Skip to content
OpenAdvisories
Medium DLA-4049-1 1 CVE

rust-openssl - security update

Published Feb 11, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 rust-openssl 0.10.29-1+deb11u1

Vulnerabilities 1

  • Medium 6.3
    CVE-2025-24898

    rust openssl ssl::select_next_proto use after free

    rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer but with a lifetime bound to the `client` argument. In situations where …

    sfackler rust-openssl zed 389-ds-base Debian Ubuntu Azure Linux Wolfi crates.io