Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-3416: openssl: rust-openssl Use-After-Free in `Md::fetch` and `Cipher::fetch`
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | aws-nitro-enclaves-cli | 0:1.4.4-0.amzn2023 |
| Amazon Linux · 2023 | aws-nitro-enclaves-cli-devel | 0:1.4.4-0.amzn2023 |
| Amazon Linux · 2023 | aws-nitro-enclaves-cli-integration-tests | 0:1.4.4-0.amzn2023 |
Vulnerabilities 1
-
Low 3.7
Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`
A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-3416.html