SUSE-SU-2026:0620-1

Vulnerability from csaf_suse - Published: 2026-02-24 16:36 - Updated: 2026-02-24 16:36
Summary
Security update for snpguest
Severity
Important
Notes
Title of the patch: Security update for snpguest
Description of the patch: This update for snpguest fixes the following issues: Update to version 0.10.0. Security issues fixed: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257927). - CVE-2025-3416: openssl: Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242601). - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bcs#1243869). Other updates and bugfixes: - Update to version 0.10.0 * fails to generate attestation reports on SEV-SNP guests with firmware API (bsc#1257877). * chore: updating tool version to 0.10.0 * refactor(certs): remove redundant branch in file-write logic * Docs: Adding verify measure, host-data, report-data to docs * verify: verify measurent, host data, and report data attributes from the attestation report. * library: Updating sev library to 7.1.0 * ci: replace deprecated gh actions * feat: multi-format integer parsing for key subcommand arguments * chore(main): remove unused import `clap::arg` * feat(fetch): add fetch crl subcommand * .github/lint: Bump toolchain version to 1.86 * Bump rust version to 1.86 * feat: bumping tool to version 0.9.2 * fix(verify): silence mismatched_lifetime_syntaxes in SnpOid::oid * feat: support SEV-SNP ABI Spec 1.58 (bump sev to v6.3.0) * docs: restore and clarify Global Options section * doc: fix CL argument orders + address recent changes * fix(hyperv): downgrade VMPL check from error to warning * fix(report.rs): remove conflict check between --random flag and Hyper-V * fix(report.rs): Decouple runtime behavior from hyperv build feature * refactor: clarify --platform error message * docs: add Azure/Hyper-V build note for --platform * report: Writing Req Data as Binary (#101) * deps: bump virtee/sev to 6.2.1 (fix TCB-serialization bug) (#99) * Updating SEV library to 6.1.0 and updating version to 0.9.1 * Update version (0.9.0) * HyperV: Fixing report command failure on Azure confidential VM * Removing intird and append requirement for kernel measurements (#93) * Updating to version 6 of library and fixing attestation (#89) * CI: Fixing create_release workflow (#91) * Minor update (0.8.3) * Adding build script * Update preattestation.rs * Fix certificate fetch bug for Turin * Minor update * Update bitfield to 0.15.0 * Update to 0.8.1 * Update asn1-rs and x509-parser * Update to 0.8.0 * key: Fix guest_field_select typo * Adding Turin support and updating ASK cn
Patchnames: SUSE-2026-620,SUSE-SLE-Module-Server-Applications-15-SP7-2026-620
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2024-12224
4.2 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Enterprise Module for Server Applications 15 SP7:snpguest-0.10.0-150700.3.3.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2025-3416
3.7 (Low)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 1 product, the same list as for CVE-2024-12224
Threats
Impact low
CVE-2026-25727
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 1 product, the same list as for CVE-2024-12224
Threats
Impact important
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for snpguest",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for snpguest fixes the following issues:\n\nUpdate to version 0.10.0.\n\nSecurity issues fixed:  \n\n- CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257927).\n- CVE-2025-3416: openssl: Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242601).\n- CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bcs#1243869).\n\nOther updates and bugfixes:\n\n- Update to version 0.10.0 \n\n  * fails to generate attestation reports on SEV-SNP guests with firmware API (bsc#1257877).\n  * chore: updating tool version to 0.10.0\n  * refactor(certs): remove redundant branch in file-write logic\n  * Docs: Adding verify measure, host-data, report-data to docs\n  * verify: verify measurent, host data, and report data attributes from the attestation report.\n  * library: Updating sev library to 7.1.0\n  * ci: replace deprecated gh actions\n  * feat: multi-format integer parsing for key subcommand arguments\n  * chore(main): remove unused import `clap::arg`\n  * feat(fetch): add fetch crl subcommand\n  * .github/lint: Bump toolchain version to 1.86\n  * Bump rust version to 1.86\n  * feat: bumping tool to version 0.9.2\n  * fix(verify): silence mismatched_lifetime_syntaxes in SnpOid::oid\n  * feat: support SEV-SNP ABI Spec 1.58 (bump sev to v6.3.0)\n  * docs: restore and clarify Global Options section\n  * doc: fix CL argument orders + address recent changes\n  * fix(hyperv): downgrade VMPL check from error to warning\n  * fix(report.rs): remove conflict check between --random flag and Hyper-V\n  * fix(report.rs): Decouple runtime behavior from hyperv build feature\n  * refactor: clarify --platform error message\n  * docs: add Azure/Hyper-V build note for --platform\n  * report: Writing Req Data as Binary (#101)\n  * deps: bump virtee/sev to 6.2.1 (fix TCB-serialization bug) (#99)\n  * Updating SEV library to 6.1.0 and updating version to 0.9.1\n  * Update version (0.9.0)\n  * HyperV: Fixing report command failure on Azure confidential VM\n  * Removing intird and append requirement for kernel measurements (#93)\n  * Updating to version 6 of library and fixing attestation (#89)\n  * CI: Fixing create_release workflow (#91)\n  * Minor update (0.8.3)\n  * Adding build script\n  * Update preattestation.rs\n  * Fix certificate fetch bug for Turin\n  * Minor update\n  * Update bitfield to 0.15.0\n  * Update to 0.8.1\n  * Update asn1-rs and x509-parser\n  * Update to 0.8.0\n  * key: Fix guest_field_select typo\n  * Adding Turin support and updating ASK cn\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2026-620,SUSE-SLE-Module-Server-Applications-15-SP7-2026-620",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_0620-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:0620-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20260620-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:0620-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-February/024385.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1242601",
        "url": "https://bugzilla.suse.com/1242601"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1243869",
        "url": "https://bugzilla.suse.com/1243869"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1257877",
        "url": "https://bugzilla.suse.com/1257877"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1257927",
        "url": "https://bugzilla.suse.com/1257927"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-12224 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-12224/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-3416 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-3416/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-25727 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-25727/"
      }
    ],
    "title": "Security update for snpguest",
    "tracking": {
      "current_release_date": "2026-02-24T16:36:35Z",
      "generator": {
        "date": "2026-02-24T16:36:35Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:0620-1",
      "initial_release_date": "2026-02-24T16:36:35Z",
      "revision_history": [
        {
          "date": "2026-02-24T16:36:35Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "snpguest-0.10.0-150700.3.3.1.x86_64",
                "product": {
                  "name": "snpguest-0.10.0-150700.3.3.1.x86_64",
                  "product_id": "snpguest-0.10.0-150700.3.3.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Server Applications 15 SP7",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Server Applications 15 SP7",
                  "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-server-applications:15:sp7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "snpguest-0.10.0-150700.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP7:snpguest-0.10.0-150700.3.3.1.x86_64"
        },
        "product_reference": "snpguest-0.10.0-150700.3.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-12224",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-12224"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to another hostname.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Server Applications 15 SP7:snpguest-0.10.0-150700.3.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-12224",
          "url": "https://www.suse.com/security/cve/CVE-2024-12224"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1243848 for CVE-2024-12224",
          "url": "https://bugzilla.suse.com/1243848"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Server Applications 15 SP7:snpguest-0.10.0-150700.3.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Server Applications 15 SP7:snpguest-0.10.0-150700.3.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-02-24T16:36:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-12224"
    },
    {
      "cve": "CVE-2025-3416",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-3416"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in OpenSSL\u0027s handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Server Applications 15 SP7:snpguest-0.10.0-150700.3.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-3416",
          "url": "https://www.suse.com/security/cve/CVE-2025-3416"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242599 for CVE-2025-3416",
          "url": "https://bugzilla.suse.com/1242599"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Server Applications 15 SP7:snpguest-0.10.0-150700.3.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Server Applications 15 SP7:snpguest-0.10.0-150700.3.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-02-24T16:36:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2025-3416"
    },
    {
      "cve": "CVE-2026-25727",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-25727"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. A limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Server Applications 15 SP7:snpguest-0.10.0-150700.3.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-25727",
          "url": "https://www.suse.com/security/cve/CVE-2026-25727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1257901 for CVE-2026-25727",
          "url": "https://bugzilla.suse.com/1257901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Server Applications 15 SP7:snpguest-0.10.0-150700.3.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Server Applications 15 SP7:snpguest-0.10.0-150700.3.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-02-24T16:36:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-25727"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.