Recommended update for aws-nitro-enclaves-cli

Announcement ID:	SUSE-RU-2025:02204-1
Release Date:	2025-07-02T13:42:42Z
Rating:	moderate
References:	bsc#1243859
Cross-References:	CVE-2024-12224
CVSS scores:	CVE-2024-12224 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N CVE-2024-12224 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N CVE-2024-12224 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Affected Products:	openSUSE Leap 15.6 Public Cloud Module 15-SP6 Public Cloud Module 15-SP7 SUSE Linux Enterprise Server 15 SP6 SUSE Linux Enterprise Server 15 SP7 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP7

An update that solves one vulnerability can now be installed.

Description:

This update for aws-nitro-enclaves-cli fixes the following issues:

• Fix idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243859)
• Update to version 1.4.2
• Update aws-nitro-enclaves-sdk-bootstrap to version f718dea6
• Update to version 1.3.3~git0.afb7264
• Update aws-nitro-enclaves-sdk-bootstrap to version 7797d39a

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• openSUSE Leap 15.6
  zypper in -t patch SUSE-2025-2204=1 openSUSE-SLE-15.6-2025-2204=1
• Public Cloud Module 15-SP6
  zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2025-2204=1
• Public Cloud Module 15-SP7
  zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2025-2204=1

Package List:

• openSUSE Leap 15.6 (aarch64 x86_64)
  • aws-nitro-enclaves-binaryblobs-upstream-debuginfo-1.4.2~git0.6e8512e-150600.10.6.1
  • aws-nitro-enclaves-cli-debuginfo-1.4.2~git0.6e8512e-150600.10.6.1
  • aws-nitro-enclaves-binaryblobs-upstream-1.4.2~git0.6e8512e-150600.10.6.1
  • aws-nitro-enclaves-cli-1.4.2~git0.6e8512e-150600.10.6.1
  • aws-nitro-enclaves-cli-debugsource-1.4.2~git0.6e8512e-150600.10.6.1
  • system-group-ne-1.4.2~git0.6e8512e-150600.10.6.1
• Public Cloud Module 15-SP6 (aarch64 x86_64)
  • aws-nitro-enclaves-binaryblobs-upstream-debuginfo-1.4.2~git0.6e8512e-150600.10.6.1
  • aws-nitro-enclaves-cli-debuginfo-1.4.2~git0.6e8512e-150600.10.6.1
  • aws-nitro-enclaves-binaryblobs-upstream-1.4.2~git0.6e8512e-150600.10.6.1
  • aws-nitro-enclaves-cli-1.4.2~git0.6e8512e-150600.10.6.1
  • aws-nitro-enclaves-cli-debugsource-1.4.2~git0.6e8512e-150600.10.6.1
  • system-group-ne-1.4.2~git0.6e8512e-150600.10.6.1
• Public Cloud Module 15-SP7 (aarch64 x86_64)
  • aws-nitro-enclaves-binaryblobs-upstream-debuginfo-1.4.2~git0.6e8512e-150600.10.6.1
  • aws-nitro-enclaves-cli-debuginfo-1.4.2~git0.6e8512e-150600.10.6.1
  • aws-nitro-enclaves-binaryblobs-upstream-1.4.2~git0.6e8512e-150600.10.6.1
  • aws-nitro-enclaves-cli-1.4.2~git0.6e8512e-150600.10.6.1
  • aws-nitro-enclaves-cli-debugsource-1.4.2~git0.6e8512e-150600.10.6.1
  • system-group-ne-1.4.2~git0.6e8512e-150600.10.6.1

References:

• https://www.suse.com/security/cve/CVE-2024-12224.html
• https://bugzilla.suse.com/show_bug.cgi?id=1243859