CVE catalog

CVE-2026-93599

aws-nitro-enclaves-binaryblobs-upstream-1.5.2~git0.1c496ed-1.1 on GA media

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.35% · Oct 23, 2026

These are all security issues fixed in the shadowsocks-rust-1.25.0-2.1 package on the GA media of openSUSE Tumbleweed.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Opensuseshadowsocks-rusttumbleweed1.25.0-2.1fixed
Opensusepython-tokenizerstumbleweed0.23.2-1.1fixed
Opensuseobs-service-cargotumbleweed7.2.2-3.1fixed
Ubunturust-rustls-webpki24.040.101.4-4vulnerable
Ubunturust-rustls-webpki24.040.101.7-2.1vulnerable
Ubunturust-rustls-webpki26.040.102.8-5vulnerable
Ubunturust-rustls-webpki26.040.103.7-1vulnerable
Ubunturust-rustls-webpki26.040.103.7-1build1vulnerable
Ubunturust-rustls-webpki26.040.103.9+ds-1vulnerable
Ubunturust-rustls-webpki26.040.103.9+ds-2vulnerable
Debianrust-rustls-webpki130.102.8-5vulnerable
Debianrust-rustls-webpki130.103.10+ds-1vulnerable
Debianrust-rustls-webpki130.103.13+ds-1vulnerable
Debianrust-rustls-webpki130.103.15+ds-1vulnerable
Debianrust-rustls-webpki130.103.4-1vulnerable
Debianrust-rustls-webpki130.103.4-2vulnerable
Debianrust-rustls-webpki130.103.5-1vulnerable
Debianrust-rustls-webpki130.103.6-1vulnerable
Debianrust-rustls-webpki130.103.7-1vulnerable
Debianrust-rustls-webpki130.103.9+ds-1vulnerable
Debianrust-rustls-webpki130.103.9+ds-2vulnerable
Debianrust-rustls-webpki140.102.8-5vulnerable
Debianrust-rustls-webpki140.103.10+ds-1vulnerable
Debianrust-rustls-webpki140.103.4-1vulnerable
Debianrust-rustls-webpki140.103.4-2vulnerable
Debianrust-rustls-webpki140.103.5-1vulnerable
Debianrust-rustls-webpki140.103.6-1vulnerable
Debianrust-rustls-webpki140.103.7-1vulnerable
Debianrust-rustls-webpki140.103.9+ds-1vulnerable
Debianrust-rustls-webpki140.103.9+ds-2vulnerable
Debianrust-rustls-webpki140.103.13+ds-1fixed
Opensusesequoia-sqleap 16.01.5.0-bp160.1.1fixed
Opensuseaws-nitro-enclaves-clitumbleweed1.5.2~git0.1c496ed-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Opensuseshadowsocks-rustrpmtumbleweed1.25.0-2.1Not reportedOPENSUSE-SU-2026:11976-1Not reported
Opensusepython-tokenizersrpmtumbleweed0.23.2-1.1Not reportedOPENSUSE-SU-2026:11936-1Not reported
Opensuseobs-service-cargorpmtumbleweed7.2.2-3.1Not reportedOPENSUSE-SU-2026:11861-1Not reported
Debianrust-rustls-webpkideb140.103.13+ds-1Not reportedDEBIAN-CVE-2026-93599Not reported
Opensusesequoia-sqrpmleap 16.01.5.0-bp160.1.1Not reportedOPENSUSE-RU-2026:22132-1Not reported
Opensuseaws-nitro-enclaves-clirpmtumbleweed1.5.2~git0.1c496ed-1.1Not reportedOPENSUSE-SU-2026:12161-1Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

  • [librust-rustls-webpki-dev]Affected

    Source package: [rust-rustls-webpki]

    Details (2)

    • 0.102.8-5 · all · trixie

      Affected

      pypi · rust-rustls-webpki · debian · 13

    • 0.102.8-5 · all · trixie

      Affected

      pypi · rust-rustls-webpki · debian · 13

[openSUSE Tumbleweed]

  • [aws-nitro-enclaves-cli]Affected

    Source package: [aws-nitro-enclaves-cli]

    Details (1)

    • 1.4.5~git0.18a5f6f-1.2 · x86_64 · tumbleweed

      Affected · Fixed: 1.5.2~git0.1c496ed-1.1

      pypi · aws-nitro-enclaves-cli · opensuse · tumbleweed

  • [obs-service-cargo]Affected

    Source package: [obs-service-cargo]

    Details (1)

    • 7.2.2-2.1 · x86_64 · tumbleweed

      Affected · Fixed: 7.2.2-3.1

      pypi · obs-service-cargo · opensuse · tumbleweed

  • [shadowsocks-rust]Affected

    Source package: [shadowsocks-rust]

    Details (1)

    • 1.24.0-4.3 · x86_64 · tumbleweed

      Affected · Fixed: 1.25.0-2.1

      pypi · shadowsocks-rust · opensuse · tumbleweed

  • [aws-nitro-enclaves-binaryblobs-upstream]Unknown

    Source package: [aws-nitro-enclaves-cli]

    Details (1)

    • 1.4.5~git0.18a5f6f-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.5.2~git0.1c496ed-1.1

      Version impact unknown

      pypi · aws-nitro-enclaves-cli · opensuse · tumbleweed

  • [python313-tokenizers]Unknown

    Source package: [python-tokenizers]

    Details (1)

    • 0.23.1-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 0.23.2-1.1

      Version impact unknown

      pypi · python-tokenizers · opensuse · tumbleweed

  • [python314-tokenizers]Unknown

    Source package: [python-tokenizers]

    Details (1)

    • 0.23.1-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 0.23.2-1.1

      Version impact unknown

      pypi · python-tokenizers · opensuse · tumbleweed

  • [shadowsocks-rust-apparmor]Unknown

    Source package: [shadowsocks-rust]

    Details (1)

    • 1.24.0-4.3 · noarch · tumbleweed

      Unknown · Fixed: 1.25.0-2.1

      Version impact unknown

      pypi · shadowsocks-rust · opensuse · tumbleweed

  • [shadowsocks-rust-selinux]Unknown

    Source package: [shadowsocks-rust]

    Details (1)

    • 1.24.0-4.3 · noarch · tumbleweed

      Unknown · Fixed: 1.25.0-2.1

      Version impact unknown

      pypi · shadowsocks-rust · opensuse · tumbleweed

  • [system-group-ne]Unknown

    Source package: [aws-nitro-enclaves-cli]

    Details (1)

    • 1.4.5~git0.18a5f6f-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.5.2~git0.1c496ed-1.1

      Version impact unknown

      pypi · aws-nitro-enclaves-cli · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]