Skip to content
OpenAdvisories
Medium ELSA-2025-7313 1 CVE

Moderate: keylime-agent-rust security update (Oracle Linux 9)

Published May 16, 2025 · Updated May 16, 2025

Ecosystem: Oracle Linux

Summary

[0.2.2-2]
- Update openssl crate to version 0.10.70 to fix CVE-2025-24898

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 keylime-agent-rust 0:0.2.2-2.el9

Vulnerabilities 1

  • Medium 6.3
    CVE-2025-24898

    rust openssl ssl::select_next_proto use after free

    rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer but with a lifetime bound to the `client` argument. In situations where …

    sfackler rust-openssl zed 389-ds-base Debian Ubuntu Azure Linux Wolfi crates.io