CVE-2024-12224

aws-nitro-enclaves-cli: This update for aws-nitro-enclaves-cli fixes the following issues: - Fix idna accepts Punycode labels that do not...

CVE-2024-12224 is fixed in 12 products on 1 platform, first by DEBIAN-CVE-2024-12224, released May 30, 2025. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.8
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0023
13th percentile

This update for aws-nitro-enclaves-cli fixes the following issues: - Fix idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243859) - Update to version 1.4.2 - Update aws-nitro-enclaves-sdk-bootstrap to version f718dea6 - Update to version 1.3.3~git0.afb7264 - Update aws-nitro-enclaves-sdk-bootstrap to version 7797d39a

Where it's fixed

ProductFixed inFixReleased
Linux
aws-nitro-enclaves-cli · opensuse-leap 15.6 1.4.2~git0.6e8512e-150600.10.6.1 SUSE-RU-2025:02204-1 Jul 2, 2025
aws-nitro-enclaves-cli · sles 15.6 1.4.2~git0.6e8512e-150600.10.6.1 SUSE-RU-2025:02204-1 Jul 2, 2025
aws-nitro-enclaves-cli · sles 15.7 1.4.2~git0.6e8512e-150600.10.6.1 SUSE-RU-2025:02204-1 Jul 2, 2025
cargo-c · opensuse-leap 16.0 0.10.15-160000.1.1 OPENSUSE-SU-2026:20060-1 Jan 19, 2026
cargo-c · sles 16.0 0.10.15-160000.1.1 SUSE-SU-2026:20096-1 Jan 19, 2026
firefox · RHEL 10 140.3.0-1.el10_0 RHSA-2025:16109 Sep 16, 2025
firefox · RHEL 8 0:140.3.0-1.el8_10 RHSA-2025:16260 Sep 22, 2025
firefox · RHEL 9 0:140.3.0-1.el9_6 RHSA-2025:16108 Sep 17, 2025
firefox · almalinux 8 140.3.0-1.el8_10.alma.1 ALSA-2025:16260 Sep 22, 2025
firefox-x11 · RHEL 9 0:140.3.0-1.el9_6 RHSA-2025:16108 Sep 17, 2025
librsvg · opensuse-leap 15.6 2.57.4-150600.3.3.1 SUSE-SU-2026:0243-1 Jan 22, 2026
librsvg · opensuse-leap 16.0 2.60.2-160000.1.1 OPENSUSE-SU-2026:20396-1 Mar 19, 2026
librsvg · sles 15.7 2.57.4-150600.3.3.1 SUSE-SU-2026:0243-1 Jan 22, 2026
librsvg · sles 16.0 2.60.2-160000.1.1 SUSE-SU-2026:20910-1 Mar 19, 2026
rav1e · opensuse-leap 15.6 0.6.6-150600.3.3.1 SUSE-SU-2025:02586-1 Aug 1, 2025
rav1e · sles 15.6 0.6.6-150600.3.3.1 SUSE-SU-2025:02586-1 Aug 1, 2025
rav1e · sles 15.7 0.6.6-150600.3.3.1 SUSE-SU-2025:02586-1 Aug 1, 2025
rust-idna · Debian 13.5 (trixie) 1.0.3-2 DEBIAN-CVE-2024-12224 May 30, 2025
rust-idna · Debian 14 1.0.3-2 DEBIAN-CVE-2024-12224 May 30, 2025
rustup · opensuse-leap 15.6 1.26.0~0-150600.10.7.1 SUSE-SU-2025:03298-1 Sep 23, 2025
rustup · opensuse-leap 16.0 1.29.1~0-160000.1.1 OPENSUSE-SU-2026:22016-1 Oct 2, 2026
rustup · sles 15.6 1.28.2~0-150600.10.13.1 SUSE-SU-2026:2832-1 Jul 9, 2026
rustup · sles 15.6 1.26.0~0-150600.10.7.1 SUSE-SU-2025:03298-1 Sep 23, 2025
rustup · sles 15.7 1.28.2~0-150600.10.13.1 SUSE-SU-2026:2832-1 Jul 9, 2026
rustup · sles 15.7 1.26.0~0-150600.10.7.1 SUSE-SU-2025:03298-1 Sep 23, 2025
rustup · sles 16.0 1.29.1~0-160000.1.1 SUSE-SU-2026:24014-1 Oct 2, 2026
sccache · opensuse-leap 15.6 0.4.2~4-150600.10.3.1 SUSE-SU-2025:02768-1 Aug 12, 2025
sccache · opensuse-leap 16.0 0.18.0~2-160000.1.1 OPENSUSE-SU-2026:21982-1 Sep 30, 2026
sccache · sles 15.6 0.16.0~0-150600.10.11.1 SUSE-SU-2026:3022-1 Jul 15, 2026
sccache · sles 15.7 0.16.0~0-150600.10.11.1 SUSE-SU-2026:3022-1 Jul 15, 2026
sccache · sles 16.0 0.18.0~2-160000.1.1 SUSE-SU-2026:23983-1 Sep 30, 2026
sevctl · opensuse-leap 15.6 0.4.3-150600.4.3.1 SUSE-SU-2025:03307-1 Sep 23, 2025
sevctl · sles 15.6 0.4.3-150600.4.3.1 SUSE-SU-2025:03307-1 Sep 23, 2025
sevctl · sles 15.7 0.6.0-150700.3.3.1 SUSE-SU-2025:03306-1 Sep 23, 2025
snpguest · opensuse-leap 15.6 0.3.2-150600.3.6.1 SUSE-SU-2025:03445-1 Oct 1, 2025
snpguest · sles 15.6 0.3.2-150600.3.6.1 SUSE-SU-2025:03445-1 Oct 1, 2025
snpguest · sles 15.7 0.10.0-150700.3.3.1 SUSE-SU-2026:0620-1 Feb 24, 2026
thunderbird · RHEL 10 140.3.0-1.el10_0 RHSA-2025:16157 Sep 16, 2025
thunderbird · RHEL 8 0:140.3.0-1.el8_10 RHSA-2025:16589 Sep 24, 2025
thunderbird · RHEL 9 0:140.3.0-1.el9_6 RHSA-2025:16156 Sep 18, 2025
thunderbird · almalinux 8 140.3.0-1.el8_10.alma.1 ALSA-2025:16589 Sep 24, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.