{"id":"SUSE-SU-2025:02957-1","summary":"Security update for rust-keylime","details":"This update for rust-keylime fixes the following issues:\n\n- Update slab to version 0.4.11:\n  * CVE-2025-55159: Fixed incorrect bounds check in get_disjoint_mut function (bsc#1248006)\n\n- Update to version 0.2.8+12:\n  * build(deps): bump actions/checkout from 4 to 5\n  * build(deps): bump cfg-if from 1.0.0 to 1.0.1\n  * build(deps): bump openssl from 0.10.72 to 0.10.73\n  * build(deps): bump clap from 4.5.39 to 4.5.45\n  * build(deps): bump pest from 2.8.0 to 2.8.1\n  * Fix clippy warnings\n  * Use verifier-provided interval for continuous attestation timing\n  * Add meta object with seconds_to_next_attestation to evidence response\n  * Fix boot time retrieval\n  * Fix IMA log format (it must be ['text/plain']) (#1073)\n  * Remove unnecessary configuration fields\n  * cargo: Bump retry-policies to version 0.4.0\n","modified":"2026-03-11T07:29:10.616410Z","published":"2025-08-22T07:56:12Z","related":["CVE-2025-55159"],"upstream":["CVE-2025-55159"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502957-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248006"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-55159"}],"affected":[{"package":{"name":"rust-keylime","ecosystem":"SUSE:Linux Enterprise Micro 5.3","purl":"pkg:rpm/suse/rust-keylime&distro=SUSE%20Linux%20Enterprise%20Micro%205.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8+12-150400.3.10.1"}]}],"ecosystem_specific":{"binaries":[{"rust-keylime":"0.2.8+12-150400.3.10.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02957-1.json"}}],"schema_version":"1.7.5"}