Skip to content
OpenAdvisories
Medium SUSE-RU-2025:02203-1 1 CVE

Recommended update for aws-nitro-enclaves-cli

Published Jul 2, 2025 · Updated Feb 4, 2026

Ecosystem: SUSE

Summary

This update for aws-nitro-enclaves-cli fixes the following issues:

- Fix idna accepts Punycode labels that
do not produce any non-ASCII when decoded (bsc#1243859)
- Update to version 1.4.2
- Update aws-nitro-enclaves-sdk-bootstrap to version f718dea6
- Update to version 1.3.3~git0.afb7264
- Update aws-nitro-enclaves-sdk-bootstrap to version 7797d39a

Fixed packages 2

ReleasePackageFixed in
SUSE · SLES 15 SP4 Linux Enterprise Module for Public Cloud 15 SP4 aws-nitro-enclaves-cli 1.4.2~git0.6e8512e-150400.3.9.1
SUSE · SLES 15 SP5 Linux Enterprise Module for Public Cloud 15 SP5 aws-nitro-enclaves-cli 1.4.2~git0.6e8512e-150400.3.9.1

Vulnerabilities 1

  • Medium 5.1
    CVE-2024-12224

    idna accepts Punycode labels that do not produce any non-ASCII when decoded

    Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to anoth…

    servo rust-url linkerd2-controller linkerd2-tap Debian Ubuntu Alpine Wolfi crates.io

References

  • report
    https://bugzilla.suse.com/1243859
  • web
    https://www.suse.com/security/cve/CVE-2024-12224