and unwatch repos\n    - (!462) Resolve SSH host names from SSH config\n    - (!279, !464, !472, !489, !491, !513, !594) Localization\n    - Added fj auth login support for the following instances:\n      - v16.next.forgejo.org\n      - v17.next.forgejo.org\n    - Removed fj auth login support for the following instances\n      that have shut down:\n      - v7.next.forgejo.org\n      - v12.next.forgejo.org\n  * Changes\n    - (!535) Added an error message when fj auth login fails to\n      open the browser\n    - (!523) fj auth add-key was renamed to fj auth add-token. An\n      alias still exists to add-key, so this isn't a breaking\n      change.\n    - (!514) The --host flag can now be anywhere in the command,\n      instead of only the beginning\n    - (!504) fj auth add-token no longer takes a username argument.\n  * Fixes\n    - (!579) Fixed fj issue unassign incorrectly unassigning\n      everyone except the intended users\n    - (!569) Fixed display of labels failing when a label is marked\n      as exclusive but does not contain a slash\n    - (!542) Fixed parsing of SSH shorthand urls\n    - (!510) Fixed fj pr checkout failing when the instance URL\n      contained a port\n    - (!437) Fixed incorrect parsing of activity info\n  * Other\n    - (!573) Use rust 2024 edition\n    - (!560) Simplify determining repo owner\n    - (!531) Fix clippy warnings\n    - (!527) Remove unused dependencies, narrow tokio features\n    - (!526) Replace crossterm with terminal_size\n    - (!520) Optimize cargo release profile\n    - (!469) Fix typo\n    - (!449) Restricted file permissions at creation time\n    - (!443) Add oneline helptext to 'repo migrate' command\n\n- update to 0.5.0:\n  * Additions\n    - (!334) Support for managing labels on issues and repos.\n    - (!349) repo edit and repo units for modifying settings on a\n      repo and repo units.\n    - (!373) Use the needed CLI flags for more editors when opening\n      them.\n    - (!385) Use the editor defined in git's core.editor config\n      option by default (falling back to $EDITOR if it is not set).\n    - (!414) Add commands to assign and unassign users to issues\n      and PRs.\n    - (!415) Support all README files in fj repo readme, regardless\n      of case or extension.\n    - (!416) Add the option to choose what repo to own the new repo\n      to fj repo migrate.\n    - (!419) Show a warning when viewing an archived repo.\n    - (!420) Add a notice about git push --force not being\n      supported on AGit PRs.\n    - Added fj auth login support for the following instances:\n      - v15.next.forgejo.org\n      - codefloe.com\n  * Fixes\n    - (!393) Don't include pull requests in fj issues search.\n    - (!407) Guarantee opening the browser in fj auth login doesn't\n      block.\n    - (!417) Prevent incorrectly reusing the refresh token when\n      refreshing OAuth tokens.\n  * Other\n    - (!278) Improved \"no repo info\" error message.\n    - (!403) Build aarch64 artifacts for new releases.\n\n- update to 0.4.1:\n  * Fixes\n    - (!368) Generate the correct PKCE challenge verifier. This was\n      preventing fj auth login from succeeding.\n\n- Update to version 0.4.0:\n  * Support for issue \u0026 pull request templates with fj issue/pr create\n    --template\n  * fj pr create --autofill, which will automatically populate the PR's title\n    and body from the commit(s)\n  * fj user key and fj user gpg commands for managing uploaded SSH and GPG keys\n  * fj user repos --page, to select the page of results to view\n  * fj issue/pr create/comment --body-from-file to use the contents of a file\n    as the body\n  * --identity-file/-I flag for selecting the SSH identity to use\n  * fj tag to manage git tags\n  * fj issue search --state all\n  * --remote \u0026 --repo flags can now be at the end of the command with the rest\n    of the flags\n\n- update to 0.3.0:\n  * Additions\n    - Added fj completion to generate completion scripts for various\n      shells\n    - Added fj org for Organization commands.\n    - Added fj actions for Forgejo Actions-related commands (thank\n      you, @LordMZTE !)\n    - OAuth client IDs for fj auth login can now be customized.\n    See the wiki for more on the new features.\n\thttps://codeberg.org/Cyborus/forgejo-cli/wiki/Organizations\n  * Fixes\n    - Keys file now has proper file permissions\n    - Fixed incorrect help commands (thank you, @0ko !)\n    - Always set user agent in requests\n\n- update to 0.2.0:\n  * Additions\n    - pr create and issue create now have a --web flag that opens\n      the creation page in your browser instead of creating it on\n      the terminal.\n    - pr --agit will create a pull request with agit flow, so you\n      don't need to fork the repository.\n    - pr status --wait will only exits once all PR checks finish.\n    - repo migrate to migrate/mirror repositories from other hosts.\n    - repo readme to print a repository's readme to the terminal.\n    - version --verbose prints extra info useful for debugging\n  * Fixes\n    - Public endpoints can now be accessed without authenticating\n    - The API will be accessed via the http url even when it\n      differs from the ssh url and the local remote points to the\n      ssh url.\n    - browse commands will no long hang the terminal\n    - Local repos will now be found even when in a subdirectory\n    - SSH urls in repo remotes will now be parsed correctly\n    - Improved pull request detection\n","status":"published","published":"2026-08-18T16:51:08Z","modified":"2026-08-21T09:15:09.047143705Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"openSUSE-SU-2026:22189-1","title":"Security update for shadowsocks-rust, shadowsocks-libev","description":"This update for shadowsocks-rust, shadowsocks-libev fixes the following issues:\n\nChanges in shadowsocks-rust:\n\n- Fix SELinux denial (name_connect) when forwarding outbound TCP traffic\n  (boo#1284975)\n\n- Fix: Unable to bind ports below 1024 with SELinux enabled (boo#1284025)\n\n- Update version to 1.25.0\n  * Allow chaining ssserver to another SOCKS5/HTTP/HTTPS proxy\n  * Expose user_key() on CryptoStream and ProxyServerStream, lets callers\n    identify which multi-user identity was authenticated after an AEAD-2022 handshake\n  * EIH (Extended Identity Header) support\n  * local-http: Support HTTP Basic auth\n  * service: Outbound UDP relay through SOCKS5-only chains. UDP traffic can\n    now be relayed through proxy chains when all hops are SOCKS5. Chains containing\n    HTTP/HTTPS hops will emit a startup warning and UDP traffic will bypass the chain.\n  * socket2::Socket with socket2::SockRef\n  * Fix bugs\n    * CVE-2026-25541 and boo#1274441\n    * CVE-2026-93599, CVE-2026-93602, CVE-2026-93601, CVE-2026-93600 and boo#1282208\n    * CVE-2026-25541 and boo#1274441\n\n  * Fix some issues (CVE-2025-3416, boo#1242615)\n- Update vendor, fix boo#1215658 and CVE-2023-42811\n\nChanges in shadowsocks-libev:\n\n- Fix SELinux denial (name_connect) when forwarding outbound TCP traffic\n  (boo#1284975)\n\n- Fix build for Leap 16.1+: switch BuildRequires from mbedtls-devel to\n  mbedtls-3-devel Tumbleweed, don't do this work on Leap 16\n","status":"published","published":"2026-10-26T16:52:43Z","modified":"2026-11-01T17:23:29.526023024Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2025:01591-1","title":"Security update for python-maturin","description":"This update for python-maturin fixes the following issues:\n\n- CVE-2025-3416: openssl: use-after-free in `Md::fetch` and `Cipher::fetch` when `Some(...)` value passed as\n  `properties` argument to either function (bsc#1242631).\n- CVE-2025-4574: crossbeam-channel: double-free leading to possible memory corruption in `Channel::drop` when dropping\n  a channel (bsc#1243177).\n","status":"published","published":"2025-05-19T21:24:46Z","modified":"2026-02-04T04:11:20.209839Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01619-1","title":"Security update for s390-tools","description":"\nThis update for s390-tools rebuilds the existing package with the new 4k RSA secure boot key.\n\nSecurity issues fixed:\n\n- CVE-2025-3416: Fixed Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate. (bsc#1242622)\n\nOther issues:\n\n- Added the new IBM z17 (9175) processor type\n","status":"published","published":"2025-05-21T09:57:18Z","modified":"2026-03-23T04:47:34.287915Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01631-1","title":"Security update for s390-tools","description":"\nThis update for s390-tools rebuilds the existing package with the new 4k RSA secure boot key.\n\nSecurity issues fixed:\n\n- CVE-2025-3416: Fixed Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate. (bsc#1242622)\n\nOther issues:\n\n- Added the new IBM z17 (9175) processor type\n","status":"published","published":"2025-05-21T10:03:45Z","modified":"2026-03-23T04:49:28.578094Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01662-1","title":"Security update for python-cryptography","description":"This update for python-cryptography fixes the following issues:\n\n- CVE-2025-3416: openssl: use-after-free in `Md::fetch` and `Cipher::fetch` when `Some(...)` value passed as\n  `properties` argument to either function (bsc#1242631).\n","status":"published","published":"2025-05-22T16:04:44Z","modified":"2026-02-04T03:52:12.26518Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01662-2","title":"Security update for python-cryptography","description":"This update for python-cryptography fixes the following issues:\n\n- CVE-2025-3416: openssl: use-after-free in `Md::fetch` and `Cipher::fetch` when `Some(...)` value passed as\n  `properties` argument to either function (bsc#1242631).\n","status":"published","published":"2025-05-29T13:31:03Z","modified":"2026-02-04T02:22:05.189393Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01806-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2025-3416: Fixed use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242666)\n\nOther fixes:\n\n- Enable memory accounting as SUSE disables it by default (bsc#1241016).\n- Fix dsidm service get_dn option failing (bsc#1241988)\n- Version update 2.2.10~git99.aa5d0ecbf\n  Various fixes and solved issues from github repository\n","status":"published","published":"2025-06-03T13:13:56Z","modified":"2026-03-23T04:48:29.263011Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01807-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2025-3416: Fixed use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242666)\n\nOther fixes:\n\n- Enable memory accounting as SUSE disables it by default (bsc#1241016).\n- Fix dsidm service get_dn option failing (bsc#1241988)\n- Version update 2.2.10~git99.aa5d0ecbf\n  Various fixes and solved issues from github repository\n","status":"published","published":"2025-06-03T13:15:20Z","modified":"2026-03-23T04:48:29.731795Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01818-1","title":"Security update for python-cryptography","description":"This update for python-cryptography fixes the following issues:\n\n- CVE-2025-3416: openssl: use-after-free in `Md::fetch` and `Cipher::fetch` when `Some(...)` value passed as\n  `properties` argument to either function (bsc#1242631).\n","status":"published","published":"2025-06-05T13:53:11Z","modified":"2026-02-04T04:28:17.260276Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:02017-1","title":"Security update for s390-tools","description":"This update for s390-tools fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2025-3416: Fixed Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate. (bsc#1242622)\n\nOther issues:\n\n- Added the new IBM z17 (9175) processor type.\n","status":"published","published":"2025-06-19T07:14:56Z","modified":"2025-06-19T13:31:49.789321Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02166-1","title":"Security update for himmelblau","description":"This update for himmelblau fixes the following issues:\n\n- CVE-2025-5791: Fixed using deprecated `users` crate (bsc#1244202)\n- CVE-2025-3416: Fixed use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242648) \n     \nUpdate to version 0.7.17+git.0.1ebdab0\n* Update sccache-action version to use new cache service\n","status":"published","published":"2025-06-30T07:14:21Z","modified":"2026-02-04T02:15:49.418807Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02809-1","title":"Security update for rust-keylime","description":"This update for rust-keylime fixes the following issues:\n\n- Update to version 0.2.7+141:\n  * CVE-2025-58266: shlex: Fixed command injection (bsc#1247193)\n    \n- Update to version 0.2.7+117:\n  * CVE-2023-26964: rust-keylime: hyper,h2: stream stacking when H2 processing HTTP2 RST_STREAM frames (bsc#1210344).\n  * CVE-2024-12224: rust-keylime: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243861).\n  * CVE-2024-32650: rust-keylime: rust-rustls: Infinite loop in rustls::conn::ConnectionCommon:complete_io() with proper client input (bsc#1223234).\n  * CVE-2024-43806: rust-keylime: rustix: rustix::fs::Dir iterator with the linux_raw backend can cause memory explosion (bsc#1229952).\n  * CVE-2025-3416: rust-keylime: openssl: Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242623).\n  * rust-shlex: Multiple issues involving quote API ( RUSTSEC-2024-0006, GHSA-r7qv-8r2h-pg27, bsc#1230029)\n","status":"published","published":"2025-08-15T12:51:37Z","modified":"2026-03-23T04:49:46.369393Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02810-1","title":"Security update for rust-keylime","description":"This update for rust-keylime fixes the following issues:\n\n- Update to version 0.2.7+141:\n  * CVE-2025-58266: shlex: Fixed command injection (bsc#1247193)\n    \n- Update to version 0.2.7+117:\n  * CVE-2023-26964: rust-keylime: hyper,h2: stream stacking when H2 processing HTTP2 RST_STREAM frames (bsc#1210344).\n  * CVE-2024-12224: rust-keylime: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243861).\n  * CVE-2024-32650: rust-keylime: rust-rustls: Infinite loop in rustls::conn::ConnectionCommon:complete_io() with proper client input (bsc#1223234).\n  * CVE-2024-43806: rust-keylime: rustix: rustix::fs::Dir iterator with the linux_raw backend can cause memory explosion (bsc#1229952).\n  * CVE-2025-3416: rust-keylime: openssl: Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242623).\n  * rust-shlex: Multiple issues involving quote API ( RUSTSEC-2024-0006, GHSA-r7qv-8r2h-pg27, bsc#1230029)\n","status":"published","published":"2025-08-15T12:51:47Z","modified":"2026-03-23T04:46:48.999985Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02811-1","title":"Security update for rust-keylime","description":"This update for rust-keylime fixes the following issues:\n\n- Update to version 0.2.7+141:\n  * CVE-2025-58266: shlex: Fixed command injection (bsc#1247193)\n    \n- Update to version 0.2.7+117:\n  * CVE-2023-26964: rust-keylime: hyper,h2: stream stacking when H2 processing HTTP2 RST_STREAM frames (bsc#1210344).\n  * CVE-2024-12224: rust-keylime: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243861).\n  * CVE-2024-32650: rust-keylime: rust-rustls: Infinite loop in rustls::conn::ConnectionCommon:complete_io() with proper client input (bsc#1223234).\n  * CVE-2024-43806: rust-keylime: rustix: rustix::fs::Dir iterator with the linux_raw backend can cause memory explosion (bsc#1229952).\n  * CVE-2025-3416: rust-keylime: openssl: Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242623).\n  * rust-shlex: Multiple issues involving quote API ( RUSTSEC-2024-0006, GHSA-r7qv-8r2h-pg27, bsc#1230029)\n","status":"published","published":"2025-08-15T12:51:54Z","modified":"2026-03-23T04:46:49.764211Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02896-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\nUpdate to version 2.0.20~git64.628a24b68:\n\nSecurity fixes:\n\n- CVE-2025-3416: Fixed openssl use after free (bsc#1242666)\n\nOther fixes:\n\n- resolve infinite loop due when loading RUV entryrdn (bsc#1243428)\n\nUpstream changelog:\n  * Issue 6119 - Synchronise accept_thread with slapd_daemon (#6120)\n  * Issue 6825 - RootDN Access Control Plugin with wildcards for IP addre… (#6826)\n  * Issue 6819 - Incorrect pwdpolicysubentry returned for an entry with user password policy\n  * Issue 6641 - modrdn fails when a user is member of multiple groups (#6643)\n  * Issue 6534 - CI fails with Fedora 41 and DNF5\n  * Revert 'Issue 5120 - ns-slapd doesn't start in referral mode (#6763)'\n  * Issue 6438 - Add basic dsidm organizational unit tests\n  * Issue 6439 - Fix dsidm service get_dn option\n  * Issue 5120 - ns-slapd doesn't start in referral mode (#6763)\n  * Issue 6740 Certificate verify fails in FIPS mode\n  * Issue 5356 - Set DEFAULT_PASSWORD_STORAGE_SCHEME to PBKDF2-SHA512 in tests\n  * Issue 6603 - Release tarballs ship a different Cargo.lock\n  * Issue 4982 - BUG - missing inttypes.h (#4983)\n  * Issue 6571 - (2nd) Nested group does not receive memberOf attribute (#6697)\n  * Issue 6686 - CLI - Re-enabling user accounts that reached inactivity limit fails with error (#6687)\n  * Issue 6288 - dsidm crash with account policy when alt-state-attr is disabled (#6292)\n  * Issue 6571 - Nested group does not receive memberOf attribute (#6679)\n  * Issue 6676 - Add GitHub workflow action and fix pbkdf2 tests (#6677)\n  * Issue 6155 - ldap-agent fails to start because of permission error (#6179)\n  * Issue 6632 - Replication init fails with ASAN build\n  * Issue 6561 - TLS 1.2 stickiness in FIPS mode\n  * Bump openssl from 0.10.66 to 0.10.70 in /src\n  * Issue 6004 - (2nd) idletimeout may be ignored (#6569)\n","status":"published","published":"2025-08-19T09:30:16Z","modified":"2026-03-23T04:48:39.9056Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:03298-1","title":"Security update for rustup","description":"This update for rustup fixes the following issues:\n\n- CVE-2024-12224: Fixed improper validation of unsafe equivalence in punycode (bsc#1243862)\n- CVE-2025-3416: Fixed use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242617)\n","status":"published","published":"2025-09-23T09:01:29Z","modified":"2026-02-04T02:45:29.274734Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:03306-1","title":"Security update for sevctl","description":"This update for sevctl fixes the following issues:\n\n- CVE-2024-12224: idna: Fixed improper validation of unsafe equivalence in punycode. (bsc#1243860) \n- CVE-2025-3416: openssl: Fixed use-after-free in Md::fetch and Cipher::fetch (bsc#1242618)\n","status":"published","published":"2025-09-23T13:13:44Z","modified":"2026-03-23T04:45:36.986159Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:03307-1","title":"Security update for sevctl","description":"This update for sevctl fixes the following issues:\n  \n- CVE-2024-12224: idna: Fixed improper validation of unsafe equivalence in punycode. (bsc#1243860) \n- CVE-2025-3416: openssl: Fixed use-after-free in Md::fetch and Cipher::fetch (bsc#1242618)\n","status":"published","published":"2025-09-23T13:13:49Z","modified":"2026-03-23T04:48:01.287268Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:03445-1","title":"Security update for snpguest","description":"This update for snpguest fixes the following issues:\n\n- CVE-2024-12224: idna: acceptance of Punycode labels that do not produce any non-ASCII output may lead to incorrect\n  hostname comparisons and incorrect URL parsing (bsc#1243869).\n- CVE-2025-3416: openssl: use-after-free in `Md::fetch` and `Cipher::fetch` when `Some(...)` value is passed to the\n  `properties` argument (bsc#1242601).\n","status":"published","published":"2025-10-01T13:09:59Z","modified":"2026-03-23T04:49:58.208209Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:1560-1","title":"Security update for rustup","description":"This update for rustup fixes the following issues:\n\n- CVE-2025-3416: Fixed use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242617)\n","status":"published","published":"2025-05-15T12:51:22Z","modified":"2026-02-04T03:18:07.877475Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1570-1","title":"Security update for cargo-c","description":"This update for cargo-c fixes the following issues:\n\n- CVE-2025-3416: use-after-free in Md::fetch and Cipher::fetch of rust-openssl crate (bsc#1242675).\n","status":"published","published":"2025-05-16T13:44:03Z","modified":"2026-02-04T02:12:50.946696Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20352-1","title":"Security update for s390-tools","description":"This update for s390-tools fixes the following issues:\n\n- CVE-2025-3416: s390-tools: openssl: Fixed Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242622)\n- Amended the .spec file\n- Updated the '_service' file\n- Removed the obsolete file 'cargo_config'\n- Updated 'cputype' and 'read_value.c'\n * Added the new IBM z17 (9175) processor type\n","status":"published","published":"2025-05-23T07:48:14Z","modified":"2026-03-23T04:50:07.125934Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20365-1","title":"Security update for s390-tools","description":"This update for s390-tools fixes the following issues:\n\n* Revendored vendor.tar.zst (CVE-2025-3416: Fixed use-after-free in Md::fetch and Cipher::fetch in rust-openssl crate  (bsc#1242622)\n* Added the new IBM z17 (9175) processor type\n\nThe package is built with the new 4096bit RSA secure boot signing key.\n","status":"published","published":"2025-05-23T07:59:47Z","modified":"2026-03-23T04:47:12.383569Z","updated_at":"2026-11-02T15:53:59.381172Z"}]},"sources_more":{"osv":17}}